This package relies on vulnerable dependencies

[stof]

The package currently depends on v2 of string-width, which transitively depend on ansi-regex v3, for which Snyk reports a ReDoS vulnerability.

It would be great to upgrade to the v4 of string-width, which uses a version of ansi-regex that has been patched (upgrading to string-width v5 is harder, as it is an ES module and so might require migrating to ESM too, which would require a major version, which then would still justify upgrading to v4 first to fix things in the existing major version)