style(help): doc update for package.json also required for accurate filtering
@@ -15,6 +15,8 @@ NPM dependency types can be filtered with the [detect.npm.dependency.types.exclu
The npm package lock is the preferred npm detector and runs when it finds a [package-lock.json](https://docs.npmjs.com/configuring-npm/package-lock-json.html) generated by npm.
+For accurate filtering with the *detect.npm.dependency.types.excluded* property, a package.json file is also required.
+
npm automatically generates the package-lock.json after an *npm install* which should be run prior to scanning.
This is the most accurate way [solution_name] supports npm as lock file contains resolved versions and all transitives.
