github.com/noqcks/syft@v0.0.0-20230920222752-a9e2c4e288e5/syft/pkg/cataloger/javascript/test-fixtures/pkg-json (about) license-object license-objects malformed-license nested-author no-license partial pkg-json private repo-string