Fix Vulnerable Package dependency tree information

Match the package name with minimatch, so that we get good package trees for vulnerable matches with wildcards