yarn audit

优质

小牛编辑

142浏览

2023-12-01

Perform a vulnerability audit against the installed packages.

`yarn audit [--verbose] [--json]`

Checks for known security issues with the installed packages. The output is a list of known issues.

You must be online to perform the audit. The audit will be skipped if the --offline general flag is specified. The command will exit with a non-0 exit code if there are issues of any severity found. For scripting purposes, yarn audit also supports the --json flag, which will output the details for the issues in JSON-lines format (one JSON object per line) instead of plain text.

If you are experiencing issues with the audit command please run with the --verbose flag, which will output the JSON data that yarn sends to the npm registry as well as the response data, and open an issue on GitHub that includes this data.