What would you like to be added:
Today, JavaScript package cataloger parses only parent name and version but it did not extract dependencies listed in package.json

Why is this needed:
It is a gap in the parser and we are missing dependencies listed in the package manager file

Additional context:
In the below package.json file, Syft today extracts only name and version but not dependencies listed.

Source/Input: "Directory"

{
    "name": "test-3p",
    "version": "0.0.1",
    "description": "Test",
    "lockfileVersion": 1,
    "engines": {
      "node": ">=16.17.1"
    },
    "dependencies": {
      "loadash": "4.17.15",
      "epxress": "4.17.1"
    }
}