Comment by patates

aren't these already nuked and show up in the "npm audit" command?