Fix false positives in DependencyPinningAssessor for multi-module, Terraform, and empty repos

Fix false positives in DependencyPinningAssessor for multi-module, Terraform, and empty repos #332