checklist

• have the enums implemented
  • see feat: bom.vulnerabilities data models and enums #419
  • have functional tests for the enums
• have the models implemented
  • see feat: bom.vulnerabilities data models and enums #419
  • requires [BUG] VulnerabilityReference contradicting definition in JSON and XML specification#154
  • have tests for the models
• have normalizer implemented
  • BmRef discriminator must take Vulnerabilities into account. -- feat: base-serializer runs bomRefDiscrimination on vulnerabilities #721
    Maybe it should prefix autogenerated names with the data class name?
  • XML implemented -- XML normalizers vulnerability #726
  • JSON implemented -- feat: bom.vulnerabilities JSON normalization #548
  • !!! must render only for CDX>=1.4
• have integration tests for the normalized & serialized data models
• add VEX & VDR to the keys in github and package.json
• implement depending on see [BUG] VulnerabilityReference contradicting definition in JSON and XML specification#154
  --> implement XML normalization according to CycloneDX/specification/issues/154 #727
• 🏁 remove @beta from models
• 🏁 announce the support in the README.md
• write change log
  • reminder: changes on @beta structures are non-breaking, still need documentation
  • reminder: changes on interfaces are breaking