github.com/anchore/syft@v1.38.2/cmd/syft/internal/test/integration/test-fixtures/npm-lock (about) node_modules package-lock.json package.json