npm audit reports using old scp2 module < 3.0.2 causing "high" risk Regular Expression Denial of Service warnings.