feat: add dependency audit to CI and prepublish

Author: fbosch

.github/workflows/ci.yml

@@ -28,6 +28,9 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Audit dependencies
+        run: pnpm audit --audit-level=high
+
       - name: Lint
         run: pnpm lint
 

README.md

@@ -1,4 +1,4 @@
-# 🗃️docs-cache
+# 🗃️ docs-cache
 
 Deterministic local caching of documentation repositories.
 

package.json

@@ -22,7 +22,7 @@
 		"build": "unbuild",
 		"dev": "unbuild --stub",
 		"lint": "biome check .",
-		"prepublishOnly": "pnpm build && pnpm schema:build",
+		"prepublishOnly": "pnpm audit --audit-level=high && pnpm build && pnpm schema:build",
 		"release": "bumpp && npm publish",
 		"test": "pnpm build && node --test",
 		"test:coverage": "pnpm build && c8 --include dist --exclude bin --reporter=text node --test",