https://www.andrewhoog.com/posts/how-to-generate-a-nodejs-sbom-in-cyclonedx-format/