stasm npm audit fix