Enforce Location in Retire.js report
Follow-up of gitlab-org/security-products/analyzers/retire.js!2 (comment 122779445)
We need a Location
to be compatible with the AR model, so we must ensure there's a file reported for that field (ie: the location of the package.json
file).