lockfile-lint
https://github.com/lirantal/lockfile-lint
lockfile
関連記事
Why npm lockfiles can be a security blindspot for injecting malicious modules(外部記事)