What is the policy for 3rd party one-line node modules?

[constup-foss]

Hi,

I've come across a one-line module installed as a dependency of jest-docblock. I generally treat one-line modules as a potential future vector of attack and a security risk, but don't know what is your policy. Should I report it as an issue or ignore it?

Thanks.