We need to swap the package name and classification. ### Discussed in https://github.com/aquasecurity/trivy/discussions/9710