[RobertWHurst]

It also doesn't explain it only breaks a site/application if you perform zero testing before deployment. You have to upgrade your dependencies before an npm package change can affect you.