npm Blog Archive: `npm audit`: identify and fix insecure dependencies

The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. Last month, we announced npm@6, which includes a powerful new tool to protect the safety of your code, npm audit. Together with new automatic alerts when a user installs code with a known security risk, audit is a dramatic step to ensure the quality and integrity of the code

[efcl]

npm 6で入ったセキュリティチェックをする`npm audit`コマンドについての解説