BC: Properly exclude external packages when preparing this library for web browsers

[jkowalleck]

fixes #883

In fact, this fixes the non-working LicenseFactory and PackageUrlFactory.
Both were unable to load external packages/structs (spdx-expression-parser, PackageURL) and therefore worked incorrectle, without any warning.

This behavior was changed, now the library will crash in browsers, if the externals are not fetched properly.

---

after the fix, the license is SPDX expression, and the purl is present

{"$schema":"http://cyclonedx.org/schema/bom-1.5.schema.json","bomFormat":"CycloneDX","specVersion":"1.5","version":1,"metadata":{"component":{"type":"application","name":"MyProject","bom-ref":"BomRef.3lr3il32iug.rtg99q9kgg","licenses":[{"expression":"MIT OR Apache-2.0"}]}},"components":[{"type":"library","name":"myComponentA","group":"acme","version":"1.33.7","bom-ref":"BomRef.b15pj468j14.scmk07ernt","licenses":[{"license":{"id":"Apache-2.0"}}],"purl":"pkg:npm/acme/myComponentA@1.33.7?"}],"dependencies":[{"ref":"BomRef.3lr3il32iug.rtg99q9kgg","dependsOn":["BomRef.b15pj468j14.scmk07ernt"]},{"ref":"BomRef.b15pj468j14.scmk07ernt"}]}

<bom xmlns="http://cyclonedx.org/schema/bom/1.5" version="1"><metadata><component type="application" bom-ref="BomRef.adtvbq0lig8.o5vk9r7ankk"><name>MyProject</name><licenses><expression>MIT OR Apache-2.0</expression></licenses></component></metadata><components><component type="library" bom-ref="BomRef.fb5p2994am8.8kfa2anmgtc"><group>acme</group><name>myComponentA</name><version>1.33.7</version><licenses><license><id>Apache-2.0</id></license></licenses><purl>pkg:npm/acme/myComponentA@1.33.7?</purl></component></components><dependencies><dependency ref="BomRef.adtvbq0lig8.o5vk9r7ankk"><dependency ref="BomRef.fb5p2994am8.8kfa2anmgtc"/></dependency><dependency ref="BomRef.fb5p2994am8.8kfa2anmgtc"/></dependencies></bom>

[codacy-production]

Coverage summary from Codacy

Merging #880 (f83a788) into main (50de7f6) - See PR on Codacy

Coverage variation	Diff coverage
✅ +0.00% (target: -1.00%)	✅ ∅ (target: 90.00%)

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (50de7f6)	6993	6872	98.27%
Head commit (f83a788)	6993 (+0)	6872 (+0)	98.27% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#880)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences