npm
diff --git a/‎DEPENDENCIES.md‎
Lines changed: 7 additions & 1 deletion b/‎DEPENDENCIES.md‎
Lines changed: 7 additions & 1 deletion
diff --git a/‎node_modules/.gitignore‎
Lines changed: 102 additions & 5 deletions b/‎node_modules/.gitignore‎
Lines changed: 102 additions & 5 deletions
diff --git a/‎node_modules/cmd-shim/LICENSE‎
Lines changed: 0 additions & 15 deletions b/‎node_modules/cmd-shim/LICENSE‎
Lines changed: 0 additions & 15 deletions
@@ -84,6 +84,7 @@ graph LR;
   make-fetch-happen-->ssri;
   nopt-->abbrev;
   npm-->abbrev;
+  npm-->bin-links;
   npm-->cacache;
   npm-->hosted-git-info;
   npm-->ini;
@@ -276,8 +277,10 @@ graph LR;
   hosted-git-info-->lru-cache;
   http-proxy-agent-->agent-base;
   http-proxy-agent-->debug;
+  http-proxy-agent-->proxy-agent-negotiate;
   https-proxy-agent-->agent-base;
   https-proxy-agent-->debug;
+  https-proxy-agent-->proxy-agent-negotiate;
   iconv-lite-->safer-buffer;
   ignore-walk-->minimatch;
   init-package-json-->npm-package-arg;
@@ -417,6 +420,7 @@ graph LR;
   npm-->ajv-formats;
   npm-->ajv;
   npm-->archy;
+  npm-->bin-links;
   npm-->cacache;
   npm-->chalk;
   npm-->ci-info;
@@ -504,6 +508,7 @@ graph LR;
   npm-package-arg-->proc-log;
   npm-package-arg-->semver;
   npm-package-arg-->validate-npm-package-name;
+  npm-packlist-->glob;
   npm-packlist-->ignore-walk;
   npm-packlist-->proc-log;
   npm-pick-manifest-->npm-install-checks;
@@ -673,6 +678,7 @@ graph LR;
   postcss-selector-parser-->cssesc;
   postcss-selector-parser-->util-deprecate;
   promzard-->read;
+  proxy-agent-negotiate-->kerberos;
   read-->mute-stream;
   sigstore-->sigstore-bundle["@sigstore/bundle"];
   sigstore-->sigstore-core["@sigstore/core"];
@@ -708,7 +714,7 @@ graph LR;
   tinyglobby-->fdir;
   tinyglobby-->picomatch;
   tuf-js-->debug;
-  tuf-js-->make-fetch-happen;
+  tuf-js-->gar-promise-retry["@gar/promise-retry"];
   tuf-js-->tufjs-models["@tufjs/models"];
   tufjs-models-->minimatch;
   tufjs-models-->tufjs-canonical-json["@tufjs/canonical-json"];
 
@@ -13,24 +13,69 @@
 !/@npmcli/
 /@npmcli/*
 !/@npmcli/agent
+!/@npmcli/agent/node_modules/
+/@npmcli/agent/node_modules/*
+!/@npmcli/agent/node_modules/agent-base
+!/@npmcli/agent/node_modules/http-proxy-agent
+!/@npmcli/agent/node_modules/https-proxy-agent
 !/@npmcli/fs
 !/@npmcli/git
+!/@npmcli/git/node_modules/
+/@npmcli/git/node_modules/*
+!/@npmcli/git/node_modules/@npmcli/
+/@npmcli/git/node_modules/@npmcli/*
+!/@npmcli/git/node_modules/@npmcli/promise-spawn
+!/@npmcli/git/node_modules/hosted-git-info
+!/@npmcli/git/node_modules/ini
+!/@npmcli/git/node_modules/npm-install-checks
+!/@npmcli/git/node_modules/npm-package-arg
+!/@npmcli/git/node_modules/npm-pick-manifest
+!/@npmcli/git/node_modules/proc-log
+!/@npmcli/git/node_modules/validate-npm-package-name
+!/@npmcli/git/node_modules/which
 !/@npmcli/installed-package-contents
 !/@npmcli/map-workspaces
+!/@npmcli/map-workspaces/node_modules/
+/@npmcli/map-workspaces/node_modules/*
+!/@npmcli/map-workspaces/node_modules/@npmcli/
+/@npmcli/map-workspaces/node_modules/@npmcli/*
+!/@npmcli/map-workspaces/node_modules/@npmcli/name-from-folder
 !/@npmcli/metavuln-calculator
 !/@npmcli/name-from-folder
 !/@npmcli/node-gyp
 !/@npmcli/package-json
+!/@npmcli/package-json/node_modules/
+/@npmcli/package-json/node_modules/*
+!/@npmcli/package-json/node_modules/@npmcli/
+/@npmcli/package-json/node_modules/@npmcli/*
+!/@npmcli/package-json/node_modules/@npmcli/git
 !/@npmcli/promise-spawn
 !/@npmcli/query
 !/@npmcli/redact
 !/@npmcli/run-script
+!/@npmcli/run-script/node_modules/
+/@npmcli/run-script/node_modules/*
+!/@npmcli/run-script/node_modules/@npmcli/
+/@npmcli/run-script/node_modules/@npmcli/*
+!/@npmcli/run-script/node_modules/@npmcli/node-gyp
 !/@sigstore/
 /@sigstore/*
 !/@sigstore/bundle
 !/@sigstore/core
 !/@sigstore/protobuf-specs
 !/@sigstore/sign
+!/@sigstore/sign/node_modules/
+/@sigstore/sign/node_modules/*
+!/@sigstore/sign/node_modules/@npmcli/
+/@sigstore/sign/node_modules/@npmcli/*
+!/@sigstore/sign/node_modules/@npmcli/agent
+!/@sigstore/sign/node_modules/@npmcli/fs
+!/@sigstore/sign/node_modules/@npmcli/redact
+!/@sigstore/sign/node_modules/cacache
+!/@sigstore/sign/node_modules/make-fetch-happen
+!/@sigstore/sign/node_modules/proc-log
+!/@sigstore/sign/node_modules/socks-proxy-agent
+!/@sigstore/sign/node_modules/ssri
 !/@sigstore/tuf
 !/@sigstore/verify
 !/@tufjs/
@@ -43,14 +88,19 @@
 !/archy
 !/balanced-match
 !/bin-links
+!/bin-links/node_modules/
+/bin-links/node_modules/*
+!/bin-links/node_modules/cmd-shim
+!/bin-links/node_modules/npm-normalize-package-bin
+!/bin-links/node_modules/read-cmd-shim
+!/bin-links/node_modules/write-file-atomic
 !/binary-extensions
 !/brace-expansion
 !/cacache
 !/chalk
 !/chownr
 !/ci-info
 !/cidr-regex
-!/cmd-shim
 !/common-ancestor-path
 !/cssesc
 !/debug
@@ -66,7 +116,6 @@
 !/http-proxy-agent
 !/https-proxy-agent
 !/iconv-lite
-!/ignore-walk
 !/ini
 !/init-package-json
 !/ip-address
@@ -79,6 +128,9 @@
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
+!/make-fetch-happen/node_modules/
+/make-fetch-happen/node_modules/*
+!/make-fetch-happen/node_modules/minipass-fetch
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
@@ -101,13 +153,35 @@
 !/npm-install-checks
 !/npm-normalize-package-bin
 !/npm-package-arg
-!/npm-packlist
 !/npm-pick-manifest
+!/npm-pick-manifest/node_modules/
+/npm-pick-manifest/node_modules/*
+!/npm-pick-manifest/node_modules/npm-normalize-package-bin
 !/npm-profile
 !/npm-registry-fetch
+!/npm-registry-fetch/node_modules/
+/npm-registry-fetch/node_modules/*
+!/npm-registry-fetch/node_modules/minipass-fetch
 !/npm-user-validate
 !/p-map
 !/pacote
+!/pacote/node_modules/
+/pacote/node_modules/*
+!/pacote/node_modules/@npmcli/
+/pacote/node_modules/@npmcli/*
+!/pacote/node_modules/@npmcli/git
+!/pacote/node_modules/@npmcli/installed-package-contents
+!/pacote/node_modules/@sigstore/
+/pacote/node_modules/@sigstore/*
+!/pacote/node_modules/@sigstore/bundle
+!/pacote/node_modules/@sigstore/core
+!/pacote/node_modules/@sigstore/sign
+!/pacote/node_modules/@sigstore/verify
+!/pacote/node_modules/ignore-walk
+!/pacote/node_modules/npm-bundled
+!/pacote/node_modules/npm-normalize-package-bin
+!/pacote/node_modules/npm-packlist
+!/pacote/node_modules/sigstore
 !/parse-conflict-json
 !/path-scurry
 !/postcss-selector-parser
@@ -116,15 +190,34 @@
 !/promise-all-reject-late
 !/promise-call-limit
 !/promzard
+!/proxy-agent-negotiate
 !/qrcode-terminal
-!/read-cmd-shim
 !/read
 !/safer-buffer
 !/semver
 !/signal-exit
 !/sigstore
+!/sigstore/node_modules/
+/sigstore/node_modules/*
+!/sigstore/node_modules/@npmcli/
+/sigstore/node_modules/@npmcli/*
+!/sigstore/node_modules/@npmcli/agent
+!/sigstore/node_modules/@npmcli/fs
+!/sigstore/node_modules/@npmcli/redact
+!/sigstore/node_modules/@sigstore/
+/sigstore/node_modules/@sigstore/*
+!/sigstore/node_modules/@sigstore/tuf
+!/sigstore/node_modules/cacache
+!/sigstore/node_modules/make-fetch-happen
+!/sigstore/node_modules/proc-log
+!/sigstore/node_modules/socks-proxy-agent
+!/sigstore/node_modules/ssri
+!/sigstore/node_modules/tuf-js
 !/smart-buffer
 !/socks-proxy-agent
+!/socks-proxy-agent/node_modules/
+/socks-proxy-agent/node_modules/*
+!/socks-proxy-agent/node_modules/agent-base
 !/socks
 !/spdx-exceptions
 !/spdx-expression-parse
@@ -141,12 +234,16 @@
 !/tinyglobby/node_modules/picomatch
 !/treeverse
 !/tuf-js
+!/tuf-js/node_modules/
+/tuf-js/node_modules/*
+!/tuf-js/node_modules/@tufjs/
+/tuf-js/node_modules/@tufjs/*
+!/tuf-js/node_modules/@tufjs/models
 !/undici
 !/util-deprecate
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/write-file-atomic
 !/yallist
 # Always ignore some specific patterns within any allowed package
 .bin/