Use the exact version in the lock file to compare with the installed package version instead of the version in `package.json`.

[hyoban]

npm	https://docs.npmjs.com/cli/v10/commands/npm-ls	npm ls -package-lock-only -json
pnpm	https://pnpm.io/cli/list	pnpm ls -json

[tjx666]

This can be implemented as an extra deps check rule.