mhoc/npm audit
runs an analysis of your nodejs dependencies and comments the results back to the pr
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| comment-pr | provide 'true' or 'false' to control whether the action should comment the results back to the pull request. | no | true |
| elide-attribtion | by default, this generates a final line that links back to this repository, to provide a hyperlink for submitting bugs and such. set to 'true' to remove this. | no | false |
| fail-on-outdated | provide 'true' to fail the workflow if any outdated packages are found | no | false |
| fail-on-vulnerability | provide 'true' to fail the workflow if any vulnerabilities are found | no | false |
Outputs
| name | description |
|---|---|
| total-dependencies | the total number of transitive dependencies your project has |
| total-vulnerabilities | the total number of open vulnerabilities your project has |