spike: test command paket support

[Kirill89]

What does this PR do?

Added paket support to snyk test command.

It is not production-ready:

• only root level dependencies
• relevant tasks still in progress

How to test locally

• Clone and checkout feat: added initial dependencies parser implementation snyk-paket-parser#20
• npm link in snyk-paket-parser
• npm link snyk-paket-parser in snyk
• Run test command on paket project.

Tested manifest file

framework: net451
source https://api.nuget.org/v3/index.json

nuget System.Net.Http 4.3.0
nuget FAKE

CLI output

snyk-dev test /Users/kirill/Work/paket-test

Testing /Users/kirill/Work/paket-test...

✗ Medium severity vulnerability found in System.Net.Http
  Description: Authentication Bypass
  Info: https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETHTTP-60048
  Introduced through: System.Net.Http@4.3.0
  From: System.Net.Http@4.3.0

✗ High severity vulnerability found in System.Net.Http
  Description: Denial of Service (DoS)
  Info: https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETHTTP-60045
  Introduced through: System.Net.Http@4.3.0
  From: System.Net.Http@4.3.0

✗ High severity vulnerability found in System.Net.Http
  Description: Improper Certificate Validation
  Info: https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETHTTP-60046
  Introduced through: System.Net.Http@4.3.0
  From: System.Net.Http@4.3.0

✗ High severity vulnerability found in System.Net.Http
  Description: Privilege Escalation
  Info: https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETHTTP-60047
  Introduced through: System.Net.Http@4.3.0
  From: System.Net.Http@4.3.0

✗ High severity vulnerability found in System.Net.Http
  Description: Information Disclosure
  Info: https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETHTTP-72439
  Introduced through: System.Net.Http@4.3.0
  From: System.Net.Http@4.3.0




Organisation:      kirill
Package manager:   nuget
Target file:       paket.dependencies
Open source:       no
Project path:      /Users/kirill/Work/paket-test

Tested 2 dependencies for known vulnerabilities, found 5 vulnerabilities, 5 vulnerable paths.


Process finished with exit code 1