Fetch advisories straight from the registry (npm bulk endpoint) for the parsed
graph — no (yarn|npm) audit child process. Registry / scope / auth resolve
from .npmrc / .yarnrc.yml / .yarnrc + env. Async: HTTP can't be done
synchronously without spawning, which is exactly what we're moving away from.
Fetch advisories straight from the registry (npm bulk endpoint) for the parsed graph — no
(yarn|npm) auditchild process. Registry / scope / auth resolve from.npmrc/.yarnrc.yml/.yarnrc+ env. Async: HTTP can't be done synchronously without spawning, which is exactly what we're moving away from.