NPM import skips unfixed vulnerabilities #126

The function that resolves version ranges for affected and fixed packages returns empty lists if either of the ranges is empty. For unfixed vulnerabilities, the fixed version range is usually empty, hence no data for those will be added.