SBOM conversion issue.

[mbower10]

This may not even be an issue, but the spdx to CycloneDX converter rejects this string:

"referenceCategory": "PACKAGE-MANAGER"

but accepts

"referenceCategory": "PACKAGE_MANAGER"

It's certainly easy to repair these in any incoming spdx json, but the Microsoft's SBOM generation tool uses the former syntax, so it might be a convenience for those users to accept the sbom it produces.

Love the converter btw.

[andreas-hilti]

See CycloneDX/cyclonedx-dotnet-library#267, but it is a bit unclear how to handle it best.