`trivy-to-vuls parse` produces excessively large output for `node-pkg` type scans (O(N²) library duplication) #2449