Visible private token in qompoter.lock file

[MichelC-20]

When downloading dependencies as lib, using qompoter update command, the private token is visible in resulted qompoter.lock file

Version : v0.5.1

Example :
qompoter.json file

{
        "name": "george/return-of-the-jedi",
        "authors": [
            {
                "name": "George Lucas",
                "homepage": "https://starwars.com"
            }
        ],
        "require": {
            "young/luke": "v0.2.1-lib:green-light-saber",
            "young/leia": "v0.5.*",
            "old/yoda": "master"
        },
        "repositories": {
            "old/yoda" : "https://github.com"
        }
    }

qompoter.lock file after using qomopoter update

{
  "last": "123456789",
  "name": "george/return-of-the-jedi",
  "date": "2024-03-18T11:03:04+01:00",
  "require": {
    "young/luke": { "version": "v0.2.1-lib", "type": "gitlab", "url": "https://github.com/api/v4/projects/young%2Fluke/jobs/artifacts/v0.2.1-lib/download?job=green-light-saber&private_token=<privateToken>", "md5sum": "456789123" }
    ,"young/leia": { "version": "v0.5.1", "type": "git", "url": "https://github.com:/young/leia.git", "md5sum": "456123789" }
    ,"old/yoda": { "version": "master", "type": "git", "url": "https://github.com:/old/yoda.git", "md5sum": "987654321" }
  }
}