TODO: Information about patches, BOM.json

Jérome writes at https://www.erp5.com/group_section/forum/nxd-bom-XopAhODA1A/view?list_start=5&reset=1#2059332074 :

    I have a few suggestions for this tool:

    - we could also list if a component had patches applied ( for example in
      https://lab.nexedi.com/nexedi/nxd-bom/blob/9273cfb92e1163e786397b7665c62d61830fbb9b/example/ors-bom.txt#L36
      slapos does not really install http://www.python.org/ftp/python/2.7.18/Python-2.7.18.tar.xz it also
      applies a series of patches
      ( https://lab.nexedi.com/nexedi/slapos/blob/035f3382a4d768ea9c702842f3c3c2a1c20d6a21/component/python-2.7/buildout.cfg#L40-45 ).

    - output a machine readable format such as bom.json

-> Make corresponding TODO notes.

nxd-bom

@@ -40,6 +40,7 @@ PkgInfo = namedtuple('PkgInfo', [
     'version',
     'kind',
     'url'])
+    # TODO patches
 
 
 
@@ -247,6 +248,7 @@ def main():
         bom = bom_node(arg)
 
     # print retrieved BOM grouped by kind
+    # TODO also consider emitting machine-readable format, e.g. json if run with --json
     kinds = set()
     for info in bom.values():
         kinds.add(info.kind)