From fbd111ce4c9d23cae0ce112de975b011bc20eebf Mon Sep 17 00:00:00 2001
From: Jordan Harband <ljharb@gmail.com>
Date: Wed, 8 Dec 2021 15:21:50 -0800
Subject: [PATCH] [actions] reuse common workflows

See https://github.com/inspect-js/is-arguments/pull/38
---
 .github/workflows/node-pretest.yml | 7 +++++++
 .npmrc                             | 1 +
 package.json                       | 2 ++
 3 files changed, 10 insertions(+)
 create mode 100644 .github/workflows/node-pretest.yml

diff --git a/.github/workflows/node-pretest.yml b/.github/workflows/node-pretest.yml
new file mode 100644
index 0000000..765edf7
--- /dev/null
+++ b/.github/workflows/node-pretest.yml
@@ -0,0 +1,7 @@
+name: 'Tests: pretest/posttest'
+
+on: [pull_request, push]
+
+jobs:
+  tests:
+    uses: ljharb/actions/.github/workflows/pretest.yml@main
diff --git a/.npmrc b/.npmrc
index eacea13..64cb221 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1,3 +1,4 @@
 package-lock=false
 allow-same-version=true
 message=v%s
+audit-level=high
diff --git a/package.json b/package.json
index e3f5239..5fc77f9 100644
--- a/package.json
+++ b/package.json
@@ -9,6 +9,7 @@
 	"scripts": {
 		"pretest": "npm run --silent lint",
 		"lint": "eslint --ext=js,mjs . 'bin/**'",
+		"posttest": "aud --production",
 		"version": "auto-changelog && git add CHANGELOG.md",
 		"postversion": "auto-changelog && git add CHANGELOG.md && git commit --no-edit --amend && git tag -f \"v$(node -e \"console.log(require('./package.json').version)\")\""
 	},
@@ -33,6 +34,7 @@
 	},
 	"devDependencies": {
 		"@ljharb/eslint-config": "^20.0.0",
+		"aud": "^1.1.5",
 		"auto-changelog": "^2.3.0",
 		"eslint": "^8.4.1"
 	},