Consider migrating to the more secure scure-bip39 dependency: https://www.npmjs.com/package/@scure/bip39

scure-bip39 has fewer dependencies than bip39 and is audited. For comparison, metamask uses scure-bip39 not bip39.