diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index fed69ae..7c3b10a 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -32,3 +32,7 @@ jobs:
 
     - name: npm test
       run: npm test
+
+    - name: audit packages
+      run: npm audit --audit-level=moderate
+      if: matrix.operating-system == 'ubuntu-latest'
\ No newline at end of file