[Suggestion] npmvet --lock command of some sort

[zwacky]

I know sometimes even minor versions can result in fuckery, I'd wanted to use a --lock=installed command.
This would edit my package.json file with the specific versions that are surely to work.

This could be expanded if npmvet would display available version, so you could tell npmvet what version they should lock on (either package version, installed version or available version).

In that case a --lock=package|installed|available could be useful.