See https://github.com/CycloneDX/specification/pull/194 Decoupled from https://github.com/CycloneDX/cyclonedx-go/pull/90