lockfile-guardian

Audit a package-lock.json for integrity tampering and risky install scripts before npm install.