Feature/evinse python

[prabhu]

https://github.com/HooliCorp/DjanGoat/tree/master

Testing procedure

git clone https://github.com/CycloneDX/cdxgen
cd cdxgen
git checkout feature/evinse-python
npm install

Generate python sbom in deep mode and then run evinse as shown in the repotests below.

https://github.com/CycloneDX/cdxgen/blob/feature/evinse-python/.github/workflows/repotests.yml#L167-L168

cd <python repo>
node <cdxgen git dir>/bin/cdxgen.js -t python -o bom.json --deep --evidence .

What to focus on

• Apps where occurrence evidence is not complete
• Missing route detection (Have tested only with Django and Flask so far)
• Reachables is missing

Known issues

• Print mode in evinse is quite slow.
• Some line numbers in the occurrence array point to empty lines. (This is because we expand decorators and create some fake nodes (init, meta) to solve the flow, and these take up multiple lines that users won't see.)