build: Lint the lockfile for security policies (#1444)

* feat: lint lockfiles

* fix: update secrets baseline

.secrets-baseline

@@ -3,7 +3,7 @@
     "files": null,
     "lines": null
   },
-  "generated_at": "2019-08-10T11:40:14Z",
+  "generated_at": "2019-08-20T08:33:48Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -2973,5 +2973,5 @@
       }
     ]
   },
-  "version": "0.12.4"
+  "version": "0.12.2"
 }

package.json

@@ -36,6 +36,7 @@
     "js-yaml": "3.13.1",
     "jsonwebtoken": "8.5.1",
     "kleur": "3.0.3",
+    "lockfile-lint": "2.0.1",
     "lodash": "4.17.14",
     "lunr-mutable-indexes": "2.3.2",
     "marked": "0.7.0",
@@ -112,8 +113,9 @@
     "test:all": "npm run test && npm run test:functional && npm run test:e2e",
     "pre:ci": "npm run lint",
     "coverage:publish": "codecov",
-    "lint": "npm run type-check && npm run lint:ts",
+    "lint": "npm run type-check && npm run lint:ts && npm run lint:lockfile",
     "lint:ts": "eslint . --ext .js,.ts",
+    "lint:lockfile": "lockfile-lint --path yarn.lock --type yarn --validate-https --allowed-hosts verdaccio npm yarn",
     "format": "prettier --single-quote --trailing-comma none --write \"{src,test}/**/*.ts\"",
     "dev:start": "cross-env BABEL_ENV=registry babel-node --extensions \".ts,.tsx\" src/lib/cli",
     "code:build": "cross-env BABEL_ENV=registry babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps inline",