[pull] latest from npm:latest

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

DEPENDENCIES.json

@@ -58,7 +58,6 @@
  "bin-links",
  "nopt",
  "parse-conflict-json",
- "read-package-json-fast",
  "@npmcli/mock-globals",
  "read",
  "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
  npmcli-arborist-->parse-conflict-json;
  npmcli-arborist-->proc-log;
  npmcli-arborist-->proggy;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
  parse-conflict-json-->json-parse-even-better-errors;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
  init-package-json-->semver;
  init-package-json-->validate-npm-package-license;
  init-package-json-->validate-npm-package-name;
- ip-address-->jsbn;
- ip-address-->sprintf-js;
  is-cidr-->cidr-regex;
+ isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
  isaacs-cliui-->string-width-cjs;
  isaacs-cliui-->string-width;
  isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
  isaacs-cliui-->wrap-ansi;
  isaacs-fs-minipass-->minipass;
  jackspeak-->isaacs-cliui["@isaacs/cliui"];
- jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
  libnpmaccess-->npm-package-arg;
  libnpmaccess-->npm-registry-fetch;
  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
  libnpmexec-->pacote;
  libnpmexec-->proc-log;
  libnpmexec-->promise-retry;
- libnpmexec-->read-package-json-fast;
  libnpmexec-->read;
  libnpmexec-->semver;
  libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
  make-fetch-happen-->promise-retry;
  make-fetch-happen-->ssri;
  minimatch-->brace-expansion;
+ minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
  minipass-->yallist;
  minipass-collect-->minipass;
  minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
  npmcli-arborist-->proggy;
  npmcli-arborist-->promise-all-reject-late;
  npmcli-arborist-->promise-call-limit;
- npmcli-arborist-->read-package-json-fast;
  npmcli-arborist-->semver;
  npmcli-arborist-->ssri;
  npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
  promise-retry-->retry;
  promzard-->read;
  read-->mute-stream;
- read-package-json-fast-->json-parse-even-better-errors;
- read-package-json-fast-->npm-normalize-package-bin;
  shebang-command-->shebang-regex;
  sigstore-->sigstore-bundle["@sigstore/bundle"];
  sigstore-->sigstore-core["@sigstore/core"];
@@ -747,11 +738,9 @@ graph LR;
  string-width-->strip-ansi;
  strip-ansi-->ansi-regex;
  tar-->chownr;
- tar-->fs-minipass;
  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
  tar-->minipass;
  tar-->minizlib;
- tar-->mkdirp;
  tar-->yallist;
  tinyglobby-->fdir;
  tinyglobby-->picomatch;
@@ -787,5 +776,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
  "devDependencies": {
  "@isaacs/string-locale-compare": "^1.1.0",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "front-matter": "^4.0.2",
- "ignore-walk": "^7.0.0",
- "jsdom": "^24.0.0",
- "rehype-stringify": "^9.0.3",
- "remark-gfm": "^3.0.1",
- "remark-man": "^8.0.1",
- "remark-parse": "^10.0.1",
- "remark-rehype": "^10.1.0",
+ "ignore-walk": "^8.0.0",
+ "jsdom": "^27.0.0",
+ "rehype-stringify": "^10.0.1",
+ "remark-gfm": "^4.0.1",
+ "remark-man": "^9.0.0",
+ "remark-parse": "^11.0.0",
+ "remark-rehype": "^11.1.2",
  "semver": "^7.3.8",
  "tap": "^16.3.8",
- "unified": "^10.1.2",
+ "unified": "^11.0.5",
  "yaml": "^2.2.1"
  },
  "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
  "ciVersions": "latest",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js",
  "workspaceRepo": {
  "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -50,7 +50,7 @@
  },
  "devDependencies": {
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "tap": "^16.3.8"
  }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
  },
  "templateOSS": {
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
- "version": "4.24.4",
+ "version": "4.25.1",
  "content": "../scripts/template-oss/index.js"
  },
  "tap": {
@@ -46,13 +46,13 @@
  ]
  },
  "devDependencies": {
- "@npmcli/arborist": "^9.0.0",
+ "@npmcli/arborist": "^9.1.2",
  "@npmcli/eslint-config": "^5.0.1",
- "@npmcli/template-oss": "4.24.4",
+ "@npmcli/template-oss": "4.25.1",
  "json-stringify-safe": "^5.0.1",
  "nock": "^13.3.3",
- "npm-package-arg": "^12.0.0",
- "pacote": "^21.0.0",
+ "npm-package-arg": "^13.0.0",
+ "pacote": "^21.0.2",
  "tap": "^16.3.8"
  }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,20 +127,22 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
-!/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
-!/node-gyp/node_modules/tar
-!/node-gyp/node_modules/yallist
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/nopt
 !/normalize-package-data
 !/npm-audit-report
@@ -160,9 +154,6 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
@@ -179,7 +170,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +188,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -208,11 +197,7 @@
 !/tar
 !/tar/node_modules/
 /tar/node_modules/*
-!/tar/node_modules/fs-minipass
-!/tar/node_modules/fs-minipass/node_modules/
-/tar/node_modules/fs-minipass/node_modules/*
-!/tar/node_modules/fs-minipass/node_modules/minipass
-!/tar/node_modules/minipass
+!/tar/node_modules/yallist
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +217,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.