this is subjective but IMO just because something has a common abstraction doesn't necessarily mean the underlying implementation is purpose-agnostic (and it usually isn't). Which is the core issue around the NPM ecosystem as I perceive (both the deep-email-validator bug and the systeminformation smell is a manifestation of this.

There is nothing inherently wrong with 'systeminformation' except the readme misleading that it aligns with the deployment context of a backend server.