github.com/noqcks/syft@v0.0.0-20230920222752-a9e2c4e288e5/syft/pkg/cataloger/javascript/test-fixtures/pkg-lock (about) alias-1 alias-2 array-license lock-2 lock-3 node_modules package-lock.json