sonarcss-assembly zip false css-bundle **/* package-lock.json