It doesn’t look so simple to patch a transitive NPM dependency.
Some solutions I imagine :
Install a local NPM repository with the patched version… pfff
Use something like https://www.npmjs.com/package/patch-package, but at the first sight, it doesn’t look trivial to use it with the Maven plugin (We’ve wrapped the maven plugin in a custom gradle plugin)
What would you do if you’re facing the same kind of problem ? (I’m not experienced with node, as you can see)