fix: Bug with transitive dependency resolution

packagemanager/npm_resolver_test.go

@@ -91,8 +91,16 @@ func TestNpmDependencyResolver_ResolveDependencies(t *testing.T) {
 			assertFn: func(t *testing.T, dependencies []*packagev1.PackageVersion, err error) {
 				require.NoError(t, err)
 				require.Equal(t, 2, len(dependencies))
-				require.Equal(t, "loose-envify", dependencies[0].Package.Name)
-				require.Equal(t, "react-dom", dependencies[1].Package.Name)
+
+				packageNames := []string{}
+				for _, dep := range dependencies {
+					packageNames = append(packageNames, dep.Package.Name)
+				}
+
+				require.ElementsMatch(t, []string{
+					"loose-envify",
+					"js-tokens",
+				}, packageNames)
 			},
 		},
 		{