2.0.0

Improved license detection.
Finished Vulnerability capabilities.
Added ComponentEvidence capabilities.

---

BREAKING

• Method Factories.LicenseFactory.makeFromString() was changed in its behavior (#271, #530 via #547)
  It will try to create Models.SpdxLicense if value is eligible,
  else try to create Models.LicenseExpression if value is eligible,
  else fall back to Models.NamedLicense.
• revisited sort and compare:
  • Methods Models.*.compare() may return different numbers than before.
  • Methods Models.*.sorted() may return different orders than before.
• Removed deprecated symbols (#747 via #752)

Changed

• Removed beta state from symbols {Enums,Models}.Vulnerability.* (#164 via #722)
  The structures are defined as stable now.
• Some property/parameter types were widened, enabling the use of Buffer and other data-saving mechanisms (#406, #516 via #753)

Added

• New data models and serialization/normalization for Models.ComponentEvidence (#516 via #753)
• Serializers and Component-Normalizers will take Models.Component.evidence into account (#516 via #753)
• Serializers and Bom-Normalizers will take Models.Bom.vulnerabilities into account (#164 via #722)

Misc

• Internal rework, modernization, refactoring.

API changes v2 - the details

see https://github.com/CycloneDX/cyclonedx-javascript-library/blob/v2.0.0/HISTORY.md#api-changes-v2---the-details

---

Full Changelog: v1.14.0...v2.0.0

---

New Contributors

• @xmasoracle made their first contribution in #722