The npm audit command submits a description of the dependencies configured in your package.

Run a security audit SYNOPSIS§ EXAMPLES§ Scan your project for vulnerabilities and automatically install any compatible updates to vulnerable dependencies: Run audit fix without modifying node_modules, but still updating the pkglock: Skip updating devDependencies: Have audit fix install semver-major updates to toplevel dependencies, not just semver-compatible ones: Do a dry run to get an idea of what audit fix will do, and also output install …