NPM configuration to skip vulnerabilities audit for devDependencies on install

Question

Is it possible to configure npm to skip audit of vulnerabilities for devDependencies when running command npm install?

Answer 1

You can simply just use the command

npm audit --prod

And to ignore a particular package use

npm audit --ignore packageName

To know more about it you can visit this link - https://github.com/npm/npm/issues/20564.

Answer 2

You can skip auditing at all by adding the --no-audit flag.

npm install --no-audit

And if you want this to apply to devDependencies only, you can run it this way:

npm install --no-audit