github.com/google/osv-scalibr@v0.4.1/guidedremediation/internal/lockfile/npm/testdata/fake_registry (about) a-1.2.4.json a-2.3.5.json