ci: add pnpm audit to CI workflow

Run pnpm audit --audit-level=high in the lint job to catch severe
vulnerabilities before they reach the main branch.

Author: mroderick

.github/workflows/ci.yml

@@ -30,6 +30,8 @@ jobs:
         run: pnpm install --frozen-lockfile
       - name: Check code quality
         run: pnpm run check
+      - name: Audit dependencies
+        run: pnpm run audit:deps
 
   fallow:
     name: Fallow

package.json

@@ -43,6 +43,7 @@
     "format": "prettier --write \"**/*.{js,jsx,json,md}\"",
     "format:check": "prettier --check \"**/*.{js,jsx,json,md}\"",
     "check": "npm run format:check && npm run lint",
+    "audit:deps": "pnpm audit --audit-level=high",
     "example": "node examples/basic-app.js",
     "example:sqlite": "node examples/sqlite-app.js",
     "example:postgres": "node examples/postgres-app.js",