audit security vulnerabilities as part of ci (#280)

package-lock.json

@@ -1,11 +1,11 @@
 {
   "name": "@actions/exec",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
     "@actions/io": {
-      "version": "1.0.0",
+      "version": "1.0.1",
       "dev": true
     }
   }