checklist

• have the ENUMs implemented
• have the models implemented
  • requires CycloneDX/specification#154
• have normalizer implemented
  • XML implemented
  • JSON implemented
  • !!! must render only for CDX>+1.4
• have integration tests for the normalized & serialized data models
• no introduced API is in beta sate anymore
• add VEX & Vulnerability Exploitability Exchange & Vulnerability Disclosure Report & VDR to the keys in GitHub
• add VEX & Vulnerability Exploitability Exchange & Vulnerability Disclosure Report & VDR to the keys in package.json