Add support for metadata introduced in CycloneDX v1.2

[stevespringett]

No description provided.

[CleanHit]

Does my problem in #54 occurs because there is not support for v1.1 meta data?

[sbs2001]

@stevespringett referring to https://cyclonedx.org/docs/1.2/#type_metadata IMHO creating component and authors nodes would be easy. Would that be enough ?

[stevespringett]

@sbs2001 authors is intended for human creators of the SBOM. This tool produces them through automation, so I'd recommend having support for the metadata\component and metadata\tools\tool

In fact, the metadata section wasn't added to the spec until v1.2, so I'm updating the description.

[sbs2001]

@stevespringett awesome !

For metadata\component , we could borrow the code at https://github.com/nexB/scancode-toolkit/blob/839964c205fa76562ec3c24c667183b3d0bb9f5a/src/packagedcode/pypi.py#L302 as a start ?

[sbs2001]

@coderpatros @stevespringett ping

[coderpatros]

Sounds like a reasonable approach to me.

[madpah]

Given PR #221, this issue now relates to the CycloneDX Python Library and not this repository.

Worth noting that the CycloneDX Python Library includes support for metadata.timestamp as of version 0.1.0.

New issue raised in the library project: CycloneDX/cyclonedx-python-lib#6.