Hoplon is a tool that verifies that your project's hex dependencies contain only the code they have listed on their GitHub.