github.com/kastenhq/syft@v0.0.0-20230821225854-0710af25cdbe/syft/pkg/cataloger/javascript/test-fixtures/glob-paths/src/package-lock.json (about) 1 bogus package-lock.json