[core] Make hook.metadata a lazy Promise getter - #3988

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.