[cordova-coho] branch brodybits-platform-release-audit-step created (now 516067a)

[br...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

brodybits pushed a change to branch brodybits-platform-release-audit-step
in repository https://gitbox.apache.org/repos/asf/cordova-coho.git.


      at 516067a  CB-14145 add npm audit step to platform release

This branch includes the following new commits:

     new 516067a  CB-14145 add npm audit step to platform release

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org

[cordova-coho] 01/01: CB-14145 add npm audit step to platform release

[br...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

brodybits pushed a commit to branch brodybits-platform-release-audit-step
in repository https://gitbox.apache.org/repos/asf/cordova-coho.git

commit 516067a45436c5f94fca5779da9e53307fd94998
Author: Christopher J. Brody <ch...@gmail.com>
AuthorDate: Mon Jul 23 14:06:26 2018 -0400

    CB-14145 add npm audit step to platform release
    
    process
---
 docs/platforms-release-process.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/platforms-release-process.md b/docs/platforms-release-process.md
index 0355820..ca0024e 100644
--- a/docs/platforms-release-process.md
+++ b/docs/platforms-release-process.md
@@ -147,6 +147,12 @@ Check-in updated modules (use npm 3.10.1+)
 Note: This will commit these changes directly to the `master` branch of the platform you are working on. This is intended.
 Alternatively you might do this in a branch and open a PR for updating and pinning the dependencies.
 
+### npm audit check
+
+Ensure that the latest version of npm is installed (using a command such as `npm i npm@latest`), `package-lock.json` is present (do `npm i --package-lock-only` if needed), and then check:
+
+    (cd cordova-android && npm audit)
+
 ### License Check
 
 Ensure license headers are present everywhere. For reference, see this [background](http://www.apache.org/legal/src-headers.html). Expect some noise in the output, for example some files from test fixtures will show up.


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org