Npm Audit: broken by design?
Let's talk about solutions.
I'm late to the conversation here, responded on Twitter and went to sleep.There's a push to address the npm audit situation. It's an initiative under the OpenJS Foundation.
I kinda started the whole conversation by implementing a tool that makes it acceptable instead of ditching npm audit.It's called npm-audit-resolver and I've written about it here 
https://dev.to/naugtur/do-you-need-help-with-your-npm-audit-...Also check out the collab space and the tool itself
https://github.com/openjs-foundation/pkg-vuln-collab-space
https://www.npmjs.com/package/npm-audit-resolver