fix: handle malformed npm packages gracefully in extract action

.aspect/rules/external_repository_action_cache/npm_translate_lock_LTE4Nzc1MDcwNjU=

@@ -2,26 +2,26 @@
 # Input hashes for repository rule npm_translate_lock(name = "npm", pnpm_lock = "@@//:pnpm-lock.yaml").
 # This file should be checked into version control along with the pnpm-lock.yaml file.
 .npmrc=-2065072158
-pnpm-lock.yaml=-481966245
+pnpm-lock.yaml=-1309835144
 examples/npm_deps/patches/meaning-of-life@1.0.0-pnpm.patch=-442666336
 package.json=-275319675
 pnpm-workspace.yaml=-1178830835
 examples/js_binary/package.json=-41174383
+examples/linked_empty_node_modules/package.json=-1039372825
 examples/macro/package.json=857146175
 examples/npm_deps/package.json=-1377141392
 examples/npm_package/libs/lib_a/package.json=-1377103079
 examples/npm_package/packages/pkg_a/package.json=1006424040
 examples/npm_package/packages/pkg_b/package.json=1041247977
 examples/webpack_cli/package.json=1911342006
 js/private/coverage/bundle/package.json=-1543718929
+js/private/image/package.json=-1260474848
+js/private/test/image/package.json=-687546763
+js/private/test/js_run_devserver/package.json=-260856079
 js/private/worker/src/package.json=1608383745
-npm/private/test/package.json=1756993924
+npm/private/test/package.json=600650131
 npm/private/test/vendored/lodash-4.17.21.tgz=-1206623349
 npm/private/test/npm_package/package.json=-1991705133
 npm/private/test/vendored/is-odd/package.json=1041695223
 npm/private/test/vendored/semver-max/package.json=578664053
-examples/linked_empty_node_modules/package.json=-1039372825
 examples/npm_package/packages/pkg_d/package.json=1110895851
-js/private/image/package.json=-1260474848
-js/private/test/image/package.json=-687546763
-js/private/test/js_run_devserver/package.json=-260856079

npm/private/test/package.json

@@ -25,6 +25,7 @@
         "typescript": "*",
         "unused": "latest",
         "test-npm_package": "workspace:*",
-        "webpack-bundle-analyzer": "4.5.0"
+        "webpack-bundle-analyzer": "4.5.0",
+        "pngjs": "5.0.0"
     }
 }