feat(danger): validate lockfiles (#7)

package.json

@@ -22,13 +22,14 @@
     "start:watch": "nodemon --signal SIGTERM --watch src --ext js,jsx --exec babel-node src/server/index.js",
     "prestart:prod-sample": "npm run build:prod-sample",
     "start:prod-sample": "docker-compose -f ./prod-sample/docker-compose.yml up --abort-on-container-exit",
+    "test:lockfile": "lockfile-lint -p package-lock.json -t npm -a npm -o https: -c -i",
     "test:lint": "eslint --ext js,jsx,md,snap .",
     "start": "node lib/server/index.js",
     "test:unit": "jest --testPathIgnorePatterns integration --config jest.config.js",
     "pretest:integration": "concurrently \"npm run build:prod-sample\" \"docker-compose -f ./prod-sample/docker-compose.yml pull nginx selenium-chrome\" --kill-others-on-fail -n build-prod-sample,build-dependency-images",
     "test:integration": "JEST_TEST_REPORT_PATH=./test-results/integration-test-report.html jest integration --config jest.integration.config.js --forceExit",
     "test:danger": "if-env NODE_ENV=production && danger ci || danger local",
-    "test": "npm run test:lint && npm run test:unit && npm run test:integration && npm run test:danger && npm run test:git-history",
+    "test": "npm run test:lint && npm run test:lockfile && npm run test:unit && npm run test:integration && npm run test:danger && npm run test:git-history",
     "test:git-history": "commitlint --from origin/master --to HEAD",
     "serve-module": "serve-module",
     "drop-module": "drop-module",
@@ -142,6 +143,7 @@
     "jest": "^24.9.0",
     "jest-circus": "^24.9.0",
     "js-yaml": "^3.13.1",
+    "lockfile-lint": "^3.0.5",
     "lodash.set": "^4.3.2",
     "markdown-table": "^1.1.3",
     "mkdirp": "^0.5.1",