Feat: Include components from pnpm-lock.yaml importers

[aryan-rajoria]

Based on discussion in #1359, We now add dependencies for additional components found in importers section of pnpm-lock.yaml.

[aryan-rajoria]

prismsbom.json
rushsbom.json
sample output for rush-example repo:

    "dependencies": [
        {
            "ref": "pkg:npm/rush",
            "dependsOn": []
        },
        {
            "ref": "pkg:npm/rush/my-app#apps/my-app",
            "dependsOn": [
                "pkg:npm/my-controls",
                "pkg:npm/whatwg-fetch"
            ]
        },
        {
            "ref": "pkg:npm/rush/my-controls#libraries/my-controls",
            "dependsOn": []
        },
        {
            "ref": "pkg:npm/rush/my-toolchain#tools/my-toolchain",
            "dependsOn": [
                "pkg:npm/colors"
            ]
        },
        {
            "ref": "pkg:npm/@types/[email protected]",
            "dependsOn": []
        },.......

sample output for prism-react-renderer:

    "dependencies": [
        {
            "ref": "pkg:npm/prism-react-renderer",
            "dependsOn": []
        },
        {
            "ref": "pkg:npm/prism-react-renderer-monorepo/demo#packages/demo",
            "dependsOn": [
                "pkg:npm/clsx",
                "pkg:npm/formidable-oss-badges",
                "pkg:npm/react",
                "pkg:npm/react-dom"
            ]
        },
        {
            "ref": "pkg:npm/prism-react-renderer-monorepo/generate-prism-languages#packages/generate-prism-languages",
            "dependsOn": [
                "pkg:npm/react"
            ]
        },
        {
            "ref": "pkg:npm/prism-react-renderer-monorepo/prism-react-renderer#packages/prism-react-renderer",
            "dependsOn": [
                "pkg:npm/@types/prismjs",
                "pkg:npm/clsx"
            ]
        },
        {
            "ref": "pkg:npm/@ampproject/[email protected]",
            "dependsOn": [
                "pkg:npm/@jridgewell/[email protected]",
                "pkg:npm/@jridgewell/[email protected]"
            ]
        },......

[justindeocampodd]

lgtm!

[prabhu]

Any ideas about the test failures?

[aryan-rajoria]

Any ideas about the test failures?

Yes have fixed