My point was that it's unreasonable to expect the exhaustive audit of all node modules. That said, "major tools and things by international corporations" like Gatsby depend on the topic library [0].

https://www.npmjs.com/browse/depended/event-source-polyfill