change: composer make-bom -> composer CycloneDX:make-sbom

[jkowalleck]

Is your feature request related to a problem? Please describe.

Currently, the functionality of this tool is called via composer make-bom.
This make-bom is ambiguous, since multiple tools may register that same command, and multiple "BOM" standards(CDX, SPDX, ...) and use cases or types(SBOM, VEX, ...) exist.
Therefore, it would be better to scope the command and be more precise about the type.

lets give out make-bom command the namespace CycloneDX.
In Composer/Symfony ecosystem namespaces are separated by :.

Describe the solution you'd like

Current functionality is callable via CycloneDX:make-sbom.
README and docs are reflecting the new call method.

Current functionality is still callable via make-bom in current mayor version, which will output a deprecation warning on StdErr stream, before executing the actual functionality.
Current functionality is no longer callable via make-bom in next mayor version.

Describe alternatives you've considered

none

Additional context

Add any other context or screenshots about the feature request here.

---

status:

• new command added to current version - https://github.com/CycloneDX/cyclonedx-php-composer/releases/tag/v3.11.0
• old command prints a deprecated warning in current version - https://github.com/CycloneDX/cyclonedx-php-composer/releases/tag/v3.11.0
• old command will be removed in next major version - BC: drop deprecated command make-bom #314

[jkowalleck]

Expected outcome: see at the bottom of the output our command in a separate sectipon

composer list
   ______
  / ____/___  ____ ___  ____  ____  ________  _____
 / /   / __ \/ __ `__ \/ __ \/ __ \/ ___/ _ \/ ___/
/ /___/ /_/ / / / / / / /_/ / /_/ (__  )  __/ /
\____/\____/_/ /_/ /_/ .___/\____/____/\___/_/
                    /_/
Composer version 2.5.2 2023-02-04 14:33:22

Usage:
  command [options] [arguments]

Options:
  -h, --help                     Display help for the given command. When no command is given display help for the list command
  -q, --quiet                    Do not output any message
  -V, --version                  Display this application version
      --ansi|--no-ansi           Force (or disable --no-ansi) ANSI output
  -n, --no-interaction           Do not ask any interactive question
      --profile                  Display timing and memory usage information
      --no-plugins               Whether to disable plugins.
      --no-scripts               Skips the execution of all scripts defined in composer.json file.
  -d, --working-dir=WORKING-DIR  If specified, use the given directory as working directory.
      --no-cache                 Prevent use of the cache
  -v|vv|vvv, --verbose           Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug

Available commands:
  about                Shows a short information about Composer
  archive              Creates an archive of this composer package
  audit                Checks for security vulnerability advisories for installed packages
  bin                  Run a command inside a bin namespace
  browse               [home] Opens the package's repository URL or homepage in your browser
  bump                 Increases the lower limit of your composer.json requirements to the currently installed versions
  check-platform-reqs  Check that platform requirements are satisfied
  clear-cache          [clearcache|cc] Clears composer's internal package cache
  completion           Dump the shell completion script
  config               Sets config options
  create-project       Creates new project from a package into given directory
  depends              [why] Shows which packages cause the given package to be installed
  diagnose             Diagnoses the system to identify common errors
  dump-autoload        [dumpautoload] Dumps the autoloader
  exec                 Executes a vendored binary/script
  fund                 Discover how to help fund the maintenance of your dependencies
  global               Allows running commands in the global composer dir ($COMPOSER_HOME)
  help                 Display help for a command
  init                 Creates a basic composer.json file in current directory
  install              [i] Installs the project dependencies from the composer.lock file if present, or falls back on the composer.json
  licenses             Shows information about licenses of dependencies
  list                 List commands
  outdated             Shows a list of installed packages that have updates available, including their latest version
  prohibits            [why-not] Shows which packages prevent the given package from being installed
  reinstall            Uninstalls and reinstalls the given package names
  remove               Removes a package from the require or require-dev
  require              [r] Adds required packages to your composer.json and installs them
  run-script           [run] Runs the scripts defined in composer.json
  search               Searches for packages
  self-update          [selfupdate] Updates composer.phar to the latest version
  show                 [info] Shows information about packages
  status               Shows a list of locally modified packages
  suggests             Shows package suggestions
  update               [u|upgrade] Updates your dependencies to the latest version according to composer.json, and updates the composer.lock file
  validate             Validates a composer.json and composer.lock
 CycloneDX
  CycloneDX:make-sbom  Generate a CycloneDX Bill of Materials from a PHP composer project.

[jkowalleck]

ALL DONE