based on https://github.com/CycloneDX/cyclonedx-javascript-library/blob/bad2c33cbc13480d09223ded7ae164264010b3ff/examples/web/example.html

should cause a SPDX license expression, like it does on nodejs

should cause a non-empy packageurl.

output is:

• JSON

  {"$schema":"http://cyclonedx.org/schema/bom-1.4.schema.json","bomFormat":"CycloneDX","specVersion":"1.4","version":1,"metadata":{"component":{"type":"application","name":"MyProject","bom-ref":"BomRef.37jhh9s8fm8.h0pa79tlcq4","licenses":[{"license":{"name":"MIT OR Apache-2.0"}}]}},"components":[{"type":"library","name":"myComponentA","group":"acme","version":"1.33.7","bom-ref":"BomRef.5baklf4ahso.il99vjaajao","licenses":[{"license":{"id":"Apache-2.0"}}]}],"dependencies":[{"ref":"BomRef.37jhh9s8fm8.h0pa79tlcq4","dependsOn":["BomRef.5baklf4ahso.il99vjaajao"]},{"ref":"BomRef.5baklf4ahso.il99vjaajao"}]}

• xml

  <bom xmlns="http://cyclonedx.org/schema/bom/1.5" version="1"><metadata><component type="application" bom-ref="BomRef.1pfapsodgso.m872od7jsi4"><name>MyProject</name><licenses><license><name>MIT OR Apache-2.0</name></license></licenses></component></metadata><components><component type="library" bom-ref="BomRef.5ep3p4on298.ih5j85qfqfc"><group>acme</group><name>myComponentA</name><version>1.33.7</version><licenses><license><id>Apache-2.0</id></license></licenses></component></components><dependencies><dependency ref="BomRef.1pfapsodgso.m872od7jsi4"><dependency ref="BomRef.5ep3p4on298.ih5j85qfqfc"/></dependency><dependency ref="BomRef.5ep3p4on298.ih5j85qfqfc"/></dependencies></bom>
  

• it is expected to have a licen sexpresson, but instead a named licenses is used

• it is expected to have a purl, but there is none.