[TRACKING] Complete support for CycloneDX v1.5

[madpah]

see https://github.com/CycloneDX/specification/releases/tag/1.5

The following items are not currently supported for CycloneDX v1.5 (as of release 6.4.x):

• Missing lifecycles on bom.metadata
  see feat: add support for Lifecycles in BOM metadata #698
• Missing modelCard on Component
• Missing data on Component
• Missing bom-ref attribute on OrganizationalContact
  • possible fix: feat: add BomRefs for known models according to CycloneDX 1.5 #859
• Missing bom-ref attribute on OrganizationalEntity
  • see model.contact.OrganizationalEntity missing bom_ref attribute #799
  • possible fix: feat: add BomRefs for known models according to CycloneDX 1.5 #859
• Missing bom-ref attribute on LicenseExpression
  • possible fix: feat: add BomRefs for known models according to CycloneDX 1.5 #859
• Missing licensing on DisjunctiveLicense
• Missing properties on DisjunctiveLicense
• Missing bom-ref attribute on DisjunctiveLicense
  • possible fix: feat: add BomRefs for known models according to CycloneDX 1.5 #859
• Missing identity on ComponentEvidence
  • see feat: add support for component's evidences according to spec #810
  • see feat: deserialize single ComponentEvidence.identity #900
• Missing occurrences on ComponentEvidence
  • see feat: add support for component's evidences according to spec #810
• Missing callstack on ComponentEvidence
  • see feat: add support for component's evidences according to spec #810
• Missing annotations on Bom
• Missing formulation on Bom
• Bom.metadata.tools missing support for components and services along with deprecation of Tool
  • see feat: metadata.tools support components&services #561
  • see AttributeError: There was an AttributeError deserializing JSON to <class 'cyclonedx.model.bom.Bom'> the Property  #597
• to be continued

---

this library is a community effort.
if you find a feature that you need is missing, feel free to donate/contribute the missing feature.

• see 📣 Call for contribution #633

[jkowalleck]

@madpah, I opened this issue for public contribution