Modules which are a string should also be parsed

[ahayzen]

Modules which are a string also need to be parsed, as they may contain extra-data or need CVE checking etc. (these pulls skip the string at the moment #3 #6)

The string is just a patch to a nested file, so we should be able to iterate through them.
Eg

"modules": [
    "shared-modules/udev/udev-175.json",
    ...
]

[wjt]

I fixed this in 6b1c30f