I haven't checked, but it would be surprising that the min-release-age applies to npm audit and equivalent commands