published package.json causing problems in CycloneDX Webpack Plugin

[tomsontom]

Describe the bug

When using the CycloneDX Webpack Plugin luxon the luxon dependency is not showing up in the bom because the package.json inside your npm-packages src-fold does not contain a name.

To Reproduce

See CycloneDX/cyclonedx-webpack-plugin#1237 how to reproduce.

Actual vs Expected behavior

See CycloneDX/cyclonedx-webpack-plugin#1237

Desktop (please complete the following information):

• OS: mac osx
• Luxon version: 3.4.4

Additional context

I'm not sure who is to blame and I could not find a description if it allowed to have a package.json as part of the npm-module as shipped by your project (eg not containing a name-property). I also could not find out what the package.json is used for. If not mistaken the published js-Files do not use it.