feat: Improve npm7+ error message

[robcresswell]

This patch bumps the nodejs-lockfile-parser to 1.38.0, improving the error message shown when a dependency is missing from the lockfile

https://github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.38.0

[ghost]

package-lock.json change looks a bit odd. Too many additions for what should just be a version bump. 🤔

Did you run npm ci before npm update snyk-nodejs-lockfile-parser@1.38.0? Might be junk from a stale node_modules.

[robcresswell]

@jahed-snyk I did, yeah. I believe its churning because the docker plugin also depends on the lockfile parser at a different version

npm ls snyk-nodejs-lockfile-parser

snyk@1.0.0-monorepo /Users/robcresswell/snyk/snyk
├─┬ snyk-docker-plugin@4.33.0
│ └── snyk-nodejs-lockfile-parser@1.37.2
├── snyk-nodejs-lockfile-parser@1.38.0
└─┬ snyk@1.0.0-monorepo -> ./
  └── snyk-nodejs-lockfile-parser@1.38.0 deduped

[ghost]

@robcresswell Makes sense. I'm wondering if it's worth offering docker plugin a similar bump before upgrading Snyk CLI so that scanning behaviour is in sync. What do you think?

[robcresswell]

I'd rather do them separately to be honest; the only change is a resulting error message, and I'm reluctant to gate one customers fix behind an entirely separate teams review