Checks for known security issues with the installed packages.
If security issues are found, try to update your dependencies via
pnpm update. If a simple update does not fix all the issues, use overrides to force versions that are not vulnerable. For instance, if
lodash@<2.1.0 is vulnerable, use this overrides to force
Or alternatively, run
pnpm audit --fix.
If you want to tolerate some vulnerabilities as they don't affect your project, you may use the
- Type: low, moderate, high, critical
- Default: low
Only print advisories with severity greater than or equal to
Add overrides to the
package.json file in order to force non-vulnerable versions of the dependencies.
Output audit report in JSON format.
Only audit dev dependencies.
Only audit production dependencies.
If the registry responds with a non-200 status code, the process should exit with 0. So the process will fail only if the registry actually successfully responds with found vulnerabilities.