Npm Audit: broken by design?
Let's talk about solutions.
I'm late to the conversation here, responded on Twitter and went to sleep.<p>There's a push to address the npm audit situation. It's an initiative under the OpenJS Foundation.
I kinda started the whole conversation by implementing a tool that makes it acceptable instead of ditching npm audit.<p>It's called npm-audit-resolver and I've written about it here 
<a href="https://dev.to/naugtur/do-you-need-help-with-your-npm-audit-3olf" rel="nofollow">https://dev.to/naugtur/do-you-need-help-with-your-npm-audit-...</a><p>Also check out the collab space and the tool itself
<a href="https://github.com/openjs-foundation/pkg-vuln-collab-space" rel="nofollow">https://github.com/openjs-foundation/pkg-vuln-collab-space</a>
<a href="https://www.npmjs.com/package/npm-audit-resolver" rel="nofollow">https://www.npmjs.com/package/npm-audit-resolver</a>