We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
npx lockfile-lint --path package-lock.json
1 parent 24dec8f commit f4f1340Copy full SHA for f4f1340
.github/workflows/test.yml
@@ -42,3 +42,6 @@ jobs:
42
- name: Ensure dependencies are compatible with the version of node
43
run: npx ls-engines
44
- run: npm run lint
45
+ # https://github.com/lirantal/lockfile-lint#readme
46
+ - name: Scan lockfile for security issues
47
+ run: npx lockfile-lint --path package-lock.json
0 commit comments