diff --git a/package-lock.json b/package-lock.json
index 5df34ff0a..7a729669d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6445,6 +6445,8 @@
       "version": "1.11.0",
       "resolved": "https://registry.npmjs.org/csurf/-/csurf-1.11.0.tgz",
       "integrity": "sha512-UCtehyEExKTxgiu8UHdGvHj4tnpE/Qctue03Giq5gPgMQ9cg/ciod5blZQ5a4uCEenNQjxyGuzygLdKUmee/bQ==",
+      "deprecated": "Please use another csrf package",
+      "license": "MIT",
       "dependencies": {
         "cookie": "0.4.0",
         "cookie-signature": "1.0.6",