npm-audit-pipeline/demo/yarn/package.json

Using npm audit in deployment pipelines

{
  "dependencies": {
    "lodash": "^4.17.21"
  },
  "scripts": {
    "package-audit": "npm-audit --package-manager=yarn"
  }
}