Ran `npm audit fix`. Even though this fixes a "high" severity vulnerability, all affected packages are dev packages only.