github.com/google/osv-scalibr@v0.4.1/annotator/misc/npmsource (about) npmsource.go npmsource_test.go testdata