feat(npm): add support for lockfile v3

[melotic]

Closes #476

[github-actions]

👋 Hi! It looks like you modified some files in the Detectors folder.
You may need to bump the detector versions if any of the following scenarios apply:

• The detector detects more or fewer components than before
• The detector generates different parent/child graph relationships than before
• The detector generates different devDependencies values than before

If none of the above scenarios apply, feel free to ignore this comment 🙂

[melotic]

Open questions for the NPM team:

• We do not have access to the ancestors of a current node to determine if a component is nested into another one (i.e. node_modules/x/node_modules/y). So, we recursively find the shortest path to the root note to determine the ancestors. Is there a possibility for multiple paths back to the root node? Or if that's possible, will the component always be placed in the root? (i.e. node_modules/y)