Merge pull request #30 from elasticio/add-npm-audit

Add npm audit

Author: Legendmiha

.circleci/config.yml

@@ -3,7 +3,7 @@ jobs: # a collection of steps
   build: # runs not using Workflows must have a `build` job as entry point
     working_directory: ~/elasticio-rest-node # directory where steps will run
     docker: # run the steps with Docker
-      - image: circleci/node:10.15 # ...with this image as the primary container; this is where all `steps` will run
+      - image: circleci/node:12 # ...with this image as the primary container; this is where all `steps` will run
     steps: # a collection of executable commands
       - checkout # special step to check out source code to working directory
       - run:
@@ -19,6 +19,9 @@ jobs: # a collection of steps
           key: dependency-cache-{{ checksum "package-lock.json" }}
           paths:
             - ./node_modules
+      - run:
+          name: "Running audit"
+          command: npm audit --production --audit-level=high
       - run: # run tests
           name: test
           command: npm test

package-lock.json

@@ -1,7 +1,7 @@
 {
     "name": "elasticio-rest-node",
     "description": "elastic.io REST API client",
-    "version": "1.2.6",
+    "version": "1.2.7",
     "author": "elastic.io GmbH <[email protected]>",
     "engines": {
         "node": ">=12.13.0"
@@ -13,10 +13,10 @@
     },
     "main": "./lib/client.js",
     "dependencies": {
-        "lodash": "4.17.15",
+        "lodash": "4.17.21",
         "q": "1.5.1",
         "request": "2.88.2",
-        "requestretry": "4.1.0"
+        "requestretry": "7.0.2"
     },
     "devDependencies": {
         "eslint": "6.8.0",