Skip unwanted component from the dependencies.

Hi Cyclonedx Team,

In our maven project, we use `xxxxx` as a dependency package and from that dependency package, We only use a specific part of the component but cyclonedx scan showing all the components listed in the `xxxxx` package and showing the CVE's for the packages which we are not using in the project.

ex:
```
dep1 -> dep1.1 => Showing CVE but we are not using it.
-> dep1.2 => Showing CVE but we are not using it.
-> dep1.3 => Using in project
-> dep1.4 => Using in project
```

Is there any way to include only the packages used for the end product?

Thanks,
Swapnil Bharshankar

Start by reviewing how the Maven plugin builds its dependency inventory for the CycloneDX scan; the issue provides no file or test entry point. Done would require a documented, supported way to exclude unused transitive components while preserving the components used by the end product.

Written by the indexing model from the issue text.