github.com/google/osv-scalibr@v0.4.1/guidedremediation/internal/strategy/inplace/testdata/npm (about) package-lock.json patches.json universe.yaml vulnerabilities.json