As detailed in our documentation, npm audit requires an Audit Provider to create a report. By default, this is https://registry.npmjs.org. In normal use cases, all npm install commands by default, will send a request to
https://artifactory_url/artifactory/api/npm/<npm-remote-repo>/-/npm/v1/security/...
This can be seen by adding the –verbose flag to the npm install command.
This essentially acts as an npm audit. In the event where the npm remote repository is set offline, in the repository basic settings, we will see different behavior.
Since we can not make requests to the upstream, we can expect to receive 409 warnings for the npm install.
409 https://artifactory_url/artifactory/api/npm/<npm-remote-repo>/-/npm/v1/security/...
Resolution:
This warning is expected since the Audit Provider is offline. This warning can be ignored. The packages still download without issue. Alternatively, the flag –no-audit can be added. In order to continue generating audit reports, the remote repository must be brought back online.