Blank "path" for file that have multiple package_type extracted from sctk2inv #4
Description
The file "fixtures/locks-e2e/2-composer.lock" (https://github.com/G-Rath/osv-detector/blob/main/fixtures/locks-e2e/2-composer.lock) has many package details in it. However, only a single row is associated with this file directly, while the extracted package information is put in other rows that lack the corresponding path value.