Dependency Check #6

	name: Dependency Check

	on:
	schedule:
	# Run every Monday at 9 AM UTC
	- cron: '0 9 * * 1'
	workflow_dispatch:

	env:
	NODE_VERSION: 22.x

	permissions:
	actions: read
	contents: read
	packages: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	audit:
	name: Security Audit
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

	- name: Setup Node.js
	uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
	with:
	cache: 'npm'
	node-version: ${{ env.NODE_VERSION }}
	registry-url: 'https://npm.pkg.github.com'
	scope: '@deepnote'

	- name: Install dependencies
	run: npm ci --prefer-offline --no-audit
	env:
	NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Run security audit
	run: npm audit --json > audit-report.json \|\| true

	- name: Upload audit report
	if: always()
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
	with:
	name: npm-audit-report
	path: audit-report.json

	- name: Check for outdated packages
	run: npm outdated \|\| true

	check-deps:
	name: Dependency Check
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

	- name: Setup Node.js
	uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
	with:
	node-version: ${{ env.NODE_VERSION }}
	cache: 'npm'

	- name: Install dependencies
	run: npm ci --prefer-offline --no-audit

	- name: Run postinstall
	run: npm run postinstall

	- name: Check dependencies for issues
	run: npm run checkDependencies

Provide feedback