It's about time we deprecate:
- scanDirOrArchive
- scanPackage
And then refactor Scanner APIs
We should also refactor verify API to properly split between spec and a path (right now it default to process.cwd which could be incorrect in some API scenario).