[cordova-coho] branch master updated: CB-14145 add npm audit step (tools release)

[br...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

brodybits pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-coho.git


The following commit(s) were added to refs/heads/master by this push:
     new 42916d0  CB-14145 add npm audit step (tools release)
42916d0 is described below

commit 42916d037a7fd81f63e282a14b8699e12d3df962
Author: Christopher J. Brody <ch...@gmail.com>
AuthorDate: Mon Jul 23 14:15:42 2018 -0400

    CB-14145 add npm audit step (tools release)
---
 docs/tools-release-process.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/tools-release-process.md b/docs/tools-release-process.md
index f01a135..86216f1 100644
--- a/docs/tools-release-process.md
+++ b/docs/tools-release-process.md
@@ -170,6 +170,15 @@ Link repos:
     (cd cordova-plugman && rm -r node_modules && npm link cordova-lib && npm install)
     (cd cordova-cli && rm -r node_modules && npm link cordova-lib && npm link cordova-common && npm install)
 
+Check results of `npm audit`: ensure that the latest version of npm is installed (using a command such as `npm i npm@latest`), `package-lock.json` is present (do `npm i --package-lock-only` if needed), and then check:
+
+    (cd cordova-js && npm audit)
+    (cd cordova-common && npm audit)
+    (cd cordova-fetch && npm audit)
+    (cd cordova-lib && npm audit)
+    (cd cordova-plugman && npm audit)
+    (cd cordova-cli && npm audit)
+
 Ensure license headers are present everywhere. For reference, see this [background](http://www.apache.org/legal/src-headers.html). Expect some noise in the output, for example some files from test fixtures will show up.
 
     coho audit-license-headers -r js | less


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org