Feature/bom deps

blocked on daisy/pipeline-framework#51