Glossary term
What is npm audit? Meaning for developers
An npm command that compares your installed packages with a list of known vulnerabilities and exits non-zero if it finds any.
Learn it properly · Security for DevelopersLesson 6: Dependencies and the Supply Chain: npm, Lockfiles and GitHub ActionsHow a package you did not write can hurt you: typosquatting, install scripts, malicious updates. Lockfiles, npm audit, Dependabot, secret scanning and securing your CI.