(Yes we probably need separate issues for each repo. I don't know how many repos we have in total that affect us. Things like mongodb-query-parser?)

See https://nodejs.org/en/about/releases/

Production applications should only use Active LTS or Maintenance LTS releases.

Compass is on v12 which is arguably still OK and by extension being on a mix of npm v6 and v7 is arguably OK, but really I think our lives would be better if we used the same node, npm and package-lock file versions everywhere.