Hacker News new | ask | show | jobs
by w3news 1814 days ago
It also has some false results. Like package x has a vulnerability in version 1.x And you have a private package @company/x with version 1.x. Than npm audit will blame your private package, even if you dont have used the original package x.