I'm sure I'm not the only one with node-css-loader pinned at 5.0.1 to avoid installing webpack just for npm, so would enjoy seeing this fixed.
I'm unfamiliar with the Debian JS packaging process, but based on a
quick search on npm, it would seem to me that this could be quite simple
to resolve: Turn node-postcss-selector-parser into a concrete package,
which would then contain only node-postcss-selector-parser, and depend
on node-util-deprecate and node-cssesc (the latter being a virtual
package provided by node-css-selector-tokenizer).