[TRACKING] Complete support for CycloneDX v1.7

[jkowalleck]

see https://github.com/CycloneDX/specification/releases/tag/1.7

The following items are not currently supported for CycloneDX v1.7 (as of release 11.4.x):

• external components
  • see feat: add isExternal property to Component for CycloneDX v1.7 #959
• version ranges on components
  • requires feature "external components"
• multiple SPDX License Expressions alongside with other licenses
• license expression details and properties
• expressing BOM distribution constraints with the Traffic Light Protocol (TLP) in metadata
  • via feat: add support for DistributionConstraints in BOM metadata #906
• representing patent information
• properties on external-references
  • via feat: add support for properties in external references #907
• citations
• detailing cryptographic transparency information
• to be continued

---

this library is a community effort.
if you find a feature that you need is missing, feel free to donate/contribute the missing feature.

• see 📣 Call for contribution #633