You shouldn't need to update codebom to update the list of licenses. It's currently kept separate because the update_licenses utility is painfully slow and rdflib is a nontrivial dependency.