Added optional dependency detection for npm lockfiles (version 2 and 3)

[RushabhBhansali]

Summary:

Currently optionalDependencies in npm lockfiles are not detected by NpmLockFile3Detector and NpmDetectorWithRoots. This is fixed by this PR.

Details

• optionalDependencies are now registered same as the regular dependencies, "optional" status is not reflected in Detection.

Testing

• added unit test for optional Dependencies detection.
• Noticed that dev Dependency unit tests were missing, added those as well.
• Locally verified that optional Dependencies are registered in the scan manifest.
• Added verification test resources for lockfile 3

Related issue: #560

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 75.4%. Comparing base (5be8728) to head (0b1727a).

Additional details and impacted files

@@          Coverage Diff          @@
##            main   #1030   +/-   ##
=====================================
  Coverage   75.4%   75.4%           
=====================================
  Files        236     236           
  Lines      10408   10409    +1     
  Branches    1039    1040    +1     
=====================================
+ Hits        7851    7852    +1     
  Misses      2267    2267           
  Partials     290     290           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[RushabhBhansali]

Verification test failures are expected due to addition of optional dependencies.

[github-actions]

👋 Hi! It looks like you modified some files in the Detectors folder.
You may need to bump the detector versions if any of the following scenarios apply:

• The detector detects more or fewer components than before
• The detector generates different parent/child graph relationships than before
• The detector generates different devDependencies values than before

If none of the above scenarios apply, feel free to ignore this comment 🙂