Reference to dependency in CBOM missing

[SilverXen]

Dear cryptodeps authors,

Is it possible to add the dependency module name to the cbom? Currently, only the version is refernced, wich does not help much with the assignment of the detected algorithm, I am afraid.

Example 1:

{
  "type": "cryptographic-asset",
  "name": "RSA",
  "version": "1.3.2",
  "cryptoProperties": {
    "assetType": "algorithm",
    "algorithmProperties": {
      "primitive": "encryption"
    }
  }
},

In the second example I can see that the dependent module is actually known (java-jwt), because the variable is printed instead of the actual value:

Example 2:

{
  "type": "cryptographic-asset",
  "name": "RS384",
  "version": "${java-jwt.version}",
  "cryptoProperties": {
    "assetType": "algorithm",
    "algorithmProperties": {
      "primitive": "signature"
    }
  }
},