fix: return artifactId sha1 combination from package info as fallback

[jk05]

• [x] Tests written and linted
• [ ] Documentation written
• [x] Commit history is tidy

What this does

In the situation there are multiple failed /packages searches, we put all deps into one direct 'unknown' dep. This work adds a fallback to use a combination of the artifactId and sha1 instead as unique identifier.

[snyksec]

:tada: This PR is included in version 3.25.2 :tada:

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot :package::rocket: