fix(supply-chain): continue after file-local lockfile limitations

Keep collecting independent project lockfiles after Pipenv parse errors, unsupported sources and file-local limits. Stop only for the aggregate file, runtime or package budget.

Signed-off-by: YMuskrat <101849520+YMuskrat@users.noreply.github.com>

Author: YMuskrat

src/skillspector/nodes/analyzers/static_patterns_supply_chain.py

@@ -1868,7 +1868,8 @@ def _collect_locked_versions_detailed(
             limitations.extend((path, limitation) for limitation in parse_limitations)
         else:
             packages = _extract_packages_from_toml_lock(content, limit=remaining + 1)
-        if len(packages) > remaining:
+        package_limit_exceeded = len(packages) > remaining
+        if package_limit_exceeded:
             limitations.append(
                 (
                     path,
@@ -1897,7 +1898,8 @@ def _collect_locked_versions_detailed(
                     ambiguous_versions.add(key)
                 else:
                     project_versions[normalized_name] = version
-        if limitations:
+        # File-local parse gaps must not prevent resolution in other projects.
+        if package_limit_exceeded:
             break
     return locked_versions, limitations