node-static package is vulnerable,How to bypass this dependency

Your question

node-static is dependent package for sitespeed /browsertime. But node-static is considered highly vulnerable, and our organization is not allowing us to download this dependency. Please refer the package health score from the URL below.

https://snyk.io/advisor/npm-package/node-static?_gl=1*158ie5y*_gcl_au*MjI0NDY2MTE0LjE3MzM1MTA3NzQ.*_ga*MTc1MjA5NDMyNi4xNzMzNTEwNzYw*_ga_X9SH3KP7B4*MTczMzUxMDc2My4xLjEuMTczMzUxMDc3NC4wLjAuMA..

and Due to this we are not able to install it via NPM install command. Refer the exception . Is there a way to bypass the dependency and proceed.

X:>npm install -g sitespeed.io@35.2.0
npm error code E404
npm error 404 Not Found - GET https://XXX-nprepo.XXX.com/artifactory/api/npm/fm-npm-auto-local/node-static
npm error 404
npm error 404 'node-static@^0.7.11' is not in this registry.
npm error 404
npm error 404 Note that you can also install from a
npm error 404 tarball, folder, http url, or git url.

The report names no repository files or tests; start by reproducing npm install -g sitespeed.io@35.2.0 against the stated registry and inspect the dependency tree for node-static@^0.7.11. Done means establishing whether the dependency is removable or replaceable, or documenting the supported installation path when the registry blocks it.