Merge branch 'npm-audit' into 'master'

Npm audit

See merge request !17

Dockerfile

@@ -5,6 +5,9 @@ ENV NODE_ENV=production
 RUN useradd nodeuser -m -d /usr/src/app
 USER nodeuser
 
+# Allow nodeuser to run npm install globally
+ENV NPM_CONFIG_PREFIX=/usr/src/app/.npm-global
+
 # Create app directory
 WORKDIR /usr/src/app
 
@@ -17,9 +20,6 @@ RUN npm install
 # If you are building your code for production
 # RUN npm ci --only=production
 
-# Check vulnerabilities
-RUN npm install npm-audit-html
-
 # Bundle app source
 COPY . .
 

audit-fix.sh

+#!/bin/bash
+
+npm audit fix
\ No newline at end of file

audit-json-html.sh

+#!/bin/bash
+
+npm audit --json | node_modules/npm-audit-html/index.js --output audit-report.html

package.json

@@ -30,6 +30,7 @@
     "mongoose": "4.6.4",
     "mongoose-unique-validator": "1.0.2",
     "morgan": "1.7.0",
+    "npm-audit-html": "^1.5.0",
     "passport": "0.3.2",
     "passport-local": "1.0.0",
     "request": "2.69.0",