What / Why

Currently npm audit supports 4 audit levels: (low|moderate|high|critical)
(https://docs.npmjs.com/cli/audit). This determines a threshold for when the audit will exit with a non-zero exit code. In CI environments sometimes you just want to generate a report with findings and send it somewhere. In that case you don't want a non-zero exit code.

As a security analyst I would like to be able to generate a npm audit report that only generates the report and doesn't actually perform judgement on the vulnerabilities found.

So something like:
npm audit --audit-level=none
npm audit --audit-level=ignore
or, if we want it to make sense as a threshold:
npm audit --audit-level=infinite