fix: add additional comments + ignore virtual modules when scanning

src/helpers.ts

@@ -42,6 +42,9 @@ export async function getCorrespondingPackageFromModuleId(
         return Promise.resolve(null);
     }
 
+    // dirname() will do the equivalent of traversing up the
+    // directory tree one level when called on a path without
+    // a file.
     const folder = dirname(modulePath);
     const potentialPackagePath = join(folder, "./package.json");
 

src/index.ts

@@ -95,7 +95,12 @@ export default function rollupPluginSbom(userOptions?: RollupPluginSbomOptions):
          * Register only the effectively imported third party modules from `node_modules`
          */
         async moduleParsed(moduleInfo) {
-            const nodeModuleImportedIds = moduleInfo.importedIds.filter((entry) => entry.includes("node_modules"));
+            // filter out modules that exists in node_modules and
+            // also are not Rollup virtual modules (starting with \0)
+            const nodeModuleImportedIds = moduleInfo.importedIds.filter(
+                (entry) => entry.includes("node_modules") && !entry.startsWith("\0"),
+            );
+
             const potentialComponents = await Promise.all(
                 nodeModuleImportedIds.map((moduleId) => {
                     if (!moduleId.includes("node_modules")) {