Make `dependencies.allow` work with dependency tree

[tanepiper]

This feature should analyse all dependencies in a package.json, but also analyse it's dependency tree.

This would be in two modes:

• Local - Reads all package.json files within node_modules and checks them. If these dependencies contain sub-dependencies it will continue to recurse until all folders are done.
• Remote - Reads the package.json and then uses this to resolve all dependencies remotely. It will then analyse like local, and recurse until all dependencies are resolved.