generate an sbom

[eric-therond]

and compare with https://github.com/CycloneDX/cyclonedx-webpack-plugin