The plan is to use [Microsoft/sbom-tool](https://github.com/microsoft/sbom-tool) or https://github.com/CycloneDX/cyclonedx-dotnet. This will partly help improve #217. Contributions are welcome.