ugh, just spent the last hour debugging a production issue only to find out it was caused by a transitive dependency being 3 major versions behind... updating my priors on the importance of regular npm audits