There have been several minor bumps in the 5.x line that have not upgraded npm at all. In particular, I'm waiting on a fix that has already landed, (see npm/npm#10927) which is making my CI tests unreliable.
I presume there is a good reason for holding back npm updates in recent releases, but in the event that there is not I'd like to advocate for updating npm in the next release.