github.com/google/osv-scalibr@v0.4.1/guidedremediation/testdata/npm/basic (about) package-lock.json result.json want.package-lock.json