💡 [major] Prefer MSGPack over JSON #147

	name: 🔒️ Npm Audit

	env:
	APPLICATION_NAME: cachette

	on:
	pull_request:
	# adding 'ready_for_review' to the default [opened, synchronize, reopened] since we don't run on pr.draft == false
	# see https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request
	types: [opened, synchronize, reopened, ready_for_review]
	branches:
	- master
	paths:
	- "**"

	jobs:
	audit:
	runs-on: ubuntu-latest
	if: ${{ github.event.pull_request.draft == false }}
	steps:
	# https://github.com/actions/checkout
	- name: Checkout 🛎️
	uses: actions/checkout@v2

	- name: Get node version ⭐️
	run: \|
	echo "NODE_VERSION=$(echo $(jq '.engines.node' package.json) \| sed -E 's/"[<>=]([0-9]([\.0-9a-z]+)?).*"/\1/')" >> $GITHUB_ENV
	echo "${{ env.NODE_VERSION }}"
	- name: Setup Node ${{ env.NODE_VERSION }}📍️
	uses: actions/setup-node@v1
	env:
	CI: true
	with:
	node-version: ${{ env.NODE_VERSION }}

	# https://github.com/actions/cache
	- name: NPM cache 📦
	uses: actions/cache@v2
	with:
	path: ~/.npm
	key: ${{ runner.os }}-${{ env.APPLICATION_NAME }}-npm-cache-${{ hashFiles('**/package-lock.json') }}

	- name: NPM install 📦
	run: \|
	npm --ignore-scripts ci

	- name: Npm audit 🕵️‍♀️
	run: \|
	npm run audit-with-ignore

Provide feedback