There is a high severity vulnerability in the current version (1.5.0) - Denial of Service
https://npmjs.com/advisories/1203
It does not pass npm audit. Please upgrade mongodb to version >=3.1.13 so it passes.
There is a $20 open bounty on this issue. Add to the bounty at Bountysource.