feat: multi-folder scan for monorepos with no root lockfile

examples/no-root-package/apiServer/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "api-server",
+  "version": "1.0.0",
+  "dependencies": {
+    "lodash": "4.17.20"
+  }
+}

examples/no-root-package/sessionManager/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "session-manager",
+  "version": "1.0.0",
+  "dependencies": {
+    "axios": "1.7.7"
+  }
+}

src/index.ts

@@ -59,7 +59,8 @@ import {
   FixExecutionResult,
   printFixModeSummary,
 } from "./utils/fix-runner.js";
-
+import { hasRootLockfile, findNestedLockfiles } from "./parsers/multi-package.js";
+import { handleMultiFolderScan } from "./scan/multi-folder-scan.js";
 let parsedArgs: ReturnType<typeof parseArgs> | null = null;
 try {
   parsedArgs = parseArgs(process.argv.slice(2));
@@ -157,6 +158,14 @@ if (parsedArgs) {
 
     validateOptions(options);
 
+    // Multi-folder mode: if no root lockfile and 2+ nested lockfiles exist,
+    // route to dedicated multi-folder handler instead of single-lockfile scan
+    const nestedLockfiles = findNestedLockfiles(projectPath, searchDepth);
+    if (!hasRootLockfile(projectPath) && nestedLockfiles.length >= 2) {
+      await handleMultiFolderScan({ projectRoot: projectPath, batchSize, options });
+      return;
+    }
+
     let advisorySourceLine: string;
     let advisoryDbFreshnessLine: string | null = null;
     let advisoryDbWarning: string | null = null;
@@ -220,6 +229,7 @@ if (parsedArgs) {
       return;
     }
 
+    if (!options.json) console.log();
     let scanState = await scanProject({
       scanInput,
       batchSize,