deps: use "Better NPM Audit" to check for production vulnerabilities with allowed exceptions

intershop / intershop-pwa

The Intershop PWA is an Angular based progressive web app storefront for the Intershop Commerce Platform.

https://www.intershop.com/progressive-web-app

MIT License

159 stars 85 forks source link

Closed shauke closed 3 months ago

shauke commented 3 months ago

npm audit --omit=dev will result always in a vulnerability issue as long as we have a dependency to Bootstrap 4.6.2
since we only use the styling of Bootstrap in combination with ng-bootstrap the vulnerability should not be an issue
so we now use a vulnerability checker that allows for exceptions for checking for vulnerabilities in the develop branch

[x] Other: deps checking

[x] No