Ensure we can collect the latest package-lock.json including file indirections for versions

[pombredanne]

Short Description

There are some features we may not support in https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true

• hidden lockfiles https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true#hidden-lockfiles
• various non versions versions https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true#dependencies including all these: bundled dependencies, registry sources, git sources, http tarball sources, local tarball sources, local link sources