Path Excludes not working when workspaces are introduced in the code repository based on NPM, PNPM, Yarn2

[porsche-rishisaxena]

Describe the bug

Path Excludes not working when workspaces are introduced in the code repository based on NPM, PNPM, Yarn2.

To Reproduce

Steps to reproduce the behavior:

1. Sample Code Repo created to reproduce the behavior: https://github.com/porsche-ozgursedefoglu/npm-workspaces
2. skip_excluded: true configured in .ort.yml. Please refer to https://github.com/porsche-ozgursedefoglu/npm-workspaces/blob/main/.ort.yml
3. Run the analyzer on the above repo docker run -v $PWD:/project
   ort:latest
   -P ort.analyzer.allowDynamicVersions=true --debug analyze
   -i /project/
   -o /project/ort/

Expected behavior

After Path Exclude applied in .ort.yml, the paths are still visible in the reports which should not be the case and the below statement is violated: "ORT can be configured to skip them completely during the analysis phase. The affected elements are then not processed any further and do not occur in generated reports."