audit security vulnerabilities as part of ci (#280)

packages/io/package-lock.json

@@ -1,5 +1,5 @@
 {
   "name": "@actions/io",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "lockfileVersion": 1
 }

packages/io/package.json

@@ -27,6 +27,7 @@
     "directory": "packages/io"
   },
   "scripts": {
+    "audit-moderate": "npm install && npm audit --audit-level=moderate",
     "test": "echo \"Error: run tests from root\" && exit 1",
     "tsc": "tsc"
   },