ci: add pnpm audit to CI workflow

Run pnpm audit --audit-level=high in the lint job to catch severe
vulnerabilities before they reach the main branch.

Author: mroderick

.github/workflows/ci.yml

@@ -30,6 +30,8 @@ jobs:
         run: pnpm install --frozen-lockfile
       - name: Check code quality
         run: pnpm run check
+      - name: Audit dependencies
+        run: pnpm run audit:deps
 
   fallow:
     name: Fallow

package.json

@@ -10,8 +10,7 @@
       "picomatch": "^4.0.4",
       "path-to-regexp": "^8.4.0",
       "lodash-es": "^4.18.0",
-      "lodash": "^4.18.0",
-      "esbuild": "^0.28.1"
+      "lodash": "^4.18.0"
     }
   },
   "keywords": [
@@ -43,6 +42,7 @@
     "format": "prettier --write \"**/*.{js,jsx,json,md}\"",
     "format:check": "prettier --check \"**/*.{js,jsx,json,md}\"",
     "check": "npm run format:check && npm run lint",
+    "audit:deps": "pnpm audit --audit-level=high",
     "example": "node examples/basic-app.js",
     "example:sqlite": "node examples/sqlite-app.js",
     "example:postgres": "node examples/postgres-app.js",