Hi,

in package.json files there there are invalid "contributors" assignments.

We have
...
"contributors": "https://github.com/inikulin/parse5/graphs/contributors",
...

A URL is not allowed here, it must be an array of people (persons) according to npm package.json specification:

https://docs.npmjs.com/cli/v11/configuring-npm/package-json#people-fields-author-contributors

This breaks proper parsing of SBOM generators like Syft,

Please check and fix all invalid package.json files.