"components" entries missing a few jars that are in WEB-INF/lib/

Hi !

I'm using this public repository to test things: https://github.com/gsylvie/madness

After running "mvn install" from the "sub8" sub-directory, I'm finding a small disagreement between the generated "bom.json" compared to the actual jars in the build war!

In particular, the war has the following files, which are not mentioned within the "components" section of the sbom:

commons-codec-1.15.jar
httpcore-4.4.13.jar
inoculator-1.0-SNAPSHOT.jar
joda-time-2.10.6.jar

I've carefully lined up the listings here in these two files:

1. https://github.com/gsylvie/madness/blob/master/samples/war-web-inf-lib.txt
2. https://github.com/gsylvie/madness/blob/master/samples/cyclone-dx-components.txt

The generated "bom.json" is here:

3. https://github.com/gsylvie/madness/blob/master/samples/sub8_war_target_bom.json

(But of course you can also "git clone" and "mvn install" to generate it, too! That works as well!)

Reproduce the report by cloning the linked madness repository and running `mvn install` from its `sub8` directory. Compare `samples/war-web-inf-lib.txt`, `samples/cyclone-dx-components.txt`, and `samples/sub8_war_target_bom.json`, focusing on the four listed jars. Done means the generated BOM's `components` section accounts for those jars.

Written by the indexing model from the issue text.