Odd vuln count

[remy]

Using this version of tap and there's definitely not that many vulns: https://snyk.io/test/npm/tap@14.10.7 - what's strange too is that the local machine report doesn't even match the online test (locally says 1 in the log, online: 0)