fix: package.json & package-lock.json to reduce vulnerabilities #86

	name: Tests

	on: [push, pull_request]

	env:
	CI: true

	jobs:
	run:
	name: Node ${{ matrix.node }} on ${{ matrix.os }}
	runs-on: ${{ matrix.os }}

	strategy:
	fail-fast: false
	matrix:
	node: [14, 16]
	os: [ubuntu-latest]

	steps:
	- name: Clone repository
	uses: actions/checkout@v2

	- name: Set up Node.js
	uses: actions/setup-node@v2
	with:
	node-version: ${{ matrix.node }}

	- name: Cache Node Modules
	id: cache-node-modules
	uses: actions/cache@v2
	with:
	path: node_modules
	key: node-modules-${{ hashFiles('package-lock.json') }}

	- name: Install dependencies
	run: npm ci

	- name: Run tests
	run: npm test

	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	if: startsWith(matrix.os, 'ubuntu') && startsWith(matrix.node, '16')
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback