Expose licensing information to sbom-tool

[mauve]

From: microsoft/sbom-tool#122

Hi,

I was playing around with sbom-tool and sbom-tool is unable to show any licenses, according to microsoft/sbom-tool#122 that is because sbom-tool relies on this repo to detect dependencies, but the output is missing licensing information.

How tricky is it to add licensing information?

[JamieMagee]

License information is out of scope for Component Detection right now.

Our team helps maintain another project that gathers license information: https://clearlydefined.io/. It has APIs that allow fetching of license information: https://api.clearlydefined.io/api-docs/.

[JamieMagee]

We're closing this as out-of-scope for now. Component Detection is focused on building the dependency graph. This might make more sense in SBOM tool itself.