I also recommend using this site to evaluate the dependencies of your dependencies:

https://npmgraph.js.org/?q=express