fix(poly check): recursive third party sub dependencies

Fixing an issue with the poly check command and when parsing the lock-file dependencies, where a library has sub-dependencies that themselves depend on the library

Details in #322