diff --git a/cyclonedx_py/_internal/__init__.py b/cyclonedx_py/_internal/__init__.py
index c243ee2b..b76ae1da 100644
--- a/cyclonedx_py/_internal/__init__.py
+++ b/cyclonedx_py/_internal/__init__.py
@@ -48,6 +48,9 @@ def __call__(self, **kwargs: Any) -> 'Bom':  # pragma: no cover
 class PropertyName(Enum):
     # region general
     # see https://github.com/CycloneDX/cyclonedx-property-taxonomy/blob/main/cdx.md
+    BooleanTrue = 'true'
+    BooleanFalse = 'false'
+
     Reproducible = 'cdx:reproducible'
     # region general
 
diff --git a/cyclonedx_py/_internal/cli.py b/cyclonedx_py/_internal/cli.py
index de448cda..cc774861 100644
--- a/cyclonedx_py/_internal/cli.py
+++ b/cyclonedx_py/_internal/cli.py
@@ -90,6 +90,12 @@ def make_argument_parser(cls, sco: ArgumentParser, **kwargs: Any) -> ArgumentPar
                         choices=OutputFormat,
                         type=argparse_type4enum(OutputFormat),
                         default=OutputFormat.JSON.name)
+        op.add_argument('--output-reproducible',
+                        help='Whether to go the extra mile and make the output reproducible.\n'
+                             'This might result in loss of time- and random-based-values.',
+                        action='store_true',
+                        dest='output_reproducible',
+                        default=False)
         if BooleanOptionalAction:
             op.add_argument('--validate',
                             help='Whether validate the result before outputting (default: %(default)s)',
@@ -127,7 +133,7 @@ def make_argument_parser(cls, sco: ArgumentParser, **kwargs: Any) -> ArgumentPar
 
         return p
 
-    __OWN_ARGS = {'outfile', 'schema_version', 'output_format', 'validate'}
+    __OWN_ARGS = {'outfile', 'schema_version', 'output_format', 'reproducible', 'validate'}
 
     @classmethod
     def _clean_kwargs(cls, kwargs: Dict[str, Any]) -> Dict[str, Any]:
@@ -138,6 +144,7 @@ def __init__(self, *,
                  short_purls: bool,
                  output_format: OutputFormat,
                  schema_version: SchemaVersion,
+                 output_reproducible: bool,
                  should_validate: bool,
                  _bbc: Type['BomBuilder'],
                  **kwargs: Any) -> None:
@@ -145,6 +152,7 @@ def __init__(self, *,
         self._short_purls = short_purls
         self._output_format = output_format
         self._schema_version = schema_version
+        self._output_reproducible = output_reproducible
         self._should_validate = should_validate
         self._bbc = _bbc(**self._clean_kwargs(kwargs),
                          logger=self._logger.getChild(_bbc.__name__))
@@ -205,8 +213,18 @@ def _write(self, output: str, outfile: TextIO) -> int:
 
     def _make_output(self, bom: 'Bom') -> str:
         self._logger.info('Serializing SBOM: %s/%s', self._schema_version.to_version(), self._output_format.name)
+        from cyclonedx.model import Property
         from cyclonedx.output import make_outputter
 
+        from . import PropertyName
+
+        if self._output_reproducible:
+            bom.metadata.properties.add(Property(name=PropertyName.Reproducible.value,
+                                                 value=PropertyName.BooleanTrue.value))
+            # dirty hacks to remove these mandatory properties
+            bom.serial_number = None  # type:ignore[assignment]
+            bom.metadata.timestamp = None  # type:ignore[assignment]
+
         return make_outputter(
             bom,
             self._output_format,
diff --git a/tests/__init__.py b/tests/__init__.py
index fe0d816a..f9a8a3b5 100644
--- a/tests/__init__.py
+++ b/tests/__init__.py
@@ -95,8 +95,6 @@ def assertEqualSnapshot(self: Union[TestCase, 'SnapshotMixin'],  # noqa: N802
 def make_xml_comparable(bom: str) -> str:
     bom = bom.replace(_root_file_uri_xml, 'file://.../')
     bom = bom.replace(_root_file_uri_xml_attr, 'file://.../')
-    bom = re.sub(' serialNumber=".+?"', '', bom)
-    bom = re.sub(r'\s*<timestamp>.*?</timestamp>', '', bom)
     bom = bom.replace(  # replace metadata.tools.version
         '        <vendor>CycloneDX</vendor>\n'
         '        <name>cyclonedx-bom</name>\n'
@@ -127,7 +125,6 @@ def make_xml_comparable(bom: str) -> str:
 
 def make_json_comparable(bom: str) -> str:
     bom = bom.replace(_root_file_uri_json, 'file://.../')
-    bom = re.sub(r'\s*"(?:timestamp|serialNumber)": ".+?",?', '', bom)
     bom = bom.replace(  # replace metadata.tools.version
         '        "name": "cyclonedx-bom",\n'
         '        "vendor": "CycloneDX",\n'
diff --git a/tests/_data/snapshots/cli/purls-normal.json.bin b/tests/_data/snapshots/cli/purls-normal.json.bin
index f0ad7d50..2e88d0ba 100644
--- a/tests/_data/snapshots/cli/purls-normal.json.bin
+++ b/tests/_data/snapshots/cli/purls-normal.json.bin
@@ -29,7 +29,13 @@
       "name": "my-app",
       "purl": "pkg:generic/testing/my-app@1",
       "type": "application"
-    }
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ]
   },
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
diff --git a/tests/_data/snapshots/cli/purls-short.json.bin b/tests/_data/snapshots/cli/purls-short.json.bin
index 29fa367c..33d7e39f 100644
--- a/tests/_data/snapshots/cli/purls-short.json.bin
+++ b/tests/_data/snapshots/cli/purls-short.json.bin
@@ -29,7 +29,13 @@
       "name": "my-app",
       "purl": "pkg:generic/testing/my-app@1",
       "type": "application"
-    }
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ]
   },
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
diff --git a/tests/_data/snapshots/environment/venv_editable-self_1.3.json.bin b/tests/_data/snapshots/environment/venv_editable-self_1.3.json.bin
index 988e242d..e351e0f6 100644
--- a/tests/_data/snapshots/environment/venv_editable-self_1.3.json.bin
+++ b/tests/_data/snapshots/environment/venv_editable-self_1.3.json.bin
@@ -42,6 +42,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/environment/venv_editable-self_1.3.xml.bin b/tests/_data/snapshots/environment/venv_editable-self_1.3.xml.bin
index de07fa59..74b98501 100644
--- a/tests/_data/snapshots/environment/venv_editable-self_1.3.xml.bin
+++ b/tests/_data/snapshots/environment/venv_editable-self_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>install the current project as an editable</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="six==1.16.0">
diff --git a/tests/_data/snapshots/environment/venv_editable-self_1.4.json.bin b/tests/_data/snapshots/environment/venv_editable-self_1.4.json.bin
index e2740f78..bcf8d158 100644
--- a/tests/_data/snapshots/environment/venv_editable-self_1.4.json.bin
+++ b/tests/_data/snapshots/environment/venv_editable-self_1.4.json.bin
@@ -42,6 +42,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_editable-self_1.4.xml.bin b/tests/_data/snapshots/environment/venv_editable-self_1.4.xml.bin
index 7f1c9caa..271da970 100644
--- a/tests/_data/snapshots/environment/venv_editable-self_1.4.xml.bin
+++ b/tests/_data/snapshots/environment/venv_editable-self_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>install the current project as an editable</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="six==1.16.0">
diff --git a/tests/_data/snapshots/environment/venv_editable-self_1.5.json.bin b/tests/_data/snapshots/environment/venv_editable-self_1.5.json.bin
index 3887a176..8a80a1fd 100644
--- a/tests/_data/snapshots/environment/venv_editable-self_1.5.json.bin
+++ b/tests/_data/snapshots/environment/venv_editable-self_1.5.json.bin
@@ -42,6 +42,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_editable-self_1.5.xml.bin b/tests/_data/snapshots/environment/venv_editable-self_1.5.xml.bin
index 016d2d59..607ea275 100644
--- a/tests/_data/snapshots/environment/venv_editable-self_1.5.xml.bin
+++ b/tests/_data/snapshots/environment/venv_editable-self_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>install the current project as an editable</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="six==1.16.0">
diff --git a/tests/_data/snapshots/environment/venv_local_1.3.json.bin b/tests/_data/snapshots/environment/venv_local_1.3.json.bin
index bf2d83c1..3e09434a 100644
--- a/tests/_data/snapshots/environment/venv_local_1.3.json.bin
+++ b/tests/_data/snapshots/environment/venv_local_1.3.json.bin
@@ -98,6 +98,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/environment/venv_local_1.3.xml.bin b/tests/_data/snapshots/environment/venv_local_1.3.xml.bin
index b2491503..9c663c20 100644
--- a/tests/_data/snapshots/environment/venv_local_1.3.xml.bin
+++ b/tests/_data/snapshots/environment/venv_local_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a==23.42">
diff --git a/tests/_data/snapshots/environment/venv_local_1.4.json.bin b/tests/_data/snapshots/environment/venv_local_1.4.json.bin
index 0f7ce3f8..e6298492 100644
--- a/tests/_data/snapshots/environment/venv_local_1.4.json.bin
+++ b/tests/_data/snapshots/environment/venv_local_1.4.json.bin
@@ -98,6 +98,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_local_1.4.xml.bin b/tests/_data/snapshots/environment/venv_local_1.4.xml.bin
index f63bcb52..c3ad1442 100644
--- a/tests/_data/snapshots/environment/venv_local_1.4.xml.bin
+++ b/tests/_data/snapshots/environment/venv_local_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a==23.42">
diff --git a/tests/_data/snapshots/environment/venv_local_1.5.json.bin b/tests/_data/snapshots/environment/venv_local_1.5.json.bin
index 9db516ef..948eeb0b 100644
--- a/tests/_data/snapshots/environment/venv_local_1.5.json.bin
+++ b/tests/_data/snapshots/environment/venv_local_1.5.json.bin
@@ -98,6 +98,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_local_1.5.xml.bin b/tests/_data/snapshots/environment/venv_local_1.5.xml.bin
index c98ce8fa..13138e0a 100644
--- a/tests/_data/snapshots/environment/venv_local_1.5.xml.bin
+++ b/tests/_data/snapshots/environment/venv_local_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a==23.42">
diff --git a/tests/_data/snapshots/environment/venv_no-deps_1.3.json.bin b/tests/_data/snapshots/environment/venv_no-deps_1.3.json.bin
index 0e68e583..51944f0f 100644
--- a/tests/_data/snapshots/environment/venv_no-deps_1.3.json.bin
+++ b/tests/_data/snapshots/environment/venv_no-deps_1.3.json.bin
@@ -17,6 +17,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/environment/venv_no-deps_1.3.xml.bin b/tests/_data/snapshots/environment/venv_no-deps_1.3.xml.bin
index bb7c9d9f..6b024c83 100644
--- a/tests/_data/snapshots/environment/venv_no-deps_1.3.xml.bin
+++ b/tests/_data/snapshots/environment/venv_no-deps_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/environment/venv_no-deps_1.4.json.bin b/tests/_data/snapshots/environment/venv_no-deps_1.4.json.bin
index c08f4eca..00aae6df 100644
--- a/tests/_data/snapshots/environment/venv_no-deps_1.4.json.bin
+++ b/tests/_data/snapshots/environment/venv_no-deps_1.4.json.bin
@@ -17,6 +17,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_no-deps_1.4.xml.bin b/tests/_data/snapshots/environment/venv_no-deps_1.4.xml.bin
index a6ae68bb..fdc1f9a7 100644
--- a/tests/_data/snapshots/environment/venv_no-deps_1.4.xml.bin
+++ b/tests/_data/snapshots/environment/venv_no-deps_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/environment/venv_no-deps_1.5.json.bin b/tests/_data/snapshots/environment/venv_no-deps_1.5.json.bin
index a25741c6..788abb29 100644
--- a/tests/_data/snapshots/environment/venv_no-deps_1.5.json.bin
+++ b/tests/_data/snapshots/environment/venv_no-deps_1.5.json.bin
@@ -17,6 +17,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_no-deps_1.5.xml.bin b/tests/_data/snapshots/environment/venv_no-deps_1.5.xml.bin
index 461db07e..05b343fe 100644
--- a/tests/_data/snapshots/environment/venv_no-deps_1.5.xml.bin
+++ b/tests/_data/snapshots/environment/venv_no-deps_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/environment/venv_with-extras_1.3.json.bin b/tests/_data/snapshots/environment/venv_with-extras_1.3.json.bin
index 42bbd250..d1dc3e38 100644
--- a/tests/_data/snapshots/environment/venv_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/environment/venv_with-extras_1.3.json.bin
@@ -1029,6 +1029,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/environment/venv_with-extras_1.3.xml.bin b/tests/_data/snapshots/environment/venv_with-extras_1.3.xml.bin
index db5aa4d1..52267114 100644
--- a/tests/_data/snapshots/environment/venv_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/environment/venv_with-extras_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/environment/venv_with-extras_1.4.json.bin b/tests/_data/snapshots/environment/venv_with-extras_1.4.json.bin
index dfcfa12d..7981de21 100644
--- a/tests/_data/snapshots/environment/venv_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/environment/venv_with-extras_1.4.json.bin
@@ -1029,6 +1029,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_with-extras_1.4.xml.bin b/tests/_data/snapshots/environment/venv_with-extras_1.4.xml.bin
index 17fb8afa..7c3479cd 100644
--- a/tests/_data/snapshots/environment/venv_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/environment/venv_with-extras_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/environment/venv_with-extras_1.5.json.bin b/tests/_data/snapshots/environment/venv_with-extras_1.5.json.bin
index 3b4c2ede..80e13924 100644
--- a/tests/_data/snapshots/environment/venv_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/environment/venv_with-extras_1.5.json.bin
@@ -1029,6 +1029,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_with-extras_1.5.xml.bin b/tests/_data/snapshots/environment/venv_with-extras_1.5.xml.bin
index 9e56e5c9..16b60a61 100644
--- a/tests/_data/snapshots/environment/venv_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/environment/venv_with-extras_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/environment/venv_with-urls_1.3.json.bin b/tests/_data/snapshots/environment/venv_with-urls_1.3.json.bin
index ab5831e1..93afaba8 100644
--- a/tests/_data/snapshots/environment/venv_with-urls_1.3.json.bin
+++ b/tests/_data/snapshots/environment/venv_with-urls_1.3.json.bin
@@ -142,6 +142,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/environment/venv_with-urls_1.3.xml.bin b/tests/_data/snapshots/environment/venv_with-urls_1.3.xml.bin
index c149459f..dc27cd5d 100644
--- a/tests/_data/snapshots/environment/venv_with-urls_1.3.xml.bin
+++ b/tests/_data/snapshots/environment/venv_with-urls_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="packaging==23.2">
diff --git a/tests/_data/snapshots/environment/venv_with-urls_1.4.json.bin b/tests/_data/snapshots/environment/venv_with-urls_1.4.json.bin
index 07a7ddf1..b4a20533 100644
--- a/tests/_data/snapshots/environment/venv_with-urls_1.4.json.bin
+++ b/tests/_data/snapshots/environment/venv_with-urls_1.4.json.bin
@@ -142,6 +142,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_with-urls_1.4.xml.bin b/tests/_data/snapshots/environment/venv_with-urls_1.4.xml.bin
index 7c31ca82..277e2add 100644
--- a/tests/_data/snapshots/environment/venv_with-urls_1.4.xml.bin
+++ b/tests/_data/snapshots/environment/venv_with-urls_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="packaging==23.2">
diff --git a/tests/_data/snapshots/environment/venv_with-urls_1.5.json.bin b/tests/_data/snapshots/environment/venv_with-urls_1.5.json.bin
index cad40fd3..a4e0d3bc 100644
--- a/tests/_data/snapshots/environment/venv_with-urls_1.5.json.bin
+++ b/tests/_data/snapshots/environment/venv_with-urls_1.5.json.bin
@@ -142,6 +142,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/environment/venv_with-urls_1.5.xml.bin b/tests/_data/snapshots/environment/venv_with-urls_1.5.xml.bin
index 0c6a9a75..0776367a 100644
--- a/tests/_data/snapshots/environment/venv_with-urls_1.5.xml.bin
+++ b/tests/_data/snapshots/environment/venv_with-urls_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="packaging==23.2">
diff --git a/tests/_data/snapshots/pipenv/file_category-deps_1.3.json.bin b/tests/_data/snapshots/pipenv/file_category-deps_1.3.json.bin
index 8f03271c..bf5f1400 100644
--- a/tests/_data/snapshots/pipenv/file_category-deps_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_category-deps_1.3.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_category-deps_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_category-deps_1.3.xml.bin
index 2d69fbd9..66ddf3f3 100644
--- a/tests/_data/snapshots/pipenv/file_category-deps_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_category-deps_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml==0.10.2">
diff --git a/tests/_data/snapshots/pipenv/file_category-deps_1.4.json.bin b/tests/_data/snapshots/pipenv/file_category-deps_1.4.json.bin
index d5f82957..4ab1f8f5 100644
--- a/tests/_data/snapshots/pipenv/file_category-deps_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_category-deps_1.4.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_category-deps_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_category-deps_1.4.xml.bin
index d94d68c7..f6c5bdc1 100644
--- a/tests/_data/snapshots/pipenv/file_category-deps_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_category-deps_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml==0.10.2">
diff --git a/tests/_data/snapshots/pipenv/file_category-deps_1.5.json.bin b/tests/_data/snapshots/pipenv/file_category-deps_1.5.json.bin
index b9dfb20f..7697d684 100644
--- a/tests/_data/snapshots/pipenv/file_category-deps_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_category-deps_1.5.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_category-deps_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_category-deps_1.5.xml.bin
index 9c800b74..17c7825a 100644
--- a/tests/_data/snapshots/pipenv/file_category-deps_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_category-deps_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml==0.10.2">
diff --git a/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.json.bin b/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.json.bin
index 61d5a130..af4a6d9c 100644
--- a/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.json.bin
@@ -80,6 +80,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.xml.bin
index c8e64be6..166d4c3e 100644
--- a/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_default-and-dev_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>default and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama==0.4.6">
diff --git a/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.json.bin b/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.json.bin
index 408580c6..3b30cd66 100644
--- a/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.json.bin
@@ -80,6 +80,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.xml.bin
index dedb7066..f236015a 100644
--- a/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_default-and-dev_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>default and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama==0.4.6">
diff --git a/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.json.bin b/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.json.bin
index 99ceb363..3cfb9c32 100644
--- a/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.json.bin
@@ -80,6 +80,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.xml.bin
index 869c6151..4195089e 100644
--- a/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_default-and-dev_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>default and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama==0.4.6">
diff --git a/tests/_data/snapshots/pipenv/file_editable-self_1.3.json.bin b/tests/_data/snapshots/pipenv/file_editable-self_1.3.json.bin
index 84b8ac78..ff13d796 100644
--- a/tests/_data/snapshots/pipenv/file_editable-self_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_editable-self_1.3.json.bin
@@ -18,6 +18,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_editable-self_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_editable-self_1.3.xml.bin
index d3dac7d0..f549a582 100644
--- a/tests/_data/snapshots/pipenv/file_editable-self_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_editable-self_1.3.xml.bin
@@ -21,6 +21,9 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/pipenv/file_editable-self_1.4.json.bin b/tests/_data/snapshots/pipenv/file_editable-self_1.4.json.bin
index 3d61f138..1bd3f8a4 100644
--- a/tests/_data/snapshots/pipenv/file_editable-self_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_editable-self_1.4.json.bin
@@ -18,6 +18,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_editable-self_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_editable-self_1.4.xml.bin
index cca4514a..1b93b263 100644
--- a/tests/_data/snapshots/pipenv/file_editable-self_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_editable-self_1.4.xml.bin
@@ -48,6 +48,9 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/pipenv/file_editable-self_1.5.json.bin b/tests/_data/snapshots/pipenv/file_editable-self_1.5.json.bin
index d582f6bc..b587a645 100644
--- a/tests/_data/snapshots/pipenv/file_editable-self_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_editable-self_1.5.json.bin
@@ -18,6 +18,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_editable-self_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_editable-self_1.5.xml.bin
index ea1d4c82..d10c0937 100644
--- a/tests/_data/snapshots/pipenv/file_editable-self_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_editable-self_1.5.xml.bin
@@ -48,6 +48,9 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/pipenv/file_local_1.3.json.bin b/tests/_data/snapshots/pipenv/file_local_1.3.json.bin
index c450c714..2b17976e 100644
--- a/tests/_data/snapshots/pipenv/file_local_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_local_1.3.json.bin
@@ -92,6 +92,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_local_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_local_1.3.xml.bin
index d24ac95e..990af727 100644
--- a/tests/_data/snapshots/pipenv/file_local_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_local_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a">
diff --git a/tests/_data/snapshots/pipenv/file_local_1.4.json.bin b/tests/_data/snapshots/pipenv/file_local_1.4.json.bin
index 0a298451..ef125263 100644
--- a/tests/_data/snapshots/pipenv/file_local_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_local_1.4.json.bin
@@ -89,6 +89,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_local_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_local_1.4.xml.bin
index 6cf6c55b..50889d88 100644
--- a/tests/_data/snapshots/pipenv/file_local_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_local_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a">
diff --git a/tests/_data/snapshots/pipenv/file_local_1.5.json.bin b/tests/_data/snapshots/pipenv/file_local_1.5.json.bin
index f979f8f6..43c61ebd 100644
--- a/tests/_data/snapshots/pipenv/file_local_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_local_1.5.json.bin
@@ -89,6 +89,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_local_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_local_1.5.xml.bin
index 5152904f..71421f86 100644
--- a/tests/_data/snapshots/pipenv/file_local_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_local_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a">
diff --git a/tests/_data/snapshots/pipenv/file_no-deps_1.3.json.bin b/tests/_data/snapshots/pipenv/file_no-deps_1.3.json.bin
index 0e68e583..51944f0f 100644
--- a/tests/_data/snapshots/pipenv/file_no-deps_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_no-deps_1.3.json.bin
@@ -17,6 +17,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_no-deps_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_no-deps_1.3.xml.bin
index bb7c9d9f..6b024c83 100644
--- a/tests/_data/snapshots/pipenv/file_no-deps_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_no-deps_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/pipenv/file_no-deps_1.4.json.bin b/tests/_data/snapshots/pipenv/file_no-deps_1.4.json.bin
index c08f4eca..00aae6df 100644
--- a/tests/_data/snapshots/pipenv/file_no-deps_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_no-deps_1.4.json.bin
@@ -17,6 +17,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_no-deps_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_no-deps_1.4.xml.bin
index a6ae68bb..fdc1f9a7 100644
--- a/tests/_data/snapshots/pipenv/file_no-deps_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_no-deps_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/pipenv/file_no-deps_1.5.json.bin b/tests/_data/snapshots/pipenv/file_no-deps_1.5.json.bin
index a25741c6..788abb29 100644
--- a/tests/_data/snapshots/pipenv/file_no-deps_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_no-deps_1.5.json.bin
@@ -17,6 +17,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_no-deps_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_no-deps_1.5.xml.bin
index 461db07e..05b343fe 100644
--- a/tests/_data/snapshots/pipenv/file_no-deps_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_no-deps_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="root-component"/>
diff --git a/tests/_data/snapshots/pipenv/file_private-packages_1.3.json.bin b/tests/_data/snapshots/pipenv/file_private-packages_1.3.json.bin
index d71bd4aa..20c79314 100644
--- a/tests/_data/snapshots/pipenv/file_private-packages_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_private-packages_1.3.json.bin
@@ -113,6 +113,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_private-packages_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_private-packages_1.3.xml.bin
index 154e24d5..818da578 100644
--- a/tests/_data/snapshots/pipenv/file_private-packages_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_private-packages_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="numpy==1.26.2">
diff --git a/tests/_data/snapshots/pipenv/file_private-packages_1.4.json.bin b/tests/_data/snapshots/pipenv/file_private-packages_1.4.json.bin
index af5b7b5b..ca448b73 100644
--- a/tests/_data/snapshots/pipenv/file_private-packages_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_private-packages_1.4.json.bin
@@ -113,6 +113,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_private-packages_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_private-packages_1.4.xml.bin
index e3761d08..c2c5dbc8 100644
--- a/tests/_data/snapshots/pipenv/file_private-packages_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_private-packages_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="numpy==1.26.2">
diff --git a/tests/_data/snapshots/pipenv/file_private-packages_1.5.json.bin b/tests/_data/snapshots/pipenv/file_private-packages_1.5.json.bin
index 0b545897..6f057c2b 100644
--- a/tests/_data/snapshots/pipenv/file_private-packages_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_private-packages_1.5.json.bin
@@ -113,6 +113,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_private-packages_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_private-packages_1.5.xml.bin
index 5833d110..dc6b7407 100644
--- a/tests/_data/snapshots/pipenv/file_private-packages_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_private-packages_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="numpy==1.26.2">
diff --git a/tests/_data/snapshots/pipenv/file_with-extras_1.3.json.bin b/tests/_data/snapshots/pipenv/file_with-extras_1.3.json.bin
index 44836581..d94a3448 100644
--- a/tests/_data/snapshots/pipenv/file_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_with-extras_1.3.json.bin
@@ -1599,6 +1599,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_with-extras_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_with-extras_1.3.xml.bin
index 855f28f9..15f27e1e 100644
--- a/tests/_data/snapshots/pipenv/file_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_with-extras_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/file_with-extras_1.4.json.bin b/tests/_data/snapshots/pipenv/file_with-extras_1.4.json.bin
index 02f063e8..641ff2d3 100644
--- a/tests/_data/snapshots/pipenv/file_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_with-extras_1.4.json.bin
@@ -1599,6 +1599,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_with-extras_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_with-extras_1.4.xml.bin
index eab607ee..8f34c5e4 100644
--- a/tests/_data/snapshots/pipenv/file_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_with-extras_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/file_with-extras_1.5.json.bin b/tests/_data/snapshots/pipenv/file_with-extras_1.5.json.bin
index 0333f94b..9707f3a4 100644
--- a/tests/_data/snapshots/pipenv/file_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_with-extras_1.5.json.bin
@@ -1599,6 +1599,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_with-extras_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_with-extras_1.5.xml.bin
index 3dc514a0..c37a0619 100644
--- a/tests/_data/snapshots/pipenv/file_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_with-extras_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/file_with-urls_1.3.json.bin b/tests/_data/snapshots/pipenv/file_with-urls_1.3.json.bin
index e1a2918c..0329fdce 100644
--- a/tests/_data/snapshots/pipenv/file_with-urls_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/file_with-urls_1.3.json.bin
@@ -557,6 +557,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/file_with-urls_1.3.xml.bin b/tests/_data/snapshots/pipenv/file_with-urls_1.3.xml.bin
index 6462bf2d..eb868f4a 100644
--- a/tests/_data/snapshots/pipenv/file_with-urls_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_with-urls_1.3.xml.bin
@@ -18,6 +18,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="certifi==2023.11.17">
diff --git a/tests/_data/snapshots/pipenv/file_with-urls_1.4.json.bin b/tests/_data/snapshots/pipenv/file_with-urls_1.4.json.bin
index dfdbdfaa..3feac8eb 100644
--- a/tests/_data/snapshots/pipenv/file_with-urls_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/file_with-urls_1.4.json.bin
@@ -553,6 +553,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_with-urls_1.4.xml.bin b/tests/_data/snapshots/pipenv/file_with-urls_1.4.xml.bin
index 5d311776..074cc88c 100644
--- a/tests/_data/snapshots/pipenv/file_with-urls_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_with-urls_1.4.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="certifi==2023.11.17">
diff --git a/tests/_data/snapshots/pipenv/file_with-urls_1.5.json.bin b/tests/_data/snapshots/pipenv/file_with-urls_1.5.json.bin
index 456367ce..2ca69834 100644
--- a/tests/_data/snapshots/pipenv/file_with-urls_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/file_with-urls_1.5.json.bin
@@ -553,6 +553,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/file_with-urls_1.5.xml.bin b/tests/_data/snapshots/pipenv/file_with-urls_1.5.xml.bin
index 17f3c9f2..b2c264d9 100644
--- a/tests/_data/snapshots/pipenv/file_with-urls_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/file_with-urls_1.5.xml.bin
@@ -45,6 +45,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="certifi==2023.11.17">
diff --git a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.json.bin b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.json.bin
index 9c9504ac..e8443665 100644
--- a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.json.bin
@@ -103,6 +103,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.xml.bin b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.xml.bin
index f04a1c02..6fa2d94e 100644
--- a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="numpy==1.26.2">
diff --git a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.json.bin b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.json.bin
index d32604bb..e33ce3cb 100644
--- a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.json.bin
@@ -103,6 +103,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.xml.bin b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.xml.bin
index c7bb8ba7..c270f947 100644
--- a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="numpy==1.26.2">
diff --git a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.json.bin b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.json.bin
index 8da4444d..a375099f 100644
--- a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.json.bin
@@ -103,6 +103,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.xml.bin b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.xml.bin
index 00092843..d4f0361d 100644
--- a/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/pypi-mirror_private-packages_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="numpy==1.26.2">
diff --git a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.json.bin b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.json.bin
index e56ecab7..d6e23efd 100644
--- a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.json.bin
@@ -272,6 +272,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.xml.bin b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.xml.bin
index d7cd5fa9..784cefbd 100644
--- a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.json.bin b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.json.bin
index acaedf8b..a78ebf22 100644
--- a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.json.bin
@@ -272,6 +272,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.xml.bin b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.xml.bin
index b0b3a9af..5648fc50 100644
--- a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.json.bin b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.json.bin
index daf7cd3b..7d64ee96 100644
--- a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.json.bin
@@ -272,6 +272,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.xml.bin b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.xml.bin
index bb227a0f..5e96fad6 100644
--- a/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/some-categories_category-deps_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.json.bin b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.json.bin
index 5395d5fa..209e8cb1 100644
--- a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.json.bin
@@ -235,6 +235,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.xml.bin b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.xml.bin
index b947f9e8..be7b125e 100644
--- a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.json.bin b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.json.bin
index 1b20c0ac..e0b64e60 100644
--- a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.json.bin
@@ -235,6 +235,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.xml.bin b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.xml.bin
index ecafcdc3..a9b333bb 100644
--- a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.json.bin b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.json.bin
index fa10aaf8..908c84e2 100644
--- a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.json.bin
@@ -235,6 +235,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.xml.bin b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.xml.bin
index 1380989d..2ed5b691 100644
--- a/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/with-dev_default-and-dev_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow==1.3.0">
diff --git a/tests/_data/snapshots/poetry/group-deps_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/group-deps_lock11_1.3.json.bin
index f8c6b8a0..7c9ce9ab 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock11_1.3.json.bin
@@ -321,6 +321,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/group-deps_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/group-deps_lock11_1.3.xml.bin
index 144913d9..f8a0a8d5 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/group-deps_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/group-deps_lock11_1.4.json.bin
index 18d1e493..f90b33b5 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock11_1.4.json.bin
@@ -321,6 +321,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/group-deps_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/group-deps_lock11_1.4.xml.bin
index 039c2b63..99a61427 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/group-deps_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/group-deps_lock11_1.5.json.bin
index a1696501..155bcb7e 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock11_1.5.json.bin
@@ -321,6 +321,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/group-deps_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/group-deps_lock11_1.5.xml.bin
index e17a8606..d9515fb0 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/group-deps_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/group-deps_lock20_1.3.json.bin
index b6dde37b..5e7368e1 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock20_1.3.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/group-deps_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/group-deps_lock20_1.3.xml.bin
index b6cca933..085224be 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/group-deps_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/group-deps_lock20_1.4.json.bin
index 1001840a..7e3db0bb 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock20_1.4.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/group-deps_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/group-deps_lock20_1.4.xml.bin
index 4d1549fd..6bb8b4c3 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/group-deps_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/group-deps_lock20_1.5.json.bin
index 2888bf97..2a23a3b3 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock20_1.5.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/group-deps_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/group-deps_lock20_1.5.xml.bin
index 55a4759c..d2f38aca 100644
--- a/tests/_data/snapshots/poetry/group-deps_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/group-deps_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/local_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/local_lock10_1.3.json.bin
index c7362720..8b631e7f 100644
--- a/tests/_data/snapshots/poetry/local_lock10_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock10_1.3.json.bin
@@ -77,6 +77,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/local_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/local_lock10_1.3.xml.bin
index 652604dc..59b1587d 100644
--- a/tests/_data/snapshots/poetry/local_lock10_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock10_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/local_lock10_1.4.json.bin
index c6aa1de9..22dd7272 100644
--- a/tests/_data/snapshots/poetry/local_lock10_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock10_1.4.json.bin
@@ -77,6 +77,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/local_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/local_lock10_1.4.xml.bin
index 0d9d88be..c7fa4536 100644
--- a/tests/_data/snapshots/poetry/local_lock10_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock10_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/local_lock10_1.5.json.bin
index 1aee68d4..a6752f97 100644
--- a/tests/_data/snapshots/poetry/local_lock10_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock10_1.5.json.bin
@@ -77,6 +77,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/local_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/local_lock10_1.5.xml.bin
index 8a35f37d..c2e27207 100644
--- a/tests/_data/snapshots/poetry/local_lock10_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock10_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/local_lock11_1.3.json.bin
index b2f470fb..799ca196 100644
--- a/tests/_data/snapshots/poetry/local_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock11_1.3.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/local_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/local_lock11_1.3.xml.bin
index 65da5a87..8c5b3db8 100644
--- a/tests/_data/snapshots/poetry/local_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/local_lock11_1.4.json.bin
index 57ee0bd6..9b7c5e77 100644
--- a/tests/_data/snapshots/poetry/local_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock11_1.4.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/local_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/local_lock11_1.4.xml.bin
index e7e26904..26fe0e86 100644
--- a/tests/_data/snapshots/poetry/local_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/local_lock11_1.5.json.bin
index 490beef1..7abf6e76 100644
--- a/tests/_data/snapshots/poetry/local_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock11_1.5.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/local_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/local_lock11_1.5.xml.bin
index db78b01a..7c158e6b 100644
--- a/tests/_data/snapshots/poetry/local_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/local_lock20_1.3.json.bin
index b2f470fb..799ca196 100644
--- a/tests/_data/snapshots/poetry/local_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock20_1.3.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/local_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/local_lock20_1.3.xml.bin
index 65da5a87..8c5b3db8 100644
--- a/tests/_data/snapshots/poetry/local_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/local_lock20_1.4.json.bin
index 57ee0bd6..9b7c5e77 100644
--- a/tests/_data/snapshots/poetry/local_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock20_1.4.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/local_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/local_lock20_1.4.xml.bin
index e7e26904..26fe0e86 100644
--- a/tests/_data/snapshots/poetry/local_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/local_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/local_lock20_1.5.json.bin
index 490beef1..7abf6e76 100644
--- a/tests/_data/snapshots/poetry/local_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/local_lock20_1.5.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/local_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/local_lock20_1.5.xml.bin
index db78b01a..7c158e6b 100644
--- a/tests/_data/snapshots/poetry/local_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/local_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from local paths</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="package-a@23.42">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.json.bin
index 8affa7d9..0b6c0c8f 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.json.bin
@@ -245,6 +245,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.xml.bin
index 588b21a9..ceefbe21 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.json.bin
index e4280ba1..003e0d62 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.json.bin
@@ -245,6 +245,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.xml.bin
index ca716ae2..e084b603 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.json.bin
index d97e04e6..0110a1b6 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.json.bin
@@ -245,6 +245,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.xml.bin
index fe28a996..5218aa98 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock10_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.json.bin
index 6ef9e0a5..6bf2d91c 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.json.bin
@@ -317,6 +317,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.xml.bin
index 56ca6a9c..8669b5f9 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.json.bin
index 8388725a..dfe326a2 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.json.bin
@@ -317,6 +317,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.xml.bin
index d21af018..01af8426 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.json.bin
index 0f641256..d4336606 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.json.bin
@@ -317,6 +317,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.xml.bin
index bb1e72f9..e9cfa7ff 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.json.bin
index 4a45bee2..e38ae0d9 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.xml.bin
index 214c6a82..7d0eee4d 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.json.bin
index 7707730a..775514f6 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.xml.bin
index 1c1b3501..afea6987 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.json.bin
index fd1632c2..809b6e0a 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.xml.bin
index 7cf85b1a..16dbc8d9 100644
--- a/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/main-and-dev_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>main and dev depenndencies</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/no-deps_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/no-deps_lock20_1.3.json.bin
index 76cf3cdb..332f4ffb 100644
--- a/tests/_data/snapshots/poetry/no-deps_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/no-deps_lock20_1.3.json.bin
@@ -50,6 +50,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/no-deps_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/no-deps_lock20_1.3.xml.bin
index d437722a..d609a7fa 100644
--- a/tests/_data/snapshots/poetry/no-deps_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/no-deps_lock20_1.3.xml.bin
@@ -48,6 +48,9 @@
         </reference>
       </externalReferences>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="no-deps"/>
diff --git a/tests/_data/snapshots/poetry/no-deps_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/no-deps_lock20_1.4.json.bin
index 0ce8883f..132c41c4 100644
--- a/tests/_data/snapshots/poetry/no-deps_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/no-deps_lock20_1.4.json.bin
@@ -50,6 +50,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/no-deps_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/no-deps_lock20_1.4.xml.bin
index 6539cf43..f6545012 100644
--- a/tests/_data/snapshots/poetry/no-deps_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/no-deps_lock20_1.4.xml.bin
@@ -75,6 +75,9 @@
         </reference>
       </externalReferences>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="no-deps"/>
diff --git a/tests/_data/snapshots/poetry/no-deps_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/no-deps_lock20_1.5.json.bin
index 4de17edb..e68a70f9 100644
--- a/tests/_data/snapshots/poetry/no-deps_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/no-deps_lock20_1.5.json.bin
@@ -50,6 +50,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/no-deps_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/no-deps_lock20_1.5.xml.bin
index 65222440..d4a2a958 100644
--- a/tests/_data/snapshots/poetry/no-deps_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/no-deps_lock20_1.5.xml.bin
@@ -75,6 +75,9 @@
         </reference>
       </externalReferences>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="no-deps"/>
diff --git a/tests/_data/snapshots/poetry/no-dev_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/no-dev_lock11_1.3.json.bin
index 7a0b172e..b1963871 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock11_1.3.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/no-dev_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/no-dev_lock11_1.3.xml.bin
index 8feff151..862e229d 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml@0.10.2">
diff --git a/tests/_data/snapshots/poetry/no-dev_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/no-dev_lock11_1.4.json.bin
index dae2642f..667fdaa3 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock11_1.4.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/no-dev_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/no-dev_lock11_1.4.xml.bin
index 35cae920..5f6bedbc 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml@0.10.2">
diff --git a/tests/_data/snapshots/poetry/no-dev_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/no-dev_lock11_1.5.json.bin
index 25d06d0b..f7dda794 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock11_1.5.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/no-dev_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/no-dev_lock11_1.5.xml.bin
index b5dd578e..69719a18 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml@0.10.2">
diff --git a/tests/_data/snapshots/poetry/no-dev_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/no-dev_lock20_1.3.json.bin
index 7a0b172e..b1963871 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock20_1.3.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/no-dev_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/no-dev_lock20_1.3.xml.bin
index 8feff151..862e229d 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml@0.10.2">
diff --git a/tests/_data/snapshots/poetry/no-dev_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/no-dev_lock20_1.4.json.bin
index dae2642f..667fdaa3 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock20_1.4.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/no-dev_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/no-dev_lock20_1.4.xml.bin
index 35cae920..5f6bedbc 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml@0.10.2">
diff --git a/tests/_data/snapshots/poetry/no-dev_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/no-dev_lock20_1.5.json.bin
index 25d06d0b..f7dda794 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock20_1.5.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/no-dev_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/no-dev_lock20_1.5.xml.bin
index b5dd578e..69719a18 100644
--- a/tests/_data/snapshots/poetry/no-dev_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/no-dev_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="toml@0.10.2">
diff --git a/tests/_data/snapshots/poetry/only-groups_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/only-groups_lock11_1.3.json.bin
index 09dd6f99..bdc1dcc8 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock11_1.3.json.bin
@@ -237,6 +237,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/only-groups_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/only-groups_lock11_1.3.xml.bin
index 9f1a8ef2..c0883ed7 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/only-groups_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/only-groups_lock11_1.4.json.bin
index 13c87910..768780f6 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock11_1.4.json.bin
@@ -237,6 +237,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/only-groups_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/only-groups_lock11_1.4.xml.bin
index 7e917955..3cceb16c 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/only-groups_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/only-groups_lock11_1.5.json.bin
index 07eda898..557f3a44 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock11_1.5.json.bin
@@ -237,6 +237,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/only-groups_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/only-groups_lock11_1.5.xml.bin
index bb0190a0..426e4d09 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/only-groups_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/only-groups_lock20_1.3.json.bin
index 76d89c39..893677fa 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock20_1.3.json.bin
@@ -209,6 +209,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/only-groups_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/only-groups_lock20_1.3.xml.bin
index ac456821..b95ce7da 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/only-groups_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/only-groups_lock20_1.4.json.bin
index d1c6ce92..96529c93 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock20_1.4.json.bin
@@ -209,6 +209,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/only-groups_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/only-groups_lock20_1.4.xml.bin
index 752faa43..4f36ca4c 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/only-groups_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/only-groups_lock20_1.5.json.bin
index f7ecb382..dc07211d 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock20_1.5.json.bin
@@ -209,6 +209,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/only-groups_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/only-groups_lock20_1.5.xml.bin
index 9a36e99b..58279c6d 100644
--- a/tests/_data/snapshots/poetry/only-groups_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/only-groups_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/private-packges_lock10_1.3.json.bin
index a605c796..a59130b5 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock10_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock10_1.3.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/private-packges_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock10_1.3.xml.bin
index 20615fd5..5ed17059 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock10_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock10_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/private-packges_lock10_1.4.json.bin
index 324f4d69..bc52832c 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock10_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock10_1.4.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/private-packges_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock10_1.4.xml.bin
index 5b428ba3..573cce19 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock10_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock10_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/private-packges_lock10_1.5.json.bin
index 20ea9303..9b392530 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock10_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock10_1.5.json.bin
@@ -101,6 +101,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/private-packges_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock10_1.5.xml.bin
index 71bc1892..3b7bc58f 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock10_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock10_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/private-packges_lock11_1.3.json.bin
index fc5a992a..fdab87d0 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock11_1.3.json.bin
@@ -1156,6 +1156,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/private-packges_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock11_1.3.xml.bin
index 7e304357..8446a2cf 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/private-packges_lock11_1.4.json.bin
index a582fcc9..14a81265 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock11_1.4.json.bin
@@ -1156,6 +1156,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/private-packges_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock11_1.4.xml.bin
index 9ac75f7f..2431430b 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/private-packges_lock11_1.5.json.bin
index 12a19098..69c5b059 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock11_1.5.json.bin
@@ -1156,6 +1156,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/private-packges_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock11_1.5.xml.bin
index 53255d5f..a5d6bb77 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/private-packges_lock20_1.3.json.bin
index 1ab6a8d5..30e9be4a 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock20_1.3.json.bin
@@ -1120,6 +1120,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/private-packges_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock20_1.3.xml.bin
index 80d327a3..1cbf3707 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/private-packges_lock20_1.4.json.bin
index 86b2b9b5..734c8b91 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock20_1.4.json.bin
@@ -1120,6 +1120,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/private-packges_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock20_1.4.xml.bin
index 1188876f..9824e0cc 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/private-packges_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/private-packges_lock20_1.5.json.bin
index 028a832a..66414712 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock20_1.5.json.bin
@@ -1120,6 +1120,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/private-packges_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/private-packges_lock20_1.5.xml.bin
index 6f669d69..bbbf7ebc 100644
--- a/tests/_data/snapshots/poetry/private-packges_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/private-packges_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from aternative package repositories</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="colorama@0.4.6">
diff --git a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.json.bin
index cb1ca894..0a2f3a87 100644
--- a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.xml.bin
index c36da550..e83010ac 100644
--- a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>regression for issue #611</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="pyhumps@3.7.1">
diff --git a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.json.bin
index 89e08e07..28b52532 100644
--- a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.xml.bin
index 876ea47c..3e2d37c0 100644
--- a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>regression for issue #611</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="pyhumps@3.7.1">
diff --git a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.json.bin
index b225e59f..3f07b200 100644
--- a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.json.bin
@@ -59,6 +59,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.xml.bin
index 77b3b946..fe3175ff 100644
--- a/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/regression-issue611_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>regression for issue #611</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="pyhumps@3.7.1">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/some-extras_lock10_1.3.json.bin
index 39abe83d..5088af8b 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock10_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock10_1.3.json.bin
@@ -170,6 +170,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/some-extras_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock10_1.3.xml.bin
index d4c956c8..fa7050b3 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock10_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock10_1.3.xml.bin
@@ -22,6 +22,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="boolean.py@4.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/some-extras_lock10_1.4.json.bin
index 7c4943dd..a04a5d1a 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock10_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock10_1.4.json.bin
@@ -170,6 +170,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-extras_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock10_1.4.xml.bin
index c9333332..cc4ba787 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock10_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock10_1.4.xml.bin
@@ -49,6 +49,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="boolean.py@4.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/some-extras_lock10_1.5.json.bin
index 3e44318f..bfeaa928 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock10_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock10_1.5.json.bin
@@ -170,6 +170,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-extras_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock10_1.5.xml.bin
index 12e32276..a23f8981 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock10_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock10_1.5.xml.bin
@@ -49,6 +49,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="boolean.py@4.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/some-extras_lock11_1.3.json.bin
index c37f9529..8fe68cb9 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock11_1.3.json.bin
@@ -2117,6 +2117,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/some-extras_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock11_1.3.xml.bin
index 5ade7e85..f72b3a59 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock11_1.3.xml.bin
@@ -22,6 +22,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/some-extras_lock11_1.4.json.bin
index 886f0baf..3cb68473 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock11_1.4.json.bin
@@ -2117,6 +2117,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-extras_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock11_1.4.xml.bin
index a09b90b7..e44170fa 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock11_1.4.xml.bin
@@ -49,6 +49,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/some-extras_lock11_1.5.json.bin
index cbdaaac4..c37085fc 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock11_1.5.json.bin
@@ -2117,6 +2117,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-extras_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock11_1.5.xml.bin
index 85dbdc63..0c8f6a82 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock11_1.5.xml.bin
@@ -49,6 +49,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/some-extras_lock20_1.3.json.bin
index 37170e79..6adc36ef 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock20_1.3.json.bin
@@ -3163,6 +3163,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/some-extras_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock20_1.3.xml.bin
index dbf7f1ef..ac579c1f 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock20_1.3.xml.bin
@@ -22,6 +22,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/some-extras_lock20_1.4.json.bin
index 7f8decc1..4ee45fb8 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock20_1.4.json.bin
@@ -3163,6 +3163,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-extras_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock20_1.4.xml.bin
index 4d94f970..e5011131 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock20_1.4.xml.bin
@@ -49,6 +49,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-extras_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/some-extras_lock20_1.5.json.bin
index 152269f5..07814609 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock20_1.5.json.bin
@@ -3163,6 +3163,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-extras_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/some-extras_lock20_1.5.xml.bin
index 75f5407b..c4effd6e 100644
--- a/tests/_data/snapshots/poetry/some-extras_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/some-extras_lock20_1.5.xml.bin
@@ -49,6 +49,9 @@
         <property name="cdx:python:package:required-extra">my-extra</property>
       </properties>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-groups_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/some-groups_lock11_1.3.json.bin
index b5459389..8bae5aea 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock11_1.3.json.bin
@@ -325,6 +325,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/some-groups_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/some-groups_lock11_1.3.xml.bin
index 31002850..af433927 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-groups_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/some-groups_lock11_1.4.json.bin
index 270a242e..035b6d1c 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock11_1.4.json.bin
@@ -325,6 +325,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-groups_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/some-groups_lock11_1.4.xml.bin
index 91dea11d..0362fc2f 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-groups_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/some-groups_lock11_1.5.json.bin
index efee818b..74c673a4 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock11_1.5.json.bin
@@ -325,6 +325,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-groups_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/some-groups_lock11_1.5.xml.bin
index a00e46b0..370f7753 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-groups_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/some-groups_lock20_1.3.json.bin
index f52a15e1..378bdc31 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock20_1.3.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/some-groups_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/some-groups_lock20_1.3.xml.bin
index 2138d5ec..a0ad8a44 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-groups_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/some-groups_lock20_1.4.json.bin
index 166f9e2f..742375a5 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock20_1.4.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-groups_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/some-groups_lock20_1.4.xml.bin
index 80614ff3..c62a1516 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/some-groups_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/some-groups_lock20_1.5.json.bin
index f2006a4d..f13eb38d 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock20_1.5.json.bin
@@ -293,6 +293,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/some-groups_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/some-groups_lock20_1.5.xml.bin
index 39025b2c..8d3c8b2d 100644
--- a/tests/_data/snapshots/poetry/some-groups_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/some-groups_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>dependencies organized in groups</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="arrow@1.3.0">
diff --git a/tests/_data/snapshots/poetry/with-extras_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/with-extras_lock10_1.3.json.bin
index eb6a9ec9..a751b6ec 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock10_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock10_1.3.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/with-extras_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock10_1.3.xml.bin
index f1ee87bd..8a925f4f 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock10_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock10_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/with-extras_lock10_1.4.json.bin
index c4275512..a0628524 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock10_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock10_1.4.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-extras_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock10_1.4.xml.bin
index 7b67d0f9..b4f8191b 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock10_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock10_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/with-extras_lock10_1.5.json.bin
index 707fb92c..b1ba942b 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock10_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock10_1.5.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-extras_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock10_1.5.xml.bin
index c4f928d2..d2ea971e 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock10_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock10_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/with-extras_lock11_1.3.json.bin
index eb6a9ec9..a751b6ec 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock11_1.3.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/with-extras_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock11_1.3.xml.bin
index f1ee87bd..8a925f4f 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/with-extras_lock11_1.4.json.bin
index c4275512..a0628524 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock11_1.4.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-extras_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock11_1.4.xml.bin
index 7b67d0f9..b4f8191b 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/with-extras_lock11_1.5.json.bin
index 707fb92c..b1ba942b 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock11_1.5.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-extras_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock11_1.5.xml.bin
index c4f928d2..d2ea971e 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/with-extras_lock20_1.3.json.bin
index eb6a9ec9..a751b6ec 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock20_1.3.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/with-extras_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock20_1.3.xml.bin
index f1ee87bd..8a925f4f 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/with-extras_lock20_1.4.json.bin
index c4275512..a0628524 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock20_1.4.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-extras_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock20_1.4.xml.bin
index 7b67d0f9..b4f8191b 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-extras_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/with-extras_lock20_1.5.json.bin
index 707fb92c..b1ba942b 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock20_1.5.json.bin
@@ -13,6 +13,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-extras_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/with-extras_lock20_1.5.xml.bin
index c4f928d2..d2ea971e 100644
--- a/tests/_data/snapshots/poetry/with-extras_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/with-extras_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>depenndencies with extras</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <dependencies>
     <dependency ref="with-extras"/>
diff --git a/tests/_data/snapshots/poetry/with-urls_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/with-urls_lock10_1.3.json.bin
index 93276657..4e2d86ef 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock10_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock10_1.3.json.bin
@@ -130,6 +130,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/with-urls_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock10_1.3.xml.bin
index 38d12e37..ccd1a1be 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock10_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock10_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/with-urls_lock10_1.4.json.bin
index 0ea86c8b..9ae1a00e 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock10_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock10_1.4.json.bin
@@ -130,6 +130,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-urls_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock10_1.4.xml.bin
index c5fc92d4..a45c5c08 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock10_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock10_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/with-urls_lock10_1.5.json.bin
index 30d2bb7b..d0dc7b6c 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock10_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock10_1.5.json.bin
@@ -130,6 +130,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-urls_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock10_1.5.xml.bin
index 0258a02f..e49d1d6e 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock10_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock10_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/with-urls_lock11_1.3.json.bin
index 03c1cd2e..f3213fc0 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock11_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock11_1.3.json.bin
@@ -138,6 +138,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/with-urls_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock11_1.3.xml.bin
index 525bc6f0..3011ef0d 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock11_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock11_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/with-urls_lock11_1.4.json.bin
index 9e4a41dd..c6036268 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock11_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock11_1.4.json.bin
@@ -138,6 +138,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-urls_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock11_1.4.xml.bin
index fa3526cb..c56d5f70 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock11_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock11_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/with-urls_lock11_1.5.json.bin
index 674c8c1f..602b7f77 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock11_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock11_1.5.json.bin
@@ -138,6 +138,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-urls_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock11_1.5.xml.bin
index eefb84ff..f32fabe2 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock11_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock11_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/with-urls_lock20_1.3.json.bin
index 08e927ee..217b31e8 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock20_1.3.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock20_1.3.json.bin
@@ -150,6 +150,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/poetry/with-urls_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock20_1.3.xml.bin
index 3599f763..4d5a71a5 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock20_1.3.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock20_1.3.xml.bin
@@ -19,6 +19,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/with-urls_lock20_1.4.json.bin
index 988cb6e2..51efd3c8 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock20_1.4.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock20_1.4.json.bin
@@ -150,6 +150,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-urls_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock20_1.4.xml.bin
index 3fe09d88..a9a79d94 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock20_1.4.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock20_1.4.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/poetry/with-urls_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/with-urls_lock20_1.5.json.bin
index 03b723d7..2204f69d 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock20_1.5.json.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock20_1.5.json.bin
@@ -150,6 +150,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/poetry/with-urls_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/with-urls_lock20_1.5.xml.bin
index 8c7f7b5d..ad53ea7f 100644
--- a/tests/_data/snapshots/poetry/with-urls_lock20_1.5.xml.bin
+++ b/tests/_data/snapshots/poetry/with-urls_lock20_1.5.xml.bin
@@ -46,6 +46,9 @@
       <version>0.1.0</version>
       <description>packages from direct urls</description>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="Pillow@10.1.0">
diff --git a/tests/_data/snapshots/requirements/file_frozen_1.3.json.bin b/tests/_data/snapshots/requirements/file_frozen_1.3.json.bin
index a909ee08..d0534648 100644
--- a/tests/_data/snapshots/requirements/file_frozen_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_frozen_1.3.json.bin
@@ -65,6 +65,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_frozen_1.3.xml.bin b/tests/_data/snapshots/requirements/file_frozen_1.3.xml.bin
index 550ede05..44969e9a 100644
--- a/tests/_data/snapshots/requirements/file_frozen_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_frozen_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_frozen_1.4.json.bin b/tests/_data/snapshots/requirements/file_frozen_1.4.json.bin
index 636d3ffc..eaeb8f7e 100644
--- a/tests/_data/snapshots/requirements/file_frozen_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_frozen_1.4.json.bin
@@ -65,6 +65,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_frozen_1.4.xml.bin b/tests/_data/snapshots/requirements/file_frozen_1.4.xml.bin
index 63850b70..fe282242 100644
--- a/tests/_data/snapshots/requirements/file_frozen_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_frozen_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_frozen_1.5.json.bin b/tests/_data/snapshots/requirements/file_frozen_1.5.json.bin
index 5953eb83..22ba17a5 100644
--- a/tests/_data/snapshots/requirements/file_frozen_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_frozen_1.5.json.bin
@@ -65,6 +65,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_frozen_1.5.xml.bin b/tests/_data/snapshots/requirements/file_frozen_1.5.xml.bin
index 82bdbd9d..6bb58f28 100644
--- a/tests/_data/snapshots/requirements/file_frozen_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_frozen_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_local_1.3.json.bin b/tests/_data/snapshots/requirements/file_local_1.3.json.bin
index 1fa457f5..2f791bad 100644
--- a/tests/_data/snapshots/requirements/file_local_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_local_1.3.json.bin
@@ -127,6 +127,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_local_1.3.xml.bin b/tests/_data/snapshots/requirements/file_local_1.3.xml.bin
index 403c5db8..1c202b23 100644
--- a/tests/_data/snapshots/requirements/file_local_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_local_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_local_1.4.json.bin b/tests/_data/snapshots/requirements/file_local_1.4.json.bin
index dd07799b..0b1c1df9 100644
--- a/tests/_data/snapshots/requirements/file_local_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_local_1.4.json.bin
@@ -122,6 +122,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_local_1.4.xml.bin b/tests/_data/snapshots/requirements/file_local_1.4.xml.bin
index bdf039c6..1791cb7d 100644
--- a/tests/_data/snapshots/requirements/file_local_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_local_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_local_1.5.json.bin b/tests/_data/snapshots/requirements/file_local_1.5.json.bin
index a1da370d..b4cbfb5c 100644
--- a/tests/_data/snapshots/requirements/file_local_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_local_1.5.json.bin
@@ -122,6 +122,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_local_1.5.xml.bin b/tests/_data/snapshots/requirements/file_local_1.5.xml.bin
index 8487093f..2b7e2712 100644
--- a/tests/_data/snapshots/requirements/file_local_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_local_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_nested_1.3.json.bin b/tests/_data/snapshots/requirements/file_nested_1.3.json.bin
index a909ee08..d0534648 100644
--- a/tests/_data/snapshots/requirements/file_nested_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_nested_1.3.json.bin
@@ -65,6 +65,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_nested_1.3.xml.bin b/tests/_data/snapshots/requirements/file_nested_1.3.xml.bin
index 550ede05..44969e9a 100644
--- a/tests/_data/snapshots/requirements/file_nested_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_nested_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_nested_1.4.json.bin b/tests/_data/snapshots/requirements/file_nested_1.4.json.bin
index 636d3ffc..eaeb8f7e 100644
--- a/tests/_data/snapshots/requirements/file_nested_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_nested_1.4.json.bin
@@ -65,6 +65,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_nested_1.4.xml.bin b/tests/_data/snapshots/requirements/file_nested_1.4.xml.bin
index 63850b70..fe282242 100644
--- a/tests/_data/snapshots/requirements/file_nested_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_nested_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_nested_1.5.json.bin b/tests/_data/snapshots/requirements/file_nested_1.5.json.bin
index 5953eb83..22ba17a5 100644
--- a/tests/_data/snapshots/requirements/file_nested_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_nested_1.5.json.bin
@@ -65,6 +65,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_nested_1.5.xml.bin b/tests/_data/snapshots/requirements/file_nested_1.5.xml.bin
index 82bdbd9d..6bb58f28 100644
--- a/tests/_data/snapshots/requirements/file_nested_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_nested_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_private-packages_1.3.json.bin b/tests/_data/snapshots/requirements/file_private-packages_1.3.json.bin
index d8e0373d..8a060a9d 100644
--- a/tests/_data/snapshots/requirements/file_private-packages_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_private-packages_1.3.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_private-packages_1.3.xml.bin b/tests/_data/snapshots/requirements/file_private-packages_1.3.xml.bin
index fd12d8ff..f6587742 100644
--- a/tests/_data/snapshots/requirements/file_private-packages_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_private-packages_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_private-packages_1.4.json.bin b/tests/_data/snapshots/requirements/file_private-packages_1.4.json.bin
index 6bed45d8..ccf4350f 100644
--- a/tests/_data/snapshots/requirements/file_private-packages_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_private-packages_1.4.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_private-packages_1.4.xml.bin b/tests/_data/snapshots/requirements/file_private-packages_1.4.xml.bin
index 0d3cdbaa..5a83c1cc 100644
--- a/tests/_data/snapshots/requirements/file_private-packages_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_private-packages_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_private-packages_1.5.json.bin b/tests/_data/snapshots/requirements/file_private-packages_1.5.json.bin
index 7bbc91fc..bf252450 100644
--- a/tests/_data/snapshots/requirements/file_private-packages_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_private-packages_1.5.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_private-packages_1.5.xml.bin b/tests/_data/snapshots/requirements/file_private-packages_1.5.xml.bin
index 5fb2ea84..d5edbe76 100644
--- a/tests/_data/snapshots/requirements/file_private-packages_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_private-packages_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.json.bin b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.json.bin
index 64ec9b6b..1598a9bd 100644
--- a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.json.bin
@@ -73,6 +73,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.xml.bin b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.xml.bin
index 4c1d765f..c31bfae8 100644
--- a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L6">
diff --git a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.json.bin b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.json.bin
index ccd57626..a7333582 100644
--- a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.json.bin
@@ -70,6 +70,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.xml.bin b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.xml.bin
index c9d606ed..99dd4ab9 100644
--- a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L6">
diff --git a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.json.bin b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.json.bin
index a642b533..c91f2491 100644
--- a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.json.bin
@@ -70,6 +70,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.xml.bin b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.xml.bin
index 9bf8476d..d0e9c94d 100644
--- a/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_regression-issue448.cp1252.txt_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L6">
diff --git a/tests/_data/snapshots/requirements/file_with-comments_1.3.json.bin b/tests/_data/snapshots/requirements/file_with-comments_1.3.json.bin
index 03e76120..d0100540 100644
--- a/tests/_data/snapshots/requirements/file_with-comments_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-comments_1.3.json.bin
@@ -109,6 +109,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_with-comments_1.3.xml.bin b/tests/_data/snapshots/requirements/file_with-comments_1.3.xml.bin
index c1c509aa..d07a8b6a 100644
--- a/tests/_data/snapshots/requirements/file_with-comments_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-comments_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/file_with-comments_1.4.json.bin b/tests/_data/snapshots/requirements/file_with-comments_1.4.json.bin
index cd8fc1eb..853118bb 100644
--- a/tests/_data/snapshots/requirements/file_with-comments_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-comments_1.4.json.bin
@@ -109,6 +109,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-comments_1.4.xml.bin b/tests/_data/snapshots/requirements/file_with-comments_1.4.xml.bin
index 59b2551c..647e9ce3 100644
--- a/tests/_data/snapshots/requirements/file_with-comments_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-comments_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/file_with-comments_1.5.json.bin b/tests/_data/snapshots/requirements/file_with-comments_1.5.json.bin
index bb2dd25f..b98b9144 100644
--- a/tests/_data/snapshots/requirements/file_with-comments_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-comments_1.5.json.bin
@@ -109,6 +109,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-comments_1.5.xml.bin b/tests/_data/snapshots/requirements/file_with-comments_1.5.xml.bin
index 66eac740..f52f1f90 100644
--- a/tests/_data/snapshots/requirements/file_with-comments_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-comments_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin
index f2be6263..d0fd31d5 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin
index 187ad4bb..79eac39a 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L3">
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin
index 8e4a57d8..f534b553 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin
index 59846d93..0984799d 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L3">
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin
index 27aac3e8..f13a4eb1 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin
@@ -47,6 +47,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin
index 196acabc..3309fd71 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L3">
diff --git a/tests/_data/snapshots/requirements/file_with-hashes_1.3.json.bin b/tests/_data/snapshots/requirements/file_with-hashes_1.3.json.bin
index 2d083671..1d8df625 100644
--- a/tests/_data/snapshots/requirements/file_with-hashes_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-hashes_1.3.json.bin
@@ -149,6 +149,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_with-hashes_1.3.xml.bin b/tests/_data/snapshots/requirements/file_with-hashes_1.3.xml.bin
index e6c297d2..5d56cf9a 100644
--- a/tests/_data/snapshots/requirements/file_with-hashes_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-hashes_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_with-hashes_1.4.json.bin b/tests/_data/snapshots/requirements/file_with-hashes_1.4.json.bin
index 392da2f5..b58bc387 100644
--- a/tests/_data/snapshots/requirements/file_with-hashes_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-hashes_1.4.json.bin
@@ -148,6 +148,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-hashes_1.4.xml.bin b/tests/_data/snapshots/requirements/file_with-hashes_1.4.xml.bin
index 14a54e8d..1e46eb1e 100644
--- a/tests/_data/snapshots/requirements/file_with-hashes_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-hashes_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_with-hashes_1.5.json.bin b/tests/_data/snapshots/requirements/file_with-hashes_1.5.json.bin
index 6b8002aa..b527a4cf 100644
--- a/tests/_data/snapshots/requirements/file_with-hashes_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-hashes_1.5.json.bin
@@ -148,6 +148,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-hashes_1.5.xml.bin b/tests/_data/snapshots/requirements/file_with-hashes_1.5.xml.bin
index 519512fc..afff1cab 100644
--- a/tests/_data/snapshots/requirements/file_with-hashes_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-hashes_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_with-urls_1.3.json.bin b/tests/_data/snapshots/requirements/file_with-urls_1.3.json.bin
index 64ecb03e..0b1f799d 100644
--- a/tests/_data/snapshots/requirements/file_with-urls_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-urls_1.3.json.bin
@@ -144,6 +144,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_with-urls_1.3.xml.bin b/tests/_data/snapshots/requirements/file_with-urls_1.3.xml.bin
index 0a00b1da..8bd5ed10 100644
--- a/tests/_data/snapshots/requirements/file_with-urls_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-urls_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_with-urls_1.4.json.bin b/tests/_data/snapshots/requirements/file_with-urls_1.4.json.bin
index 240879c8..74c8c901 100644
--- a/tests/_data/snapshots/requirements/file_with-urls_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-urls_1.4.json.bin
@@ -138,6 +138,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-urls_1.4.xml.bin b/tests/_data/snapshots/requirements/file_with-urls_1.4.xml.bin
index 7974354e..0fa54467 100644
--- a/tests/_data/snapshots/requirements/file_with-urls_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-urls_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_with-urls_1.5.json.bin b/tests/_data/snapshots/requirements/file_with-urls_1.5.json.bin
index 168903b3..9c58e7a9 100644
--- a/tests/_data/snapshots/requirements/file_with-urls_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-urls_1.5.json.bin
@@ -138,6 +138,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_with-urls_1.5.xml.bin b/tests/_data/snapshots/requirements/file_with-urls_1.5.xml.bin
index c9d945c5..e449a302 100644
--- a/tests/_data/snapshots/requirements/file_with-urls_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-urls_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.json.bin b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.json.bin
index 8a88058c..e77bfff4 100644
--- a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.json.bin
@@ -73,6 +73,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.xml.bin b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.xml.bin
index ee8ccc80..c25d0c94 100644
--- a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.3.xml.bin
@@ -21,6 +21,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.json.bin b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.json.bin
index 3edd3f6a..1dc26a60 100644
--- a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.json.bin
@@ -70,6 +70,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.xml.bin b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.xml.bin
index 83893d01..0d2bbbb0 100644
--- a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.4.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.json.bin b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.json.bin
index 33d1f35d..843e8a03 100644
--- a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.json.bin
@@ -70,6 +70,12 @@
       "type": "application",
       "version": "0.1.0"
     },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.xml.bin b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.xml.bin
index 70437316..57709bf9 100644
--- a/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_without-pinned-versions_1.5.xml.bin
@@ -48,6 +48,9 @@
         <expression>Apache-2.0 OR MIT</expression>
       </licenses>
     </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/stream_frozen_1.3.json.bin b/tests/_data/snapshots/requirements/stream_frozen_1.3.json.bin
index 721c5238..068fac17 100644
--- a/tests/_data/snapshots/requirements/stream_frozen_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_frozen_1.3.json.bin
@@ -50,6 +50,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_frozen_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_frozen_1.3.xml.bin
index c5c0f0dd..ee8e01bf 100644
--- a/tests/_data/snapshots/requirements/stream_frozen_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_frozen_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/stream_frozen_1.4.json.bin b/tests/_data/snapshots/requirements/stream_frozen_1.4.json.bin
index 017055f9..061b38f4 100644
--- a/tests/_data/snapshots/requirements/stream_frozen_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_frozen_1.4.json.bin
@@ -50,6 +50,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_frozen_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_frozen_1.4.xml.bin
index d0e82183..727195a8 100644
--- a/tests/_data/snapshots/requirements/stream_frozen_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_frozen_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/stream_frozen_1.5.json.bin b/tests/_data/snapshots/requirements/stream_frozen_1.5.json.bin
index 6ae1a512..34f08357 100644
--- a/tests/_data/snapshots/requirements/stream_frozen_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_frozen_1.5.json.bin
@@ -50,6 +50,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_frozen_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_frozen_1.5.xml.bin
index 154250b1..2e7f305e 100644
--- a/tests/_data/snapshots/requirements/stream_frozen_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_frozen_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/stream_local_1.3.json.bin b/tests/_data/snapshots/requirements/stream_local_1.3.json.bin
index 1eb4b4c8..3305ce77 100644
--- a/tests/_data/snapshots/requirements/stream_local_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_local_1.3.json.bin
@@ -112,6 +112,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_local_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_local_1.3.xml.bin
index fb576405..d5004cdd 100644
--- a/tests/_data/snapshots/requirements/stream_local_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_local_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_local_1.4.json.bin b/tests/_data/snapshots/requirements/stream_local_1.4.json.bin
index 9e461821..c2aae1ed 100644
--- a/tests/_data/snapshots/requirements/stream_local_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_local_1.4.json.bin
@@ -107,6 +107,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_local_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_local_1.4.xml.bin
index 02871a38..0c9851a0 100644
--- a/tests/_data/snapshots/requirements/stream_local_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_local_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_local_1.5.json.bin b/tests/_data/snapshots/requirements/stream_local_1.5.json.bin
index b4727344..26d5a67f 100644
--- a/tests/_data/snapshots/requirements/stream_local_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_local_1.5.json.bin
@@ -107,6 +107,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_local_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_local_1.5.xml.bin
index b81decfc..3f9475c4 100644
--- a/tests/_data/snapshots/requirements/stream_local_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_local_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_nested_1.3.json.bin b/tests/_data/snapshots/requirements/stream_nested_1.3.json.bin
index ae6bb18c..b5de47bc 100644
--- a/tests/_data/snapshots/requirements/stream_nested_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_nested_1.3.json.bin
@@ -1,5 +1,11 @@
 {
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_nested_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_nested_1.3.xml.bin
index 77546d46..f275e185 100644
--- a/tests/_data/snapshots/requirements/stream_nested_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_nested_1.3.xml.bin
@@ -13,5 +13,8 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_nested_1.4.json.bin b/tests/_data/snapshots/requirements/stream_nested_1.4.json.bin
index 0ca4ef15..b15333df 100644
--- a/tests/_data/snapshots/requirements/stream_nested_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_nested_1.4.json.bin
@@ -1,5 +1,11 @@
 {
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_nested_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_nested_1.4.xml.bin
index 27fa7639..2e149caf 100644
--- a/tests/_data/snapshots/requirements/stream_nested_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_nested_1.4.xml.bin
@@ -40,5 +40,8 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_nested_1.5.json.bin b/tests/_data/snapshots/requirements/stream_nested_1.5.json.bin
index 73ba6b6d..10545fd6 100644
--- a/tests/_data/snapshots/requirements/stream_nested_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_nested_1.5.json.bin
@@ -1,5 +1,11 @@
 {
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_nested_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_nested_1.5.xml.bin
index 5c6fa3bd..c1edb281 100644
--- a/tests/_data/snapshots/requirements/stream_nested_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_nested_1.5.xml.bin
@@ -40,5 +40,8 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_private-packages_1.3.json.bin b/tests/_data/snapshots/requirements/stream_private-packages_1.3.json.bin
index acfb396c..bde98fda 100644
--- a/tests/_data/snapshots/requirements/stream_private-packages_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_private-packages_1.3.json.bin
@@ -32,6 +32,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_private-packages_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_private-packages_1.3.xml.bin
index 0fd61ff9..db5d2edd 100644
--- a/tests/_data/snapshots/requirements/stream_private-packages_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_private-packages_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/stream_private-packages_1.4.json.bin b/tests/_data/snapshots/requirements/stream_private-packages_1.4.json.bin
index 1ca174e5..599e5d39 100644
--- a/tests/_data/snapshots/requirements/stream_private-packages_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_private-packages_1.4.json.bin
@@ -32,6 +32,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_private-packages_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_private-packages_1.4.xml.bin
index 1c749b7d..f823ed66 100644
--- a/tests/_data/snapshots/requirements/stream_private-packages_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_private-packages_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/stream_private-packages_1.5.json.bin b/tests/_data/snapshots/requirements/stream_private-packages_1.5.json.bin
index 309d0f87..bd816962 100644
--- a/tests/_data/snapshots/requirements/stream_private-packages_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_private-packages_1.5.json.bin
@@ -32,6 +32,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_private-packages_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_private-packages_1.5.xml.bin
index d56eef48..5c7fb76e 100644
--- a/tests/_data/snapshots/requirements/stream_private-packages_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_private-packages_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L7">
diff --git a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.json.bin b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.json.bin
index 33edf346..08abcc42 100644
--- a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.json.bin
@@ -58,6 +58,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.xml.bin
index c0227f2c..dc238323 100644
--- a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L6">
diff --git a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.json.bin b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.json.bin
index 07dc044d..4e3191ed 100644
--- a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.json.bin
@@ -55,6 +55,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.xml.bin
index 39b06991..76c28c3d 100644
--- a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L6">
diff --git a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.json.bin b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.json.bin
index c8a937a5..a84dc58c 100644
--- a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.json.bin
@@ -55,6 +55,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.xml.bin
index 73f295e4..80d2b709 100644
--- a/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_regression-issue448.cp1252.txt_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L6">
diff --git a/tests/_data/snapshots/requirements/stream_with-comments_1.3.json.bin b/tests/_data/snapshots/requirements/stream_with-comments_1.3.json.bin
index 6f64580d..7b3d8776 100644
--- a/tests/_data/snapshots/requirements/stream_with-comments_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-comments_1.3.json.bin
@@ -94,6 +94,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_with-comments_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_with-comments_1.3.xml.bin
index e16dafc2..d9d799e8 100644
--- a/tests/_data/snapshots/requirements/stream_with-comments_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-comments_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/stream_with-comments_1.4.json.bin b/tests/_data/snapshots/requirements/stream_with-comments_1.4.json.bin
index 9e2a8e28..c99c861c 100644
--- a/tests/_data/snapshots/requirements/stream_with-comments_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-comments_1.4.json.bin
@@ -94,6 +94,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-comments_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_with-comments_1.4.xml.bin
index 743ded61..c011eb93 100644
--- a/tests/_data/snapshots/requirements/stream_with-comments_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-comments_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/stream_with-comments_1.5.json.bin b/tests/_data/snapshots/requirements/stream_with-comments_1.5.json.bin
index 292292fb..726eaaae 100644
--- a/tests/_data/snapshots/requirements/stream_with-comments_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-comments_1.5.json.bin
@@ -94,6 +94,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-comments_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_with-comments_1.5.xml.bin
index cc7d80dd..129e6e6a 100644
--- a/tests/_data/snapshots/requirements/stream_with-comments_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-comments_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin
index 3a10febe..b4cf779a 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin
@@ -32,6 +32,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin
index accd61eb..b29201bb 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L3">
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin
index 5c282291..f0cfb8fa 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin
@@ -32,6 +32,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin
index b7d9f55c..b7f56e22 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L3">
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin
index 30a51bb8..325e006a 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin
@@ -32,6 +32,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin
index f049804c..74aec2b5 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L3">
diff --git a/tests/_data/snapshots/requirements/stream_with-hashes_1.3.json.bin b/tests/_data/snapshots/requirements/stream_with-hashes_1.3.json.bin
index ae2f9cda..e79cc532 100644
--- a/tests/_data/snapshots/requirements/stream_with-hashes_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-hashes_1.3.json.bin
@@ -134,6 +134,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_with-hashes_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_with-hashes_1.3.xml.bin
index 0b03d9a0..19268fb6 100644
--- a/tests/_data/snapshots/requirements/stream_with-hashes_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-hashes_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_with-hashes_1.4.json.bin b/tests/_data/snapshots/requirements/stream_with-hashes_1.4.json.bin
index d5d98b8f..e6900ba4 100644
--- a/tests/_data/snapshots/requirements/stream_with-hashes_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-hashes_1.4.json.bin
@@ -133,6 +133,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-hashes_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_with-hashes_1.4.xml.bin
index f52bca08..125511c5 100644
--- a/tests/_data/snapshots/requirements/stream_with-hashes_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-hashes_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_with-hashes_1.5.json.bin b/tests/_data/snapshots/requirements/stream_with-hashes_1.5.json.bin
index 8bc5d913..ab9f4364 100644
--- a/tests/_data/snapshots/requirements/stream_with-hashes_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-hashes_1.5.json.bin
@@ -133,6 +133,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-hashes_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_with-hashes_1.5.xml.bin
index 891a8045..ac15f36e 100644
--- a/tests/_data/snapshots/requirements/stream_with-hashes_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-hashes_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_with-urls_1.3.json.bin b/tests/_data/snapshots/requirements/stream_with-urls_1.3.json.bin
index ab5d1242..c3c05da3 100644
--- a/tests/_data/snapshots/requirements/stream_with-urls_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-urls_1.3.json.bin
@@ -129,6 +129,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_with-urls_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_with-urls_1.3.xml.bin
index ee1b960c..49465b70 100644
--- a/tests/_data/snapshots/requirements/stream_with-urls_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-urls_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_with-urls_1.4.json.bin b/tests/_data/snapshots/requirements/stream_with-urls_1.4.json.bin
index b60d3a46..06cca52c 100644
--- a/tests/_data/snapshots/requirements/stream_with-urls_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-urls_1.4.json.bin
@@ -123,6 +123,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-urls_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_with-urls_1.4.xml.bin
index 0563d7c4..97584405 100644
--- a/tests/_data/snapshots/requirements/stream_with-urls_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-urls_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_with-urls_1.5.json.bin b/tests/_data/snapshots/requirements/stream_with-urls_1.5.json.bin
index 7cf43bb0..cb584904 100644
--- a/tests/_data/snapshots/requirements/stream_with-urls_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-urls_1.5.json.bin
@@ -123,6 +123,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_with-urls_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_with-urls_1.5.xml.bin
index 8d782f29..63a9925d 100644
--- a/tests/_data/snapshots/requirements/stream_with-urls_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-urls_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L11">
diff --git a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.json.bin b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.json.bin
index 1e3fe2ac..d3777e03 100644
--- a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.json.bin
@@ -58,6 +58,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "name": "cyclonedx-bom",
diff --git a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.xml.bin
index c944348c..6a3dcd48 100644
--- a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.3.xml.bin
@@ -13,6 +13,9 @@
         <version>libVersion-testing</version>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.json.bin b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.json.bin
index 0be6cbd0..7c973b8d 100644
--- a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.json.bin
@@ -55,6 +55,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.xml.bin
index c6b3b32e..944db4b2 100644
--- a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.4.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.json.bin b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.json.bin
index c782828c..1e3d62d7 100644
--- a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.json.bin
@@ -55,6 +55,12 @@
     }
   ],
   "metadata": {
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
     "tools": [
       {
         "externalReferences": [   ],
diff --git a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.xml.bin
index 9092c6b6..bab446e4 100644
--- a/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_without-pinned-versions_1.5.xml.bin
@@ -40,6 +40,9 @@
         <externalReferences><!-- stripped --></externalReferences>
       </tool>
     </tools>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
   </metadata>
   <components>
     <component type="library" bom-ref="requirements-L1">
diff --git a/tests/integration/test_cli_environment.py b/tests/integration/test_cli_environment.py
index a25e716d..6ce23b1e 100644
--- a/tests/integration/test_cli_environment.py
+++ b/tests/integration/test_cli_environment.py
@@ -137,6 +137,7 @@ def test_with_current_python(self) -> None:
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     # no project dir -> search in current python
                 ])
@@ -152,6 +153,7 @@ def test_with_current_python(self) -> None:
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     executable  # explicitly current python
                 ])
@@ -174,6 +176,7 @@ def test_with_file_as_expected(self, projectdir: str, sv: SchemaVersion, of: Out
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     f'--pyproject={join(projectdir, "pyproject.toml")}',
                     join(projectdir, '.venv')])
diff --git a/tests/integration/test_cli_pipenv.py b/tests/integration/test_cli_pipenv.py
index d792a1cf..adc98f51 100644
--- a/tests/integration/test_cli_pipenv.py
+++ b/tests/integration/test_cli_pipenv.py
@@ -96,6 +96,7 @@ def test_with_file_as_expected(self, projectdir: str, sv: SchemaVersion, of: Out
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     f'--pyproject={join(projectdir, "pyproject.toml")}',
                     projectdir])
@@ -115,6 +116,7 @@ def test_with_categories_as_expected(self, projectdir: str, sv: SchemaVersion, o
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     '--categories', 'categoryB,groupA packages,dev-packages',
                     projectdir])
@@ -134,6 +136,7 @@ def test_with_dev_as_expected(self, projectdir: str, sv: SchemaVersion, of: Outp
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     '--dev',
                     projectdir])
@@ -153,6 +156,7 @@ def test_with_pypi_mirror_as_expected(self, projectdir: str, sv: SchemaVersion,
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     '--pypi-mirror', 'https://pypy-mirror.testing.acme.org/simple',
                     projectdir])
diff --git a/tests/integration/test_cli_poetry.py b/tests/integration/test_cli_poetry.py
index c7eddbd7..05b43513 100644
--- a/tests/integration/test_cli_poetry.py
+++ b/tests/integration/test_cli_poetry.py
@@ -127,6 +127,7 @@ def test_with_file_as_expected(self, projectdir: str, sv: SchemaVersion, of: Out
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     projectdir])
             err = err.getvalue()
@@ -147,6 +148,7 @@ def test_with_groups_as_expected(self, projectdir: str, sv: SchemaVersion, of: O
                     '--without', 'groupB,dev',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     projectdir])
             err = err.getvalue()
@@ -166,6 +168,7 @@ def test_only_groups_as_expected(self, projectdir: str, sv: SchemaVersion, of: O
                     '--only', 'groupB',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     projectdir])
             err = err.getvalue()
@@ -185,6 +188,7 @@ def test_nodev_as_expected(self, projectdir: str, sv: SchemaVersion, of: OutputF
                     '--no-dev',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     projectdir])
             err = err.getvalue()
@@ -204,6 +208,7 @@ def test_with_extras_as_expected(self, projectdir: str, sv: SchemaVersion, of: O
                     '-E', 'my-extra',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     projectdir])
             err = err.getvalue()
diff --git a/tests/integration/test_cli_requirements.py b/tests/integration/test_cli_requirements.py
index d6c48211..36b89f2a 100644
--- a/tests/integration/test_cli_requirements.py
+++ b/tests/integration/test_cli_requirements.py
@@ -104,6 +104,7 @@ def test_with_file_as_expected(self, infile: str, sv: SchemaVersion, of: OutputF
                     '-vvv',
                     f'--sv={sv.to_version()}',
                     f'--of={of.name}',
+                    '--output-reproducible',
                     '--outfile=-',
                     f'--pyproject={pyproject_file}',
                     infile])
@@ -124,6 +125,7 @@ def test_with_stream_as_expected(self, infile: str, sv: SchemaVersion, of: Outpu
                         '-vvv',
                         f'--sv={sv.to_version()}',
                         f'--of={of.name}',
+                        '--output-reproducible',
                         '--outfile=-',
                         # no pyproject for this case
                         '-'])
diff --git a/tests/unit/test_cli.py b/tests/unit/test_cli.py
index 373567d4..aff2ff06 100644
--- a/tests/unit/test_cli.py
+++ b/tests/unit/test_cli.py
@@ -77,6 +77,7 @@ def __new__(cls, *args: Any, **kwargs: Any) -> BomBuilder:
                 schema_version=SchemaVersion.V1_4,
                 output_format=OutputFormat.JSON,
                 should_validate=True,
+                output_reproducible=True,
                 _bbc=MyBBC
             )
             command(outfile=outs)
@@ -99,10 +100,11 @@ def __new__(cls, *args: Any, **kwargs: Any) -> BomBuilder:
                 short_purls=False,
                 schema_version=SchemaVersion.V1_4,
                 output_format=OutputFormat.JSON,
+                output_reproducible=False,
                 should_validate=True,
                 _bbc=MyBBC
             )
-            command._make_output = Mock(return_value='["invalid to CDX schema"]')
+            command._make_output = Mock(return_value=r'["invalid to CDX schema"]')
 
             with self.assertRaisesRegex(ValueError, 'is schema-invalid'):
                 command(outfile=outs)
@@ -122,16 +124,17 @@ def __new__(cls, *args: Any, **kwargs: Any) -> BomBuilder:
                 schema_version=SchemaVersion.V1_4,
                 output_format=OutputFormat.JSON,
                 should_validate=False,
+                output_reproducible=False,
                 _bbc=MyBBC
             )
-            command._make_output = Mock(return_value='["invalid to CDX schema"]')
+            command._make_output = Mock(return_value=r'["invalid to CDX schema"]')
 
             command(outfile=outs)
 
             log = logs.getvalue()
             out = outs.getvalue()
 
-        self.assertEqual('["invalid to CDX schema"]', out)
+        self.assertEqual(r'["invalid to CDX schema"]', out)
         self.assertIn('WARNING: Validation skipped', log)
 
     def assertEqualSnapshot(self, actual: str, snapshot_name: str) -> None:  # noqa: N802
