Implement anti-trojan-source

[fraxken]

Ideally I want to implement anti-trojan-source into JS-X-Ray to replace our custom detection.

However, the package includes globby and meow as dependencies, which is a big problem for us as it introduces 75 deps (JS-X-Ray is less than 15 NPM dependencies).