`License` does not serialize `license_url` to the output.

[schlenk]

The license_url optional field is not serialized to the XML output.
The spec recommends to also add the ExternalReference with type LICENSE, but i would expect the URL in the output, if it is given as part of the License type.

Probably just missing in the code here:

cyclonedx-python-lib/cyclonedx/output/xml.py

Line 159 in 9e80258

if license.license:

Seen using cyclonedx-python-lib 1.3.0, but the code seems identical in the main branch.

[madpah]

Hi @schlenk - thanks for the report. Totally correct here - bug discovered.

Will get this fixed and into the next release (due this week).

[madpah]

https://pypi.org/project/cyclonedx-python-lib/2.0.0/ released.