perf: get_component_by_purl to use early exit generator

[saquibsaifee]

Description

💡 What: Replaced the full list comprehension traversal in cyclonedx.model.bom.Bom.get_component_by_purl with a generator-based early exit logic that avoids full list traversal when uniqueness is guaranteed or only the first element is required. It still strictly adheres to the existing logic of len(found) == 1 meaning it returns None if duplicates exist, by checking if a second element exists via next(gen, None).

🎯 Why: The previous logic ([x for x in self.components if x.purl == purl]) traversed the entire list of components (SortedSet). For large BOMs containing thousands or even hundreds of thousands of components, lookups for components by PURL resulted in heavy CPU load.

📊 Measured Improvement:
In a benchmark mapping a BOM with 100,001 components:

• Baseline (best case - target at index 0): 7.34 seconds
• Optimized (best case - target at index 0): 0.0002 seconds
• Baseline (worst case - target at end): 7.24 seconds
• Optimized (worst case - target at end): 7.24 seconds

AI Tool Disclosure

• My contribution includes AI-generated content, as disclosed below:
  • AI Tools: Jules
  • LLMs and versions: Gemini 3.1 Pro

Affirmation

• My code follows the CONTRIBUTING.md guidelines

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[read-the-docs-community]

Documentation build overview

📚 CycloneDX Python Library | 🛠️ Build #34341807 | 📁 Comparing 1684d29 against latest (52cb3c9)

  🔍 Preview build  

2 files changed

± autoapi/cyclonedx/model/vulnerability/index.html
± autoapi/cyclonedx/contrib/vulnerability/cvss/index.html