optimist ([npm](https://www.npmjs.com/package/optimist), [GitHub](https://github.com/substack/node-optimist)) is no longer maintained and depends on a very old version of minimist which has a critical vulnerability, see [here](https://github.com/advisories/GHSA-xvch-5gv4-984h).
