fix: npm audit (#164)

* chore: before immer fix

* chore: surgery

* chore: add npm audit step

* chore: prismjs update

* fix: prismjs remaining issues

* fix: most ssri issues

* fix: last ssri issue

* test: this should fail

* Revert "test: this should fail"

This reverts commit df2b759.

.github/workflows/validate-pr.yml

@@ -61,6 +61,24 @@ jobs:
             ${{ runner.OS }}-
       - run: npm ci
       - run: npm run lint:style
+  npm-audit:
+    needs: setup
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/[email protected]
+        with:
+          node-version: '12'
+      - uses: actions/[email protected]
+        with:
+          # npm cache files are stored in `~/.npm` on Linux/macOS
+          path: ~/.npm 
+          key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.OS }}-node-
+            ${{ runner.OS }}-
+      - run: npm ci
+      - run: npm audit
   test-ci:
     needs: setup
     runs-on: ubuntu-latest