Improve the resolve_dependencies process by flitering out non-versioned packages and by detecting modules

[DennisClark]

A recent scan of jqlang/jq identified 20 dependencies. Six of these were from Pipfile and were identified without version number; 14 of these were from Pipfile.lock and were identified with specific versions. The scan failed to identify a package in the modules directory of the project.

The non-versioned packages are not useful and can also result in false-positive vulnerability discoveries.

The modules should be identified as dependencies.

Scan results attached.
scancodeio_jqlang-test2.json