depguard

PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.