@dependency-track/bom - npm explorer