diff --git a/Makefile b/Makefile
index 3cab4eb..669bb5a 100644
--- a/Makefile
+++ b/Makefile
@@ -27,3 +27,11 @@ update-package-locks:
 	sed -i 's/"resolved": "http:/"resolved": "https:/g' package-lock.json && \
 	cd ../distribution/client && $(NODE) npm install && \
 	sed -i 's/"resolved": "http:/"resolved": "https:/g' package-lock.json
+
+npm-audit-fix:
+	# Sigh, the sed for forcing https below is recommended by the npm registry team itself...
+	# https://npm.community/t/some-packages-have-dist-tarball-as-http-and-not-https/285/13
+	cd services/ &&	$(NODE) npm audit fix && \
+	sed -i 's/"resolved": "http:/"resolved": "https:/g' package-lock.json && \
+	cd ../distribution/client && $(NODE) npm audit fix && \
+	sed -i 's/"resolved": "http:/"resolved": "https:/g' package-lock.json