diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3c845ed..a215efc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,3 +23,10 @@ jobs:
         run: |
           cl.exe hello.c
           hello.exe
+  audit:
+    name: npm audit
+    runs-on: windows-latest
+    steps:
+      - name: Check out source code
+        uses: actions/checkout@v1
+      - run: npm audit