From the course: Learning npm: A Package Manager
Unlock the full course today
Join today to access over 24,800 courses taught by industry experts.
Running an npm audit
From the course: Learning npm: A Package Manager
Running an npm audit
- [Instructor] An npm audit is basically a command that will check the dependencies of your project and make sure they're safe to use. Whenever you install the new package, the command npm audit runs automatically and tells you if there are any issues with a package. Also, make sure you have NPM version six or above for this to work properly. So let's try it out. So I'm back in Codespace. I don't need to be on the local machine to check this. It was just for the cache thing. So what I'm going to do now is do npmm install socketio. So I'm going to install a new package for this. So as you can see already with installing socketio, we get a warning that there are some issues with this package. Let's run a full report to see what are the issues. So you have 21 vulnerabilities, two low, two moderate, and 13 high, and four critical. So what we could do as suggested here, let's do an npm audit. Okay, so now we got the report…