github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/javascript/test-fixtures (about) corrupt glob-paths pkg-json pkg-lock pnpm-remote pnpm-v6 pnpm-v9-snapshots pnpm-v9 pnpm yarn-berry yarn-dups yarn-remote yarn-v1-deps yarn