github.com/anchore/syft@v1.38.2/cmd/syft/internal/test/integration/test-fixtures/yarn-lock (about) node_modules package.json packages yarn.lock