audit

Add dark-background nib mark variant #549

	name: audit

	# Dependency vulnerability gate. Fails a PR or push on a high or critical npm
	# advisory in any project (the library and the example apps), and runs daily on
	# the default branch so a newly disclosed advisory is caught even without a PR.
	# npm audit reads the committed lockfiles, so no install is required.

	on:
	pull_request:
	push:
	branches: [main]
	schedule:
	- cron: "23 7 * * *"
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: audit-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	audit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false
	- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
	with:
	node-version: 24.x
	- name: Dependency audit (high/critical, all projects)
	run: npm run audit:all

Provide feedback