Bill of material for Maven-based projects