npm audit issues with codebase

[diversemix]

@de-code ... commented:

BTW `npm audit fix` x2 and `npm audit fix --force` (with some minor breaking changes) had fixed it. I tried to run `npm audit` on xPub but it tripped over without any result. Still not sure how to convince GitHub to notify us. Could also run `npm audit` in PRs.

[de-code]

Just to clarify or provide the context, I noticed npm complaining about security issues for other repos (sciencebeam-texture and peerscout), whereas there is silence from GitHub. That is why I wanted to check whether GitHub checks are working for xPub and how I may need to change the other repos. (In my projects the package.json isn't currently in the root of the repo)

For xPub I guess the tasks could be:

• check that GitHub (or any other process) checks security vulnerabilities
• fixing npm audit for xPub may be optional if there is another command that can check it