Describe the bug
When using a local dependency in packages in the package-lock.json file, the NodeAuditAnalyzer fails due to an invalid payload that is sent to the Node Audit API.

Example:

{
  "packages": {
    "dependencies": {
      "@vaadin/flow-frontend": "./target/flow-frontend"
    }
  }
}