github.com/kastenhq/syft@v0.0.0-20230821225854-0710af25cdbe/test/integration/test-fixtures/yarn-lock/packages (about) nested-package