Notice: one of Eleventy’s dependencies was compromised a few hours ago. `debug@4.4.2` was the compromised version affected (it is now unpublished from npm).

More context: https://socket.dev/blog/npm-author-qix-compromised-in-major-supply-chain-attack