remove 'package_location' attributes from JSON files to scrub sensitive and machine-specific information
remove 'package_location' attributes from JSON files to scrub sensitive and machine-specific information

package_location is still held in memory, as it’s needed to navigate
the file directory structure, but should no longer be written to disk

kristovatlas/npm-dependency-check