See: https://npmjs.com/advisories/1469 Presumably due to the old version of https://www.npmjs.com/package/sync-request - also not intended for production use?