[BUG] npm audit consistently not finding any vulnerabilities about cli

[yoieh]

There's something wrong with Security Audit even tho it's up and running according to the status page...
https://status.npmjs.org/

I created a support ticket at https://www.npmjs.com/support since this feels like a bigger issue :)

[csnktms]

can confirm this issue!

curl -vd "$(cat package-lock.json)" https://registry.npmjs.org/-/npm/v1/security/audits

response:

{"actions":[],"advisories":{},"muted":[],"metadata":{"vulnerabilities":{"info":0,"low":0,"moderate":0,"high":0,"critical":0},"dependencies":0,"devDependencies":0,"optionalDependencies":0,"totalDependencies":0}}%

[SageGary]

Me too. And people have begun reporting same on stackoverflow and twitter:
https://stackoverflow.com/questions/78406511/npm-audit-always-finding-0-vulnerabilities
https://twitter.com/rjmacarthy/status/1785218995211149463

[wraithgar]

This does not appear to be an npm cli issue. npm registry support is at https://www.npmjs.com/support

[yoieh]

Same issue with yarn audit:
yarnpkg/yarn#9054

[yoieh]

This has now been fixed by npm! 😄