security: lockfile lint check (#4446)

2020-10-29 18:07:36 +00:00 · 2020-10-29 18:07:36 +00:00 · d21afba45a
parent 99d5c7c943
commit d21afba45a
1 changed files with 5 additions and 0 deletions
--- a/.travis.yml
+++ b/.travis.yml
@ -75,6 +75,11 @@ jobs:
        - "export GIT_HASH=$(git rev-parse --verify --short HEAD)"
      script:
        - "tests/frontend/travis/runner.sh"
+    - name: "Lint test package-lock.json"
+      install:
+        - "npm install lockfile-lint"
+      script:
+        - npx lockfile-lint --path src/package-lock.json --validate-https --allowed-hosts npm
    - name: "Run the Backend tests with Plugins"
      install:
        - "bin/installDeps.sh"