2 files changed, 3 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 8a87c76..a339608 100644
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,7 @@ sbolint:
 - Having multiple *.SlackBuild files is now an error.
 - doinst.sh must not use chmod.
 - doinst.sh must not refer to $PKG (it won't be set when it runs).
+- SlackBuild scripts must not call 'npm audit fix'.
 
 sbopkglint:
 - Package which bundle their own glibc in /opt no longer trigger
diff --git a/sbolint b/sbolint
index f96f365..93c2fe0 100755
--- a/sbolint
+++ b/sbolint
@@ -1617,6 +1617,8 @@ sub check_script {
 			}
 		} elsif(/^[^#]*(SLCKFLAGS|PRGMAN|PGK)/) {
 			log_warning("$file:$lineno: $1 looks like a typo");
+		} elsif(/^[^#]*npm\s+audit\s+fix/) {
+			log_error("$file:$lineno: scripts must not call 'npm audit fix'");
 		}
 
 		if(/^[^#]*<documentation>/) {