Is there a common practice or proper commit message for after running "npm audit fix"?

[kevinSmith]

That sounds good to me. I don’t think there is a standard, although some organizations might have one. The most important thing is to be clear.