github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/package-lock.json (about) 1 bogus package-lock.json