[v2.1.1] `specVersion` attribute available on same way on both normalizers about cyclonedx-php-library

[jkowalleck]

Hello @llaville ,
The requested change is against the current CycloneDX specification.
If you want the spec changed, then please open a ticket here: https://github.com/CycloneDX/specification

Be aware that the Spec is not PHP bound, so the Spec community loves stories, justifications, use-cases and examples in JSON/XML/ProtoBuff. :)

[llaville]

Just in case someone want to analyse XML file contents like that !

<?php


$xmlString = file_get_contents(__DIR__ . '/sbom.xml');

$xml = simplexml_load_string($xmlString, null,  LIBXML_NOCDATA);
$json = json_encode($xml);
$array = json_decode($json,true);

var_dump(
    $array['@attributes'],
    $array['metadata'],
);

That will print

array(2) {
  ["version"]=>
  string(1) "1"
  ["serialNumber"]=>
  string(45) "urn:uuid:d113faca-3f69-445d-8965-c9a4c7899ec8"
}
array(2) {
  ["timestamp"]=>
  string(20) "2023-03-28T12:30:47Z"
  ["tools"]=>
  array(1) {
    ["tool"]=>
    array(3) {
      ["vendor"]=>
      string(11) "box-project"
      ["name"]=>
      string(3) "box"
      ["version"]=>
      string(13) "4.3.8@5534406"
    }
  }
}