Make Dependency-Track consume Dependency-Check BOM's

I think it'd be good if dependency-check and dependency-track are integrated more closely, as they are both OWASP projects. They both have their benefits - Dependency-Check is better at detecting vulnerabilities in components and identifying all components, and Dependency-Track is really good at providing a portfolio overview of licenses, vulnerabilities and projects that are affected together with metrics that make it easy to choose which projects need attention first.

To make them both work together, I've worked on an XSLT stylesheet that can convert the output of a dependency-check run in XML format to a CycloneDX BOM that can be consumed by Dependency-Track. It seems that I'm not the only one missing that feature in Dependency-Track. The benefit of the XSLT was for me that I can use a command line tool like xsltproc to do the conversion, and use Jenkins or similar with the dependency-check and dependency-track plugins to make the two work together. I hope that it can also be integrated into Dependency-Track permanently and increase the utility of the program.

```

DepCheck2CycloneDX XSLT Converter
Dependency-Check to CycloneDX BOM XSLT converter
2.0.3

8a41309418ecb39386d9b7df7beb69ae
3ff08273a4904414dd15ff441817bd926f72cda1
c9bf709fd770bb05bf811e86ab16d8e0ba132c5b0352d18eaa2d5d3800ab4afe

pkg:npm/@/@

```