It appears that bcrypt is not being maintained, despite getting ~ 2M downloads a week on NPM...
https://github.com/kelektiv/node.bcrypt.js/issues/1038
https://github.com/kelektiv/node.bcrypt.js/issues/1189
@mapbox/node-pre-gyp has a newer version out, but this hasn't been adopted by bcrypt (at the time of this writing at least).
I'm considering using this instead: https://github.com/uswriting/bcrypt