Create analyzer for OWASP Dependency-Track

[stevespringett]

OWASP Dependency-Track (dev3+) allows the importing and refining of Dependency-Check XML reports. It also allows the importing of SPDX and the manual creation of components.

ODT provides a REST API (similar to Maven Central) that allows the searching of components by MD5/SHA1 hashes and will respond back with the highest confidence metadata available.

This ticket is to track the creation of an analyzer for Dependency-Check so that it can use Dependency-Track as a source of evidence.

[amandel]

I've created #2233 which kind of points into the other direction. IMHO both are valuable.