[towndrunk]

Is there a package-lock.json checked in? If you can get the earliest version you may be able to find the versions there.

[kabes]

Probably not, since package lock files were only introduced 2 years ago.