mopanc/depguard

Was I hit by an npm supply-chain attack? Scan every lock fi…