Per a snyk scan the node-jose version had an infinite loop vulnerability. more details here - https://security.snyk.io/vuln/SNYK-JS-NODEJOSE-3323847 upgrade the version to 2.2.0