Generates SPDX 2.3 JSON SBOM documents from LowEndInsight analysis reports. Embeds bus-factor risk scores as annotations on each package.
Summary
Functions
Generates an SPDX 2.3 JSON string from a LowEndInsight report map. Supports both single-repo and multi-repo report formats.