Your package.json looks clean. Your node_modules is a graveyard.
Stack Graveyard tracks 155 npm packages with live risk scores from THRIVING to TOMBSTONE 💀 and our Ghost Detection engine scans your entire dependency tree to find deprecated packages hiding 2-3 levels deep that you never installed.
npm audit doesn't see them. We do.
Free to try. Pro at $10/mo.