Pin npm versions

Author: thomasleplus

json/Dockerfile

@@ -9,18 +9,15 @@ ARG USER_HOME=/home/default
 ARG USER_ID=1000
 ARG USER_GECOS=Default
 
-# hadolint ignore=DL3016,DL3018
+# hadolint ignore=DL3018
 RUN apk --update --no-cache add \
     jose \
     jq \
     npm \
     openssl \
     py3-setuptools \
     py3-pip \
-    && rm -rf /var/cache/apk/* \
-    && npm install -g jsonlint \
-    && npm install -g prettyjson \
-    && npm install -g jwt-cli
+    && rm -rf /var/cache/apk/*
 
 SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
 
@@ -33,6 +30,16 @@ RUN pip3 install --no-cache-dir --upgrade --break-system-packages \
        exit 1 ; \
     fi
 
+RUN npm install -g \
+    [email protected] \
+    [email protected] \
+    [email protected] \
+    && msg="$(npm outdated --global | grep -i -e jsonlint -e jwt-cli -e prettyjson || true)" \
+    && if [ -n "${msg}" ]; then \
+       >&2 echo "ERROR: outdated: ${msg}" ; \
+       exit 1 ; \
+    fi
+
 RUN adduser \
   --home "${USER_HOME}" \
   --uid "${USER_ID}" \