Security vulnerability on package got. Consider dependency tree shaking

[brunolnetto]

Vulnerability on package npm-name

Description

On run npm audit, among other, the following snippet appears. Your library, in specific, has a vulnerability which may be resolved by some dependency tree shaking. Please, consider it.

node_modules/package-json/node_modules/got
  npm-name  <=6.0.1
  Depends on vulnerable versions of got
  node_modules/npm-name
    np  >=2.2.0
    Depends on vulnerable versions of npm-name
    Depends on vulnerable versions of update-notifier
    node_modules/np
  package-json  <=6.5.0
  Depends on vulnerable versions of got

Steps to reproduce

OS: Linux/MacOS

1. Clone repository eulejs: https://github.com/trouchet/eulejs
2. Navigate to respective folder on previous item;
3. Run npm audit
4. Check the respective log

Expected behavior

Zero security vulnerabilities.

Environment

np - 7.6.3
Node.js - 19.6.0
npm - 9.5.0
Git - 2.25.1
OS - Ubuntu 20.04