We were not including creators from all the merged sboms
If the merge set of documents are included in the external doc refs, they need to be removed, as they are not external anymore.
For relationships if docrefs are present, means they could be from external doc refs, and if those are in the mergeset then remove them.
SPDX2.2 has a concept of files being part of a package, SPDX2.3 does not, fixed that.
pyspdxtool reports an error if filesAnalyzed is set to false, then no relationships can exist. My read on the spec does not align with this. I have left my code as is.
SPDX merging had a bunch of issues.