caused by https://github.com/CycloneDX/specification/pull/829
caused by CycloneDX/specification#829