Run ”yarn audit” if yarn.lock exists

[voxpelli]

Good module, great for libraries as you write in the README.

Would you be okay with supporting yarn as well?

[ljharb]

Although I never use it - which means, I'd want much better tests for the yarn functionality than I tolerate for the npm functionality - I'd be more than happy to support it!

[ljharb]

This project is now end-of-lifed since npm audit no longer requires a lockfile.

If yarn still does so, you'll want to file an issue on yarn requesting that feature.