Report Aggregation for Compliance

Managing compliance today means juggling dozens of independent reports - SPDX, CycloneDX, CLIXML, ReadmeOSS - generated separately for each component, with no way to merge, track, or evolve them as a whole. This project introduces a Report Aggregator Tool for FOSSology and SW360 that consolidates multiple compliance reports into a single, authoritative document. Users will be able to select reports across formats, merge them through a transparent aggregation UI, inspect and edit the combined data with full traceability, and propagate changes incrementally when source reports are updated. With seamless integration into FOSSology’s agent framework and SW360’s project hierarchy, this tool will transform fragmented compliance artifacts into unified, audit-ready documentation - making FOSSology an even more complete solution for meeting regulation like the EU Cyber Resilience Act