[TRACKING] Complete support for CycloneDX v1.7

see https://github.com/CycloneDX/specification/releases/tag/1.7

The following items are not currently supported for CycloneDX v1.7 (as of release 11.4.x):

- [ ] external components
- see https://github.com/CycloneDX/cyclonedx-python-lib/pull/959
- [ ] version ranges on components
- requires feature "external components"
- [ ] multiple SPDX License Expressions alongside with other licenses
- [ ] license expression details and properties
- [x] expressing BOM distribution constraints with the Traffic Light Protocol (TLP) in metadata
- via #906
- [ ] representing patent information
- [x] properties on external-references
- via #907
- [ ] citations
- [ ] detailing cryptographic transparency information
- to be continued

----

this library is a community effort.
if you find a feature that you need is missing, feel free to donate/contribute the missing feature.

- see https://github.com/CycloneDX/cyclonedx-python-lib/issues/633

首先阅读 CycloneDX v1.7 发布说明以及此跟踪 issue 中未勾选的项目。查看 pull request #959 中与 external-components 相关的工作，以及已完成的相关 issue #906 和 #907，以了解项目采用的方法。要视为完成，必须实现并测试剩余的 v1.7 功能，包括 external-components、许可证、专利、引用和加密透明度信息。

由索引模型根据 Issue 内容生成。