fix: fix npm alias present in requires of dependencies

Alias (npm:*) from requires of a npm project are removed with the method NodePackageAnalyzer.shouldSkipDependency but not from the dependencies of dependencies. This modification is used to update this.

core/src/main/java/org/owasp/dependencycheck/data/nodeaudit/NpmPayloadBuilder.java

@@ -244,7 +244,15 @@ private static JsonObject buildDependencies(JsonObject dep, MultiValuedMap<Strin
             depBuilder.add("integrity", dep.getString("integrity"));
         }
         if (dep.containsKey("requires")) {
-            depBuilder.add("requires", dep.getJsonObject("requires"));
+            final JsonObjectBuilder requiresBuilder = Json.createObjectBuilder();
+            dep.getJsonObject("requires").forEach((key, value) -> {
+                if (NodePackageAnalyzer.shouldSkipDependency(key, ((JsonString) value).getString())) {
+                    return;
+                }
+
+                requiresBuilder.add(key, value);
+            });
+            depBuilder.add("requires", requiresBuilder.build());
         }
         if (dep.containsKey("dependencies")) {
             final JsonObjectBuilder dependeciesBuilder = Json.createObjectBuilder();