Checks the package-lock.json file for insecure http:// links