Don't trust npm dependencies, verify them

Isohawk runs your dependencies in isolation watching what they do before they can reach your development machine, CI, and production environments.