npm audit

npm audit is a built-in Node.js package manager command that scans a project's dependency tree against the npm security advisory database for known vulnerabilities. It reports vulnerability severity, affected packages, and available remediation.

Running npm audit in CI pipelines provides automated visibility into vulnerable dependencies and can be configured to fail builds above a specified severity threshold.