The Avidsory GHSA-8mgj-vmr8-frr6 is a wildcard while npm has removed the malicious dependency v4.4.2

debug-js/debug#1005
chalk/chalk#656

Unless I am missing something, previous versions seem unaffected.
Please update to unlock development pipelines of unaffected packages.