some rhel do not have package_module

[celek ibm]

Hello, 

Running this query 

```

SELECT * FROM vuln

where package_name like '%npm%' AND package_module ='' and dist_id ='rhel'

```

I see multiple vuln without package_module - how can I find which version of node they apply to ?  do I need to rely in the fixed_in_version ? 

thanks