Important: This documentation covers Yarn 1 (Classic).
For Yarn 2+ docs and migration guide, see yarnpkg.com.

Package detail

npm-audit-plus-plus

rkristelijn794ISC1.1.1

A tool to capture the output of npm audit and convert it to xml

npm, audit, xml, gitlab, pipeline, security, dependency management, ignore, vulnerabilities, continuous integration

readme

NPM Audit Plus Plus

This is a tool to help report npm audit in xml format for e.g. CI/CD for gitlab.

npm audit --json | npx npm-audit-plus-plus > npm-audit-plus-plus.xml
npm audit --production --json | npx npm-audit-plus-plus > npm-audit-plus-plus.xml
npm audit --omit=dev --json | npx npm-audit-plus-plus > npm-audit-plus-plus.xml

The tool is similar to npm-audit-plus but splits npm audit execution to be able to run npm audit with custom arguments.

node version <= 14

Instead of npx you could use npm i -D npm-audit-plus-plus@latest -f to force to run it. Command has a limitation in package.json that it needs Node>16. But it seems to run fine with Node 14. Add a script to package.json:

{
  "scripts": {
    "ci:audit": "npm audit --json --production | npm-audit-plus-plus > npm-audit.junit.xml"
  }
}

Developing

  • npm i - to install dependencies
  • npm t - to parse all json files in test/fixtures. See if the changes are still valid.

Docs