Tsup has vuln version of esbuild: https://github.com/egoist/tsup/pull/1295 https://github.com/tulios/mappersmith/security/dependabot/68