Updated docs to refernce compositions. #179

Signed-off-by: Steve Springett <steve@springett.us>

Author: stevespringett

schema/bom-1.5.schema.json

@@ -1216,7 +1216,7 @@
     "dependency": {
       "type": "object",
       "title": "Dependency",
-      "description": "Defines the direct dependencies of a component. Components that do not have their own dependencies MUST be declared as empty elements within the graph. Components that are not represented in the dependency graph MAY have unknown dependencies. It is RECOMMENDED that implementations assume this to be opaque and not an indicator of a component being dependency-free.",
+      "description": "Defines the direct dependencies of a component. Components that do not have their own dependencies MUST be declared as empty elements within the graph. Components that are not represented in the dependency graph MAY have unknown dependencies. It is RECOMMENDED that implementations assume this to be opaque and not an indicator of a component being dependency-free. It is RECOMMENDED to leverage compositions to indicate unknown dependency graphs.",
       "required": [
         "ref"
       ],

schema/bom-1.5.xsd

@@ -1804,7 +1804,8 @@ limitations under the License.
                     <xs:documentation>Components that do not have their own dependencies MUST be declared as empty
                         elements within the graph. Components that are not represented in the dependency graph MAY
                         have unknown dependencies. It is RECOMMENDED that implementations assume this to be opaque
-                        and not an indicator of a component being dependency-free.</xs:documentation>
+                        and not an indicator of a component being dependency-free. It is RECOMMENDED to leverage
+                        compositions to indicate unknown dependency graphs.</xs:documentation>
                 </xs:annotation>
             </xs:element>
         </xs:sequence>