ciphermask/.circleci/scripts/npm-audit

#!/usr/bin/env bash

set -e
set -u
set -o pipefail

if ! npm audit --production
then
    ! npm audit --production --json > audit.json
    printf '%s\n' ''
    node .circleci/scripts/npm-audit-check.js
fi
ci: Enable npm audit check 6 years ago			`#!/usr/bin/env bash`

			`set -e`
			`set -u`
			`set -o pipefail`

Fix `npm-audit` script (#6908) The npm audit script was auditing all dependencies, then filtering the results to just the advisories concerning production dependencies. This was done by checking the boolean `dev` and `optional` properties of each `findings` entry in each advisory. The `dev` and `optional` properties are now missing, which is resulting in dev advisories being mistakenly identified as affecting production. This check has been removed, and instead the `--production` flag is used when calling `npm audit`. This accomplishes the same goal without relying as much upon the audit output format. The `--production` flag was added in `npm` `v6.10.0`, so `npm` has been updated to the current latest stable (`v6.10.2`) for the `test-deps` job. It was also updated on the `prep-deps-npm` job to ensure consistency in behaviour. The other jobs only use `npm run` which hasn't changed substantially in some time, so compatibility isn't really a concern for those. `audit.json` has also been added to `.gitignore`. It was accidentally checked in once while working on this branch. 5 years ago			`if ! npm audit --production`
ci: Enable npm audit check 6 years ago			`then`
Fix `npm-audit` script (#6908) The npm audit script was auditing all dependencies, then filtering the results to just the advisories concerning production dependencies. This was done by checking the boolean `dev` and `optional` properties of each `findings` entry in each advisory. The `dev` and `optional` properties are now missing, which is resulting in dev advisories being mistakenly identified as affecting production. This check has been removed, and instead the `--production` flag is used when calling `npm audit`. This accomplishes the same goal without relying as much upon the audit output format. The `--production` flag was added in `npm` `v6.10.0`, so `npm` has been updated to the current latest stable (`v6.10.2`) for the `test-deps` job. It was also updated on the `prep-deps-npm` job to ensure consistency in behaviour. The other jobs only use `npm run` which hasn't changed substantially in some time, so compatibility isn't really a concern for those. `audit.json` has also been added to `.gitignore`. It was accidentally checked in once while working on this branch. 5 years ago			`! npm audit --production --json > audit.json`
ci: Enable npm audit check 6 years ago			`printf '%s\n' ''`
			`node .circleci/scripts/npm-audit-check.js`
			`fi`