Follow-up to CycloneDX/cyclonedx-node-yarn#14 (reply in thread)

Definitions in schema:

• Licenses: https://cyclonedx.org/docs/1.5/json/#metadata_licenses
• Properties: https://cyclonedx.org/docs/1.5/json/#metadata_properties

Models should be consistent with JSON schema, whichever one is correct.