bom.xml has no licenses

pom.xml：
...
```

com.lframework
web-starter
1.0.0

org.elasticsearch.client
transport
7.17.21

```
...
Creating BOM:
mvn org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom

component in bom.xml has no licenses and no hashes. like：
```

org.elasticsearch.client
transport
7.17.21
optional
pkg:maven/org.elasticsearch.client/transport@7.17.21?type=jar

```

if remove web-starter dependency, Creating BOM again, components in bom.xml has licenses. or change web-starter dependency version to 1.1.0 ,components in bom.xml has licenses. too.
```

org.elasticsearch.client
transport
7.17.21
Elasticsearch subproject :client:transport

> optional

8acf5fd025d186503a2ebd39a9be3581
4be20c827efad55b27120a294f001e47fb14eaed
2eb185b7a0e0b7402b953a08a6dcac1bfab656f1472ef0f2bc5dc92233bc45a4
....



Elastic License 2.0
https://raw.githubusercontent.com/elastic/elasticsearch/v7.17.21/licenses/ELASTIC-LICENSE-2.0.txt


SSPL-1.0
https://www.mongodb.com/licensing/server-side-public-license


pkg:maven/org.elasticsearch.client/transport@7.17.21?type=jar

```

Start with the pom.xml dependency on com.lframework:web-starter:1.0.0 and reproduce the result using mvn org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom. Compare the generated bom.xml with output after removing web-starter or changing it to 1.1.0. Done means components such as org.elasticsearch.client:transport include licenses and hashes consistently.

Written by the indexing model from the issue text.