Add support for scanning dependencies in package.json

[anthonyharrison]

Add support for javascript dependencies included in package.json.

File format is described in [https://docs.npmjs.com/cli/v8/configuring-npm/package-json#dependencies]

[XDRAGON2002]

As we already have a json parser, should we add support for package.json as an add-on for the json parser (as package.json at it's core is just "json"), or should we create a new parser which would specially deal with files named "package.json"?

[anthonyharrison]

@XDRAGON2002 I have a working prototype function which scans the package.json file and extracts the packages and version numbers before finding the vendor. However there needs to be better product/vendor matching which #1504 is in the process of resolving. I think it needs to be separate to the json parser although I will look at this to see if can be used.

[XDRAGON2002]

That's great!
Let me know if I could help in any way.