This repository itself had to previously update from the axios supply chain attack [0] (co-authored by Claude lol). But just by looking at the change itself, th

This repository itself had to previously update from the axios supply chain attack [0] (co-authored by Claude lol). But just by looking at the change itself, the package is unpinned and won't solve the problem if another malicious security update happens again. So if you have an unpinned version of this package and you run 'npm install', you immediately downloaded the compromised version and that's that. [0] https://github.com/RedHatInsights/javascript-clients/commit/1eea0dbb509dc1c620a4c4ad8480068a80e1370a https://github.com/RedHatInsights/javascript-clients/commit/...