Consider using lockfile-lint

[sobolevn]

https://github.com/lirantal/lockfile-lint

Related:

• https://snyk.io/blog/why-npm-lockfiles-can-be-a-security-blindspot-for-injecting-malicious-modules/
• https://twitter.com/liran_tal/status/1188931025805688837

[lirantal]

I'm happy to help answer any questions