3b7d582d5e
pnpm projects use pnpm-lock.yaml, not package-lock.json. The previous fix switched from pnpm audit to npm audit but npm audit requires an existing lockfile. Generate one first with npm install --package-lock-only. Co-Authored-By: Paperclip <noreply@paperclip.ing>