[deno] Detect direct imports

[prabhu]

Deno seems to encourage golang style imports of http and jsr packages. These currently would not be reported by cdxgen.

import { VERSION } from "https://deno.land/std/version.ts";

import { parse, stringify } from "jsr:@std/toml";

import { Client } from "https://deno.land/x/[email protected]/mod.ts";

Blocked by

package-url/purl-spec#302

[prabhu]

deno.lock example - https://github.com/denoland/fresh-blog-example/blob/main/deno.lock
import_map example - https://github.com/denoland/fresh-blog-example/blob/main/import_map.json