[BUG] private packages can not have a PakcageURL

[jkowalleck]

Describe the bug

cyclonedx-esbuild/src/factories.ts

Line 31 in fb2810b

// !REMINDER: even private packages may have a PURL

this is quite wrong: private packages can not be publisge to npmjs.

therefore, when there are no qualifiers, a private package mustnot have a packageURL

To Reproduce

Steps to reproduce the behavior

Expected behavior

A clear and concise description of what you expected to happen.

Screenshots or output-paste

If applicable, add screenshots or past the output to help explain your problem.

Environment

• @cyclonedx/cyclonedx-esbuild version:
• esbuild version:
• Node version:
• OS:

Additional context

Add any other context about the problem here.

Contribution

• I am willing to provide a fix
• I will wait until somebody else fixes it