What would you like to be added:
Including dependency relationships in a CycloneDx SBOM generated by the javascript-lock cataloger?

Why is this needed:
So that I can report on Dependency Tree's using tools such as Dependency Track.

Additional context: