Apparently, this package depends on an insecure version of the package open. https://github.com/advisories/GHSA-28xh-wpgr-7fm8