See https://github.com/CycloneDX/transparency-exchange-api/pull/187#discussion_r2154435024
See #187 (comment)