main
fix(nodejs): handle legacy license formats in npm lockfile parser (#10684)
fix(nodejs): add name validation for package name from `package.json` (#6268)
chore(deps): merge go-dep-parser into Trivy (#6094)
fix(nodejs): add support for parsing `workspaces` from `package.json` as an object (#6231)