add maven-lockfile in https://github.com/nexB/dependency-inspector/ ref: https://github.com/nexB/dependency-inspector/issues/6