Node says it depends on high severity vulnerabilities of set-value, on audit fix it goes to an older version from 4.x to 3.x 