github.com/anchore/syft@v1.38.2/cmd/syft/internal/test/integration/test-fixtures/yarn-lock/packages (about) nested-package