Stop looking at bundled dependencies for node.js

This feature never worked, and probably never could. The `bundleDependencies` and `bundledDependencies` keys in npm’s JSON output don't have the metadata we need to collect licenses; they are just arrays of package names. 

These names are not a way to point to and install third-party dependencies, and thus there's no way to know what their licenses are. It seems that developers use this feature in combination with `dependencies` to mark some dependencies as being fully included in the npm package archive. See http://stackoverflow.com/a/25044361

Actual output from `npm info --json --long` would look like this:
```javascript
     bundleDependencies:
      [ 'nopt',
        'npmlog',
        'request',
        'semver',
        'tar',
        'tar-pack',
        'mkdirp',
        'rc',
        'rimraf' ],
```

cc @nertzy