As part of #21, we can expand our support for SBOMs by adding support
for the CycloneDX-1.4 format.