* new command `bom downloadsources` to download source files
from the URL specified in the BOM.
* all errors result in exit code = 1.
* new option `-source` for command `bom createcomponents` to specify
a folder where to find/store source code files.
* `bom createcomponents`: source code files will only get downloaded if they
do not yet exist locally.
* fix: correct handling of components without releases.