check dependencies for known vulns

Fixes #116 
Fixes #117