How to double-check the mutual compatibility of versions of all NPM packages?

Question

Node.js

Let's say I type npm i -D pug pug-loader
Installs pug-loader 2.4.0 and pug 2.0.4.
There is a warning that this version of pug is vulnerable, it would be necessary to upgrade to version 3.
But pug-loader has a dependency on pug of version 2.
Don't care, we still demolish the old pug and install version 3.0.2.
Everything seems to compile, there are no incompatibility errors.

But in the future, some problems may arise, and suddenly it’s not me who will look into this package.json, but someone else, how can he find out that the previous developer updated pug despite the fact that pug-loader depends on pug version 2? Is there any command for this case to double-check version compatibility of all packages in the current project?