Add an endpoint to get the packages for projects

[sschuberth]

In the front-end, we'd like to show the dependencies immediately after an analyzer run, e.g. as a flat list of de-duplicated packages, either per project, or even across all projects.

The UI could be a table that contains the parent project as a column which can be filtered for. As a quick action, I imagine having an "Export SBOM" button here that would only use the currently visible / filtered packages as the input. This would allow to create SBOMs per project, but also to omit packages with certain filtered properties from the SBOM.

[mnonnenmacher]

I would split that into two issues, one for the list and one for the graph, because I think that the graph feature is a lot more difficult to implement.

[sschuberth]

Done. I've edited this issue to be for the list, and created #944 for the graph.

[lamppu]

@mnonnenmacher would it be ok on your side if I gave this one a try?

[mnonnenmacher]

@mnonnenmacher would it be ok on your side if I gave this one a try?

@lamppu Yes, we have currently not planned to start working on it and it should also not be less complicated than the vulnerabilities endpoint.

[sschuberth]

not be less complicated

Hopefully the "not" was wrong here 😆