check dependencies for known vulns

Fixes #116