add the --verify option

This is the second attempt at #535 - this time targeting the gulp 4 branch. I think I've tackled all the comments left in the original PR (#668) 
Too much nesting, use vars.

shouldn't it also check dependencies as well? `verify(Object.keys(devDeps).concat(deps))` makes sense