In npm 6 npm install was unaffected by the audit-level config setting. It only affected the exit code of npm audit itself. In npm 7 this behavior has been carried over to npm install.
Current Behavior:
If I set audit-level then npm install exits uncleanly if there are vulnerabilities found during install that match that level or higher.
Expected Behavior:
The exit status of npm install should be unaffected by the audit-level setting.
Steps To Reproduce:
Make a new package that depends on "minimist": "~1.1.3".
-
npm install passes in both npm 6 and npm 7.
-
npm audit fails in both npm 6 and npm 7.
-
NPM_CONFIG_AUDIT_LEVEL=low npm install passes in npm 6, but fails in npm 7.
-
NPM_CONFIG_AUDIT_LEVEL=low npm audit fails in npm 6 and npm 7.
Environment:
In npm 6
npm installwas unaffected by theaudit-levelconfig setting. It only affected the exit code ofnpm audititself. In npm 7 this behavior has been carried over tonpm install.Current Behavior:
If I set
audit-levelthennpm installexits uncleanly if there are vulnerabilities found during install that match that level or higher.Expected Behavior:
The exit status of
npm installshould be unaffected by theaudit-levelsetting.Steps To Reproduce:
Make a new package that depends on
"minimist": "~1.1.3".npm installpasses in both npm 6 and npm 7.npm auditfails in both npm 6 and npm 7.NPM_CONFIG_AUDIT_LEVEL=low npm installpasses in npm 6, but fails in npm 7.NPM_CONFIG_AUDIT_LEVEL=low npm auditfails in npm 6 and npm 7.Environment: