First cut for automatic annotations and tagging

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

lib/stages/postgen/postgen.js

@@ -300,7 +300,7 @@ export function annotate(bomJson, _options) {
     (c) => c.name === "cdxgen",
   );
   const metadataAnnotations = textualMetadata(bomJson);
-  if (metadataAnnotations) {
+  if (metadataAnnotations && bomJson.metadata?.component?.["bom-ref"]) {
     bomAnnotations.push({
       "bom-ref": "metadata-annotations",
       subjects: [bomJson.metadata.component["bom-ref"]],