You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by br...@apache.org on 2018/07/23 18:06:29 UTC
[cordova-coho] 01/01: CB-14145 add npm audit step to platform
release
This is an automated email from the ASF dual-hosted git repository.
brodybits pushed a commit to branch brodybits-platform-release-audit-step
in repository https://gitbox.apache.org/repos/asf/cordova-coho.git
commit 516067a45436c5f94fca5779da9e53307fd94998
Author: Christopher J. Brody <ch...@gmail.com>
AuthorDate: Mon Jul 23 14:06:26 2018 -0400
CB-14145 add npm audit step to platform release
process
---
docs/platforms-release-process.md | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/docs/platforms-release-process.md b/docs/platforms-release-process.md
index 0355820..ca0024e 100644
--- a/docs/platforms-release-process.md
+++ b/docs/platforms-release-process.md
@@ -147,6 +147,12 @@ Check-in updated modules (use npm 3.10.1+)
Note: This will commit these changes directly to the `master` branch of the platform you are working on. This is intended.
Alternatively you might do this in a branch and open a PR for updating and pinning the dependencies.
+### npm audit check
+
+Ensure that the latest version of npm is installed (using a command such as `npm i npm@latest`), `package-lock.json` is present (do `npm i --package-lock-only` if needed), and then check:
+
+ (cd cordova-android && npm audit)
+
### License Check
Ensure license headers are present everywhere. For reference, see this [background](http://www.apache.org/legal/src-headers.html). Expect some noise in the output, for example some files from test fixtures will show up.
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org