-
Notifications
You must be signed in to change notification settings - Fork 3.8k
Closed
Labels
Bugthing that needs fixingthing that needs fixingNeeds Discussionis pending a discussionis pending a discussionPriority 2secondary priority issuesecondary priority issueRelease 7.xwork is associated with a specific npm 7 releasework is associated with a specific npm 7 release
Description
In npm 6 npm install was unaffected by the audit-level config setting. It only affected the exit code of npm audit itself. In npm 7 this behavior has been carried over to npm install.
Current Behavior:
If I set audit-level then npm install exits uncleanly if there are vulnerabilities found during install that match that level or higher.
Expected Behavior:
The exit status of npm install should be unaffected by the audit-level setting.
Steps To Reproduce:
Make a new package that depends on "minimist": "~1.1.3".
-
npm installpasses in both npm 6 and npm 7. -
npm auditfails in both npm 6 and npm 7. -
NPM_CONFIG_AUDIT_LEVEL=low npm installpasses in npm 6, but fails in npm 7. -
NPM_CONFIG_AUDIT_LEVEL=low npm auditfails in npm 6 and npm 7.
Environment:
- npm: v6.14.11 and v7.5.4
Metadata
Metadata
Assignees
Labels
Bugthing that needs fixingthing that needs fixingNeeds Discussionis pending a discussionis pending a discussionPriority 2secondary priority issuesecondary priority issueRelease 7.xwork is associated with a specific npm 7 releasework is associated with a specific npm 7 release