add CycloneDxAggregateEnforceMojo

[XenoAmess]

close #182
also, close #177

[stevespringett]

Thanks for the PR. Note: Code originating from the SPDX project is prohibited due to a history of publicly documented plagiarism from that project. Allow and deny lists are simple enough to implement. Please consider another way to implement without the use of SPDX libraries or code snippets.

[XenoAmess]

Thanks for the PR. Note: Code originating from the SPDX project is prohibited due to a history of publicly documented plagiarism from that project. Allow and deny lists are simple enough to implement. Please consider another way to implement without the use of SPDX libraries or code snippets.

@stevespringett
I don't think parsing SPDX lincense expression is a very easy thing.
Is there any guide on it?
Do you mean I shall re-write it using something like antlr4?

[stevespringett]

https://pypi.org/project/license-expression/ is a good example of a clean-room implementation. It's written in Python. All the Java implementations I've seen are simple wrappers around the Java SPDX tools which we should be avoiding.

[XenoAmess]

@stevespringett spdx license part removed. please have a review. thanks.