github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/javascript/test-fixtures/pnpm-v9-snapshots (about) pnpm-lock.yaml