fix: merge purls from matching records in lock-file (#965)

fix: merge purls from matching records in lock-file (#965) #308