Initiative: Improve `npm audit` with Policies & Filters

[darcyclarke]

Timeline:

• Design/Architecture: October-December 2022
• Engineering/Release: TBD

Engg Tasks

• feat: add --expect-entries to npm query
• Refactor and remove fakeMockNpm
• Epic: Testing #410
• ADR, Scope and identify engg tasks for Audit Policies and Filters #622
• [query] need a descendant operator that can specify type #614

Goal(s):

• Improve the status-quo of npm audit with customizable audit policies & filters

Links & References

• Filtering:
  • RFC: Add --query to npm audit rfcs#636
  • [RRFC] Query Installs rfcs#638
  • RFC: Only Registry Dependencies rfcs#593
  • RFC: Only Registry Dependencies rfcs#593 (comment)
• Policies:
  • RFC: Add Audit Policies Support rfcs#637

[saquibkhan]

As discussed @lukekarrys will play DRI here helpwing with following

• get all engg tasks
• weekly staus updates