Rohan kar

You are already install the required package go ahead .

> I have generated a valid `spdx` file from VCPKG, then I try to use it with `osv-scanner`, but it generates no package sources found. Can you please help me...

> I have tried [spdx-tool](https://github.com/spdx/tools-java/releases/tag/v1.1.3) to convert to JSON. Yet the same issue. I am attaching both the original file and its converted version. > > [converted.zip](https://github.com/google/osv-scanner/files/10298602/converted.zip) you can try...

> Update, I have used [cyclonedx-cli](https://github.com/CycloneDX/cyclonedx-cli) to convert from `spdx` to `cdx` using the following command: > > ``` > cyclonedx-win-x64.exe convert --input-file vcpkg.spdx.json --output-file vcpkg.json --input-format spdxjson --output-format json...