fix production only

npm/cli#202

.github/workflows/security-audit.yml

@@ -9,6 +9,6 @@ jobs:
     steps:
       - uses: actions/checkout@v1
       - name: npm audit prod
-        run: npm audit --only=prod --audit-level=low
+        run: npm audit --production --audit-level=low
       - name: npm audit dev
         run: npm audit --only=dev --audit-level=moderate