Glob any package.json / package-lock.json (sometimes these are buried in a...

Glob any package.json / package-lock.json (sometimes these are buried in a project dir structure as parts of "sub-projects", etc.)

auditjs/node14/auditjs-nodejs-14-ci.yml

@@ -20,5 +20,5 @@ auditjs_dependency_check:
     # only run on changes to package and package.lock .json
     only:
         changes:
-            - package.json
-            - package-lock.json
+            - "**/package.json"
+            - "**/package-lock.json"