Add security tools (LavaMoat, StepSecurity, Socket)

[shapkarin]

Duplicates

• I've searched existing issues and this hasn't been requested yet

Package

Not sure

Problem

A ton of supply chain attack these days.

Proposed solution

There are a bunch of great tools to prevent that:

• LavaMoat. Provides strict policies for your dependencies (like allow only specific API) used by MetaMask (proof) and backed by Consensys
• StepSecurity has GitHub Actions and API
• Socket has GitHub Actions and API

Alternatives considered

No response