risk_assess_pkg_lock_files function

Process lock files