Web Security · Junior · Question 73 of 75

What does `npm audit` do?

✓Correct answer: Checks installed dependencies against a database of known vulnerabilities
2Removes unused packages from node_modules
3Proves that every package was written by a trusted author

Explanation

It reports known CVEs in your dependency tree and suggests fixed versions. It can't detect new or hidden malicious code.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.