Package Manifest Audit

Audit a package manifest for what it leaves unpinned and undeclared. Reports a wildcard or latest specifier that accepts the next breaking release, a git or file specifier whose contents can change without the manifest changing, a version that is not an exact semantic version, missing engines, a dependency declared in both a runtime and a development group, and empty scripts.