Support for --production flag was released in npm 6.10.0
https://github.com/npm/cli/pull/202
npm audit --production
The --omit flag was added in npm 7.x and is now preferred.
https://docs.npmjs.com/cli/v8/commands/npm-audit/#omit
npm audit --omit=dev