Axios could probably be a peer dependency instead. Npm audit marks it as a critical dependency. It should be easy to update.
Also it would be better as a peer dependency because the axios export is a singleton. Setting defaults can get out of wack when you have multiple versions of axios