Backport #29920

Add lockfile-lint

package.json

@@ -61,7 +61,7 @@
     "js-test-karma-bundle-old": "cross-env BUNDLE=true USE_OLD_JQUERY=true npm run js-test-karma",
     "js-test-integration": "rollup --config js/tests/integration/rollup.bundle.js",
     "js-test-cloud": "cross-env BROWSER=true npm run js-test-karma",
-    "lint": "npm-run-all --parallel js-lint css-lint",
+    "lint": "npm-run-all --parallel js-lint css-lint lockfile-lint",
     "docs": "npm-run-all css-docs js-docs docs-compile docs-lint",
     "docs-compile": "bundle exec jekyll build",
     "docs-production": "cross-env JEKYLL_ENV=production npm run docs-compile",
@@ -71,6 +71,7 @@
     "docs-lint": "npm-run-all --parallel docs-vnu docs-linkinator",
     "docs-serve": "bundle exec jekyll serve",
     "docs-serve-only": "npm run docs-serve -- --skip-initial-build --no-watch",
+    "lockfile-lint": "lockfile-lint --allowed-hosts npm --allowed-schemes https: --empty-hostname false --type npm --path package-lock.json",
     "update-deps": "ncu -u -x \"jquery,karma-browserstack-launcher,qunit,sinon\" && npm update && bundle update && cross-env-shell echo Manually update \\\"site/docs/$npm_package_version_short/assets/js/vendor/\\\"",
     "release": "npm-run-all dist release-sri release-zip docs-production",
     "release-sri": "node build/generate-sri.js",
@@ -133,6 +134,7 @@
     "karma-qunit": "^4.0.0",
     "karma-sinon": "^1.0.5",
     "linkinator": "^2.0.1",
+    "lockfile-lint": "^4.0.0",
     "node-sass": "^4.13.1",
     "nodemon": "^2.0.2",
     "npm-run-all": "^4.1.5",