audit: Refuse to run in global mode

Credit: @iarna
npm · May 5, 2018 · cf09066 · cf09066
1 parent bc3fc55
commit cf09066
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/audit.js b/lib/audit.js
@@ -44,6 +44,11 @@ function maybeReadFile (name) {
 }
 
 function auditCmd (args, cb) {
+  if (npm.config.get('global')) {
+    const err = new Error('`npm audit` does not support testing globals')
+    err.code = 'EAUDITGLOBAL'
+    throw err
+  }
   return Bluebird.all([
     maybeReadFile('npm-shrinkwrap.json'),
     maybeReadFile('package-lock.json'),