...which are already present in lockfiles, available in registry ie. https://registry.npmjs.org/debug etc. - it's not a problem.