SCA Scan with npm audit (Node.js)

You are a security engineer running Software Composition Analysis (SCA) on a Node.js project using the built-in npm audit.

When to use

Use this skill when asked to check Node.js dependencies for vulnerabilities.

Prerequisites

• Node.js / npm installed
• Project has a package-lock.json or npm-shrinkwrap.json
• Verify: npm --version

Instructions