cyclonedx-web-tool/validate false invalid license.id

[mantomas]

Using the hosted version of the cyclonedx-web-tool I discovered that it is flagging some components.licenses.license.id as invalid - example reduced sbom-min.json - if you replace the license with something else (eg. "MIT") it pass.

Is it possible that the tool enum of valid license IDs is incomplete? Both the IDs ("TTWL", "Python-2.0.1") are valid as defined in CDX v1.5. There might be more missing license IDs in the validator, this is just from single SBOM.