[croemer]

`npm install` might be enough to pull it, unless you pin down to the patch?

[flerchin]

I don't think that's right if it's in your package-lock it wouldn't pull it unless you npm update axios, or delete the package-lock.json and then npm install.