Sorry for starting a second packaging effort, I have missed the ITP in the almost 8000 wnpp reports and did a short search on the web interface that did not turn up anything.
Jumping in marc@jenek:~/Development/salsa/debsbom$ debsbom generate ERROR:debsbom.cli:Cannot generate any SBOM because no SBOM format dependencies are available. Install them by enabling the dependency extras `cdx` and/or `spdx`: `pip install debsbom[spdx]`, `pip install debsbom[cdx]`. debsbom: error: Cannot generate any SBOM because no SBOM format dependencies are available. Install them by enabling the dependency extras `cdx` and/or `spdx`: `pip install debsbom[spdx]`, `pip install debsbom[cdx]`. The package declares 2 recommends to the formats (python3-cyclonedx-lib, python3-spdx-tools), shouldn't these be added as a dependency, it seems off to need pip to install a packaged software to get this to work. fwiw, I've used dpkg-licenses [1], I don't know if it is any way useful in this context. [1] https://github.com/daald/dpkg-licenses
