Li-Fan Chen
says to
YSITD
https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/