Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] Depends on deprecated packages path-is-absolute and read-package-tree #4905

Open
2 tasks done
jsha opened this issue May 16, 2022 · 3 comments
Open
2 tasks done

[BUG] Depends on deprecated packages path-is-absolute and read-package-tree #4905

jsha opened this issue May 16, 2022 · 3 comments
Labels
Bug thing that needs fixing Needs Triage needs review for next steps Release 8.x work is associated with a specific npm 8 release

Comments

@jsha
Copy link

jsha commented May 16, 2022

Is there an existing issue for this?

  • I have searched the existing issues

This issue exists in the latest npm version

  • I am using the latest npm

Current Behavior

Hiya! 馃憢馃徎

When I installed the latest npm, I was surprised to see path-is-absolute among the dependencies. Its npm page says:

This package has been deprecated
This package is no longer relevant as Node.js 0.12 is unmaintained.

On further digging, I found that read-package-tree is also deprecated:

The functionality that this package provided is now in @npmcli/arborist

Here's a quick-and-dirty command I ran to try and figure out where these dependencies came from:

$ rg path-is-absolute -l | grep package.json
node_modules/path-is-absolute/package.json
node_modules/tap/node_modules/path-is-absolute/package.json
node_modules/tap/node_modules/glob/package.json
node_modules/read-package-tree/node_modules/glob/package.json
node_modules/test-exclude/node_modules/glob/package.json
node_modules/tap-mocha-reporter/node_modules/glob/package.json
node_modules/nyc/node_modules/glob/package.json
node_modules/node-gyp/node_modules/glob/package.json
node_modules/rimraf/node_modules/glob/package.json
workspaces/arborist/test/fixtures/install-types/node_modules/glob/package.json
workspaces/arborist/test/fixtures/install-types/node_modules/path-is-absolute/package.json
workspaces/arborist/test/fixtures/global-style/lib/node_modules/rimraf/node_modules/glob/package.json
workspaces/arborist/test/fixtures/global-style/lib/node_modules/rimraf/node_modules/path-is-absolute/package.json
workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/path-is-absolute/package.json
workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/babel-core/package.json
workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/glob/package.json
$ rg read-package-tree -l | grep package.json
node_modules/read-package-tree/package.json
node_modules/licensee/package.json
workspaces/arborist/test/fixtures/root/node_modules/foo/node_modules/express/package.json

I've filed one PR on node-glob and updated one issue on licensee, but I figured I should open an overall issue on npm/cli for the main issue I'm trying to address.

Expected Behavior

No response

Steps To Reproduce

No response

Environment

No response
@jsha jsha added Bug thing that needs fixing Needs Triage needs review for next steps Release 8.x work is associated with a specific npm 8 release labels May 16, 2022
@ljharb
Copy link
Collaborator

ljharb commented May 16, 2022

What does npm explain path-is-absolute say?

Either way, a package being deprecates is not automatically a problem, and isn't necessarily actionable. A package that's not strictly necessary isn't harmful.

@jsha
Copy link
Author

jsha commented May 16, 2022

npm explain path-is-absolute 
path-is-absolute@1.0.1 bundled
node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/node-gyp/node_modules/glob
    glob@"^7.1.4" from node-gyp@9.0.0
    node_modules/node-gyp
      bundled node-gyp@"^9.0.0" from the root project
      node-gyp@"^9.0.0" from @npmcli/run-script@3.0.2
      node_modules/@npmcli/run-script
        bundled @npmcli/run-script@"^3.0.1" from the root project
        @npmcli/run-script@"^3.0.1" from pacote@13.3.0
        node_modules/pacote
          bundled pacote@"^13.3.0" from the root project
          pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
          node_modules/@npmcli/metavuln-calculator
            @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
            workspaces/arborist
          pacote@"^13.0.5" from arborist@5.2.0
          workspaces/arborist
          pacote@"^13.0.5" from libnpmdiff@4.0.3
          workspaces/libnpmdiff
          pacote@"^13.0.5" from libnpmexec@4.0.5
          workspaces/libnpmexec
          pacote@"^13.0.5" from libnpmpack@4.0.3
          workspaces/libnpmpack
        @npmcli/run-script@"^3.0.0" from arborist@5.2.0
        workspaces/arborist
        @npmcli/run-script@"^3.0.0" from libnpmexec@4.0.5
        workspaces/libnpmexec
        @npmcli/run-script@"^3.0.0" from libnpmpack@4.0.3
        workspaces/libnpmpack
        @npmcli/run-script@"^3.0.0" from libnpmversion@3.0.4
        workspaces/libnpmversion
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/nyc/node_modules/glob
    glob@"^7.1.6" from nyc@15.1.0
    node_modules/nyc
      nyc@"^15.1.0" from tap@16.0.1
      node_modules/tap
        dev tap@"^16.0.1" from the root project
        dev tap@"^16.0.1" from arborist@5.2.0
        workspaces/arborist
        dev tap@"^16.0.1" from docs@1.0.0
        docs
        dev tap@"^16.0.1" from libnpmaccess@6.0.3
        workspaces/libnpmaccess
        dev tap@"^16.0.1" from libnpmdiff@4.0.3
        workspaces/libnpmdiff
        dev tap@"^16.0.1" from libnpmexec@4.0.5
        workspaces/libnpmexec
        dev tap@"^16.0.1" from libnpmfund@3.0.2
        workspaces/libnpmfund
        dev tap@"^16.0.1" from libnpmhook@8.0.3
        workspaces/libnpmhook
        dev tap@"^16.0.1" from libnpmorg@4.0.3
        workspaces/libnpmorg
        dev tap@"^16.0.1" from libnpmpack@4.0.3
        workspaces/libnpmpack
        dev tap@"^16.0.1" from libnpmpublish@6.0.4
        workspaces/libnpmpublish
        dev tap@"^16.0.1" from libnpmsearch@5.0.3
        workspaces/libnpmsearch
        dev tap@"^16.0.1" from libnpmteam@4.0.3
        workspaces/libnpmteam
        dev tap@"^16.0.1" from libnpmversion@3.0.4
        workspaces/libnpmversion
        dev tap@"^16.0.1" from smoke-tests@1.0.0
        smoke-tests
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/read-package-tree/node_modules/glob
    glob@"^7.1.1" from read-package-json@2.1.2
    node_modules/read-package-tree/node_modules/read-package-json
      read-package-json@"^2.0.0" from read-package-tree@5.3.1
      node_modules/read-package-tree
        read-package-tree@"^5.3.1" from licensee@8.2.0
        node_modules/licensee
          dev licensee@"^8.2.0" from the root project
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/rimraf/node_modules/glob
    glob@"^7.1.3" from rimraf@3.0.2
    node_modules/rimraf
      bundled rimraf@"^3.0.2" from the root project
      rimraf@"^3.0.2" from @npmcli/move-file@2.0.0
      node_modules/@npmcli/move-file
        @npmcli/move-file@"^2.0.0" from cacache@16.0.7
        node_modules/cacache
          bundled cacache@"^16.0.7" from the root project
          cacache@"^16.0.0" from @npmcli/metavuln-calculator@3.1.0
          node_modules/@npmcli/metavuln-calculator
            @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
            workspaces/arborist
          cacache@"^16.0.2" from make-fetch-happen@10.1.3
          node_modules/make-fetch-happen
            bundled make-fetch-happen@"^10.1.3" from the root project
            make-fetch-happen@"^10.0.3" from node-gyp@9.0.0
            node_modules/node-gyp
              bundled node-gyp@"^9.0.0" from the root project
              node-gyp@"^9.0.0" from @npmcli/run-script@3.0.2
              node_modules/@npmcli/run-script
                bundled @npmcli/run-script@"^3.0.1" from the root project
                @npmcli/run-script@"^3.0.1" from pacote@13.3.0
                node_modules/pacote
                  bundled pacote@"^13.3.0" from the root project
                  pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
                  node_modules/@npmcli/metavuln-calculator
                    @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
                    workspaces/arborist
                  pacote@"^13.0.5" from arborist@5.2.0
                  workspaces/arborist
                  pacote@"^13.0.5" from libnpmdiff@4.0.3
                  workspaces/libnpmdiff
                  pacote@"^13.0.5" from libnpmexec@4.0.5
                  workspaces/libnpmexec
                  pacote@"^13.0.5" from libnpmpack@4.0.3
                  workspaces/libnpmpack
                @npmcli/run-script@"^3.0.0" from arborist@5.2.0
                workspaces/arborist
                @npmcli/run-script@"^3.0.0" from libnpmexec@4.0.5
                workspaces/libnpmexec
                @npmcli/run-script@"^3.0.0" from libnpmpack@4.0.3
                workspaces/libnpmpack
                @npmcli/run-script@"^3.0.0" from libnpmversion@3.0.4
                workspaces/libnpmversion
            make-fetch-happen@"^10.0.6" from npm-registry-fetch@13.1.1
            node_modules/npm-registry-fetch
              bundled npm-registry-fetch@"^13.1.1" from the root project
              npm-registry-fetch@"^13.0.1" from npm-profile@6.0.3
              node_modules/npm-profile
                bundled npm-profile@"^6.0.3" from the root project
              npm-registry-fetch@"^13.0.1" from pacote@13.3.0
              node_modules/pacote
                bundled pacote@"^13.3.0" from the root project
                pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
                node_modules/@npmcli/metavuln-calculator
                  @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
                  workspaces/arborist
                pacote@"^13.0.5" from arborist@5.2.0
                workspaces/arborist
                pacote@"^13.0.5" from libnpmdiff@4.0.3
                workspaces/libnpmdiff
                pacote@"^13.0.5" from libnpmexec@4.0.5
                workspaces/libnpmexec
                pacote@"^13.0.5" from libnpmpack@4.0.3
                workspaces/libnpmpack
              npm-registry-fetch@"^13.0.0" from arborist@5.2.0
              workspaces/arborist
              npm-registry-fetch@"^13.0.0" from libnpmaccess@6.0.3
              workspaces/libnpmaccess
              npm-registry-fetch@"^13.0.0" from libnpmhook@8.0.3
              workspaces/libnpmhook
              npm-registry-fetch@"^13.0.0" from libnpmorg@4.0.3
              workspaces/libnpmorg
              npm-registry-fetch@"^13.0.0" from libnpmpublish@6.0.4
              workspaces/libnpmpublish
              npm-registry-fetch@"^13.0.0" from libnpmsearch@5.0.3
              workspaces/libnpmsearch
              npm-registry-fetch@"^13.0.0" from libnpmteam@4.0.3
              workspaces/libnpmteam
          cacache@"^16.0.0" from pacote@13.3.0
          node_modules/pacote
            bundled pacote@"^13.3.0" from the root project
            pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
            node_modules/@npmcli/metavuln-calculator
              @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
              workspaces/arborist
            pacote@"^13.0.5" from arborist@5.2.0
            workspaces/arborist
            pacote@"^13.0.5" from libnpmdiff@4.0.3
            workspaces/libnpmdiff
            pacote@"^13.0.5" from libnpmexec@4.0.5
            workspaces/libnpmexec
            pacote@"^13.0.5" from libnpmpack@4.0.3
            workspaces/libnpmpack
          cacache@"^16.0.6" from arborist@5.2.0
          workspaces/arborist
        @npmcli/move-file@"^2.0.0" from arborist@5.2.0
        workspaces/arborist
      rimraf@"^3.0.0" from bin-links@3.0.1
      node_modules/bin-links
        bin-links@"^3.0.0" from arborist@5.2.0
        workspaces/arborist
        dev bin-links@"^3.0.0" from libnpmexec@4.0.5
        workspaces/libnpmexec
      rimraf@"^3.0.2" from cacache@16.0.7
      node_modules/cacache
        bundled cacache@"^16.0.7" from the root project
        cacache@"^16.0.0" from @npmcli/metavuln-calculator@3.1.0
        node_modules/@npmcli/metavuln-calculator
          @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
          workspaces/arborist
        cacache@"^16.0.2" from make-fetch-happen@10.1.3
        node_modules/make-fetch-happen
          bundled make-fetch-happen@"^10.1.3" from the root project
          make-fetch-happen@"^10.0.3" from node-gyp@9.0.0
          node_modules/node-gyp
            bundled node-gyp@"^9.0.0" from the root project
            node-gyp@"^9.0.0" from @npmcli/run-script@3.0.2
            node_modules/@npmcli/run-script
              bundled @npmcli/run-script@"^3.0.1" from the root project
              @npmcli/run-script@"^3.0.1" from pacote@13.3.0
              node_modules/pacote
                bundled pacote@"^13.3.0" from the root project
                pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
                node_modules/@npmcli/metavuln-calculator
                  @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
                  workspaces/arborist
                pacote@"^13.0.5" from arborist@5.2.0
                workspaces/arborist
                pacote@"^13.0.5" from libnpmdiff@4.0.3
                workspaces/libnpmdiff
                pacote@"^13.0.5" from libnpmexec@4.0.5
                workspaces/libnpmexec
                pacote@"^13.0.5" from libnpmpack@4.0.3
                workspaces/libnpmpack
              @npmcli/run-script@"^3.0.0" from arborist@5.2.0
              workspaces/arborist
              @npmcli/run-script@"^3.0.0" from libnpmexec@4.0.5
              workspaces/libnpmexec
              @npmcli/run-script@"^3.0.0" from libnpmpack@4.0.3
              workspaces/libnpmpack
              @npmcli/run-script@"^3.0.0" from libnpmversion@3.0.4
              workspaces/libnpmversion
          make-fetch-happen@"^10.0.6" from npm-registry-fetch@13.1.1
          node_modules/npm-registry-fetch
            bundled npm-registry-fetch@"^13.1.1" from the root project
            npm-registry-fetch@"^13.0.1" from npm-profile@6.0.3
            node_modules/npm-profile
              bundled npm-profile@"^6.0.3" from the root project
            npm-registry-fetch@"^13.0.1" from pacote@13.3.0
            node_modules/pacote
              bundled pacote@"^13.3.0" from the root project
              pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
              node_modules/@npmcli/metavuln-calculator
                @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
                workspaces/arborist
              pacote@"^13.0.5" from arborist@5.2.0
              workspaces/arborist
              pacote@"^13.0.5" from libnpmdiff@4.0.3
              workspaces/libnpmdiff
              pacote@"^13.0.5" from libnpmexec@4.0.5
              workspaces/libnpmexec
              pacote@"^13.0.5" from libnpmpack@4.0.3
              workspaces/libnpmpack
            npm-registry-fetch@"^13.0.0" from arborist@5.2.0
            workspaces/arborist
            npm-registry-fetch@"^13.0.0" from libnpmaccess@6.0.3
            workspaces/libnpmaccess
            npm-registry-fetch@"^13.0.0" from libnpmhook@8.0.3
            workspaces/libnpmhook
            npm-registry-fetch@"^13.0.0" from libnpmorg@4.0.3
            workspaces/libnpmorg
            npm-registry-fetch@"^13.0.0" from libnpmpublish@6.0.4
            workspaces/libnpmpublish
            npm-registry-fetch@"^13.0.0" from libnpmsearch@5.0.3
            workspaces/libnpmsearch
            npm-registry-fetch@"^13.0.0" from libnpmteam@4.0.3
            workspaces/libnpmteam
        cacache@"^16.0.0" from pacote@13.3.0
        node_modules/pacote
          bundled pacote@"^13.3.0" from the root project
          pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
          node_modules/@npmcli/metavuln-calculator
            @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
            workspaces/arborist
          pacote@"^13.0.5" from arborist@5.2.0
          workspaces/arborist
          pacote@"^13.0.5" from libnpmdiff@4.0.3
          workspaces/libnpmdiff
          pacote@"^13.0.5" from libnpmexec@4.0.5
          workspaces/libnpmexec
          pacote@"^13.0.5" from libnpmpack@4.0.3
          workspaces/libnpmpack
        cacache@"^16.0.6" from arborist@5.2.0
        workspaces/arborist
      rimraf@"^3.0.2" from flat-cache@3.0.4
      node_modules/flat-cache
        flat-cache@"^3.0.4" from file-entry-cache@6.0.1
        node_modules/file-entry-cache
          file-entry-cache@"^6.0.1" from eslint@8.12.0
          node_modules/eslint
            peer eslint@">= 8" from @npmcli/eslint-config@3.0.1
            node_modules/@npmcli/eslint-config
              dev @npmcli/eslint-config@"^3.0.1" from the root project
              dev @npmcli/eslint-config@"^3.0.1" from arborist@5.2.0
              workspaces/arborist
              dev @npmcli/eslint-config@"^3.0.1" from docs@1.0.0
              docs
              dev @npmcli/eslint-config@"^3.0.1" from libnpmaccess@6.0.3
              workspaces/libnpmaccess
              dev @npmcli/eslint-config@"^3.0.1" from libnpmdiff@4.0.3
              workspaces/libnpmdiff
              dev @npmcli/eslint-config@"^3.0.1" from libnpmexec@4.0.5
              workspaces/libnpmexec
              dev @npmcli/eslint-config@"^3.0.1" from libnpmfund@3.0.2
              workspaces/libnpmfund
              dev @npmcli/eslint-config@"^3.0.1" from libnpmhook@8.0.3
              workspaces/libnpmhook
              dev @npmcli/eslint-config@"^3.0.1" from libnpmorg@4.0.3
              workspaces/libnpmorg
              dev @npmcli/eslint-config@"^3.0.1" from libnpmpack@4.0.3
              workspaces/libnpmpack
              dev @npmcli/eslint-config@"^3.0.1" from libnpmpublish@6.0.4
              workspaces/libnpmpublish
              dev @npmcli/eslint-config@"^3.0.1" from libnpmsearch@5.0.3
              workspaces/libnpmsearch
              dev @npmcli/eslint-config@"^3.0.1" from libnpmteam@4.0.3
              workspaces/libnpmteam
              dev @npmcli/eslint-config@"^3.0.1" from libnpmversion@3.0.4
              workspaces/libnpmversion
              dev @npmcli/eslint-config@"^3.0.1" from smoke-tests@1.0.0
              smoke-tests
            peer eslint@">=4.19.1" from eslint-plugin-es@3.0.1
            node_modules/eslint-plugin-es
              eslint-plugin-es@"^3.0.0" from eslint-plugin-node@11.1.0
              node_modules/eslint-plugin-node
                peer eslint-plugin-node@"^11.1.0" from @npmcli/eslint-config@3.0.1
                node_modules/@npmcli/eslint-config
                  dev @npmcli/eslint-config@"^3.0.1" from the root project
                  dev @npmcli/eslint-config@"^3.0.1" from arborist@5.2.0
                  workspaces/arborist
                  dev @npmcli/eslint-config@"^3.0.1" from docs@1.0.0
                  docs
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmaccess@6.0.3
                  workspaces/libnpmaccess
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmdiff@4.0.3
                  workspaces/libnpmdiff
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmexec@4.0.5
                  workspaces/libnpmexec
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmfund@3.0.2
                  workspaces/libnpmfund
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmhook@8.0.3
                  workspaces/libnpmhook
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmorg@4.0.3
                  workspaces/libnpmorg
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmpack@4.0.3
                  workspaces/libnpmpack
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmpublish@6.0.4
                  workspaces/libnpmpublish
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmsearch@5.0.3
                  workspaces/libnpmsearch
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmteam@4.0.3
                  workspaces/libnpmteam
                  dev @npmcli/eslint-config@"^3.0.1" from libnpmversion@3.0.4
                  workspaces/libnpmversion
                  dev @npmcli/eslint-config@"^3.0.1" from smoke-tests@1.0.0
                  smoke-tests
            peer eslint@">=5.16.0" from eslint-plugin-node@11.1.0
            node_modules/eslint-plugin-node
              peer eslint-plugin-node@"^11.1.0" from @npmcli/eslint-config@3.0.1
              node_modules/@npmcli/eslint-config
                dev @npmcli/eslint-config@"^3.0.1" from the root project
                dev @npmcli/eslint-config@"^3.0.1" from arborist@5.2.0
                workspaces/arborist
                dev @npmcli/eslint-config@"^3.0.1" from docs@1.0.0
                docs
                dev @npmcli/eslint-config@"^3.0.1" from libnpmaccess@6.0.3
                workspaces/libnpmaccess
                dev @npmcli/eslint-config@"^3.0.1" from libnpmdiff@4.0.3
                workspaces/libnpmdiff
                dev @npmcli/eslint-config@"^3.0.1" from libnpmexec@4.0.5
                workspaces/libnpmexec
                dev @npmcli/eslint-config@"^3.0.1" from libnpmfund@3.0.2
                workspaces/libnpmfund
                dev @npmcli/eslint-config@"^3.0.1" from libnpmhook@8.0.3
                workspaces/libnpmhook
                dev @npmcli/eslint-config@"^3.0.1" from libnpmorg@4.0.3
                workspaces/libnpmorg
                dev @npmcli/eslint-config@"^3.0.1" from libnpmpack@4.0.3
                workspaces/libnpmpack
                dev @npmcli/eslint-config@"^3.0.1" from libnpmpublish@6.0.4
                workspaces/libnpmpublish
                dev @npmcli/eslint-config@"^3.0.1" from libnpmsearch@5.0.3
                workspaces/libnpmsearch
                dev @npmcli/eslint-config@"^3.0.1" from libnpmteam@4.0.3
                workspaces/libnpmteam
                dev @npmcli/eslint-config@"^3.0.1" from libnpmversion@3.0.4
                workspaces/libnpmversion
                dev @npmcli/eslint-config@"^3.0.1" from smoke-tests@1.0.0
                smoke-tests
            peer eslint@">=5" from eslint-utils@3.0.0
            node_modules/eslint/node_modules/eslint-utils
              eslint-utils@"^3.0.0" from eslint@8.12.0
      rimraf@"^3.0.0" from istanbul-lib-processinfo@2.0.2
      node_modules/istanbul-lib-processinfo
        istanbul-lib-processinfo@"^2.0.2" from nyc@15.1.0
        node_modules/nyc
          nyc@"^15.1.0" from tap@16.0.1
          node_modules/tap
            dev tap@"^16.0.1" from the root project
            dev tap@"^16.0.1" from arborist@5.2.0
            workspaces/arborist
            dev tap@"^16.0.1" from docs@1.0.0
            docs
            dev tap@"^16.0.1" from libnpmaccess@6.0.3
            workspaces/libnpmaccess
            dev tap@"^16.0.1" from libnpmdiff@4.0.3
            workspaces/libnpmdiff
            dev tap@"^16.0.1" from libnpmexec@4.0.5
            workspaces/libnpmexec
            dev tap@"^16.0.1" from libnpmfund@3.0.2
            workspaces/libnpmfund
            dev tap@"^16.0.1" from libnpmhook@8.0.3
            workspaces/libnpmhook
            dev tap@"^16.0.1" from libnpmorg@4.0.3
            workspaces/libnpmorg
            dev tap@"^16.0.1" from libnpmpack@4.0.3
            workspaces/libnpmpack
            dev tap@"^16.0.1" from libnpmpublish@6.0.4
            workspaces/libnpmpublish
            dev tap@"^16.0.1" from libnpmsearch@5.0.3
            workspaces/libnpmsearch
            dev tap@"^16.0.1" from libnpmteam@4.0.3
            workspaces/libnpmteam
            dev tap@"^16.0.1" from libnpmversion@3.0.4
            workspaces/libnpmversion
            dev tap@"^16.0.1" from smoke-tests@1.0.0
            smoke-tests
        istanbul-lib-processinfo@"^2.0.2" from tap@16.0.1
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from arborist@5.2.0
          workspaces/arborist
          dev tap@"^16.0.1" from docs@1.0.0
          docs
          dev tap@"^16.0.1" from libnpmaccess@6.0.3
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from libnpmdiff@4.0.3
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from libnpmexec@4.0.5
          workspaces/libnpmexec
          dev tap@"^16.0.1" from libnpmfund@3.0.2
          workspaces/libnpmfund
          dev tap@"^16.0.1" from libnpmhook@8.0.3
          workspaces/libnpmhook
          dev tap@"^16.0.1" from libnpmorg@4.0.3
          workspaces/libnpmorg
          dev tap@"^16.0.1" from libnpmpack@4.0.3
          workspaces/libnpmpack
          dev tap@"^16.0.1" from libnpmpublish@6.0.4
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from libnpmsearch@5.0.3
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from libnpmteam@4.0.3
          workspaces/libnpmteam
          dev tap@"^16.0.1" from libnpmversion@3.0.4
          workspaces/libnpmversion
          dev tap@"^16.0.1" from smoke-tests@1.0.0
          smoke-tests
      rimraf@"^3.0.2" from node-gyp@9.0.0
      node_modules/node-gyp
        bundled node-gyp@"^9.0.0" from the root project
        node-gyp@"^9.0.0" from @npmcli/run-script@3.0.2
        node_modules/@npmcli/run-script
          bundled @npmcli/run-script@"^3.0.1" from the root project
          @npmcli/run-script@"^3.0.1" from pacote@13.3.0
          node_modules/pacote
            bundled pacote@"^13.3.0" from the root project
            pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
            node_modules/@npmcli/metavuln-calculator
              @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
              workspaces/arborist
            pacote@"^13.0.5" from arborist@5.2.0
            workspaces/arborist
            pacote@"^13.0.5" from libnpmdiff@4.0.3
            workspaces/libnpmdiff
            pacote@"^13.0.5" from libnpmexec@4.0.5
            workspaces/libnpmexec
            pacote@"^13.0.5" from libnpmpack@4.0.3
            workspaces/libnpmpack
          @npmcli/run-script@"^3.0.0" from arborist@5.2.0
          workspaces/arborist
          @npmcli/run-script@"^3.0.0" from libnpmexec@4.0.5
          workspaces/libnpmexec
          @npmcli/run-script@"^3.0.0" from libnpmpack@4.0.3
          workspaces/libnpmpack
          @npmcli/run-script@"^3.0.0" from libnpmversion@3.0.4
          workspaces/libnpmversion
      rimraf@"^3.0.0" from nyc@15.1.0
      node_modules/nyc
        nyc@"^15.1.0" from tap@16.0.1
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from arborist@5.2.0
          workspaces/arborist
          dev tap@"^16.0.1" from docs@1.0.0
          docs
          dev tap@"^16.0.1" from libnpmaccess@6.0.3
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from libnpmdiff@4.0.3
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from libnpmexec@4.0.5
          workspaces/libnpmexec
          dev tap@"^16.0.1" from libnpmfund@3.0.2
          workspaces/libnpmfund
          dev tap@"^16.0.1" from libnpmhook@8.0.3
          workspaces/libnpmhook
          dev tap@"^16.0.1" from libnpmorg@4.0.3
          workspaces/libnpmorg
          dev tap@"^16.0.1" from libnpmpack@4.0.3
          workspaces/libnpmpack
          dev tap@"^16.0.1" from libnpmpublish@6.0.4
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from libnpmsearch@5.0.3
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from libnpmteam@4.0.3
          workspaces/libnpmteam
          dev tap@"^16.0.1" from libnpmversion@3.0.4
          workspaces/libnpmversion
          dev tap@"^16.0.1" from smoke-tests@1.0.0
          smoke-tests
      rimraf@"^3.0.2" from pacote@13.3.0
      node_modules/pacote
        bundled pacote@"^13.3.0" from the root project
        pacote@"^13.0.3" from @npmcli/metavuln-calculator@3.1.0
        node_modules/@npmcli/metavuln-calculator
          @npmcli/metavuln-calculator@"^3.0.1" from arborist@5.2.0
          workspaces/arborist
        pacote@"^13.0.5" from arborist@5.2.0
        workspaces/arborist
        pacote@"^13.0.5" from libnpmdiff@4.0.3
        workspaces/libnpmdiff
        pacote@"^13.0.5" from libnpmexec@4.0.5
        workspaces/libnpmexec
        pacote@"^13.0.5" from libnpmpack@4.0.3
        workspaces/libnpmpack
      rimraf@"^3.0.0" from spawn-wrap@2.0.0
      node_modules/spawn-wrap
        spawn-wrap@"^2.0.0" from nyc@15.1.0
        node_modules/nyc
          nyc@"^15.1.0" from tap@16.0.1
          node_modules/tap
            dev tap@"^16.0.1" from the root project
            dev tap@"^16.0.1" from arborist@5.2.0
            workspaces/arborist
            dev tap@"^16.0.1" from docs@1.0.0
            docs
            dev tap@"^16.0.1" from libnpmaccess@6.0.3
            workspaces/libnpmaccess
            dev tap@"^16.0.1" from libnpmdiff@4.0.3
            workspaces/libnpmdiff
            dev tap@"^16.0.1" from libnpmexec@4.0.5
            workspaces/libnpmexec
            dev tap@"^16.0.1" from libnpmfund@3.0.2
            workspaces/libnpmfund
            dev tap@"^16.0.1" from libnpmhook@8.0.3
            workspaces/libnpmhook
            dev tap@"^16.0.1" from libnpmorg@4.0.3
            workspaces/libnpmorg
            dev tap@"^16.0.1" from libnpmpack@4.0.3
            workspaces/libnpmpack
            dev tap@"^16.0.1" from libnpmpublish@6.0.4
            workspaces/libnpmpublish
            dev tap@"^16.0.1" from libnpmsearch@5.0.3
            workspaces/libnpmsearch
            dev tap@"^16.0.1" from libnpmteam@4.0.3
            workspaces/libnpmteam
            dev tap@"^16.0.1" from libnpmversion@3.0.4
            workspaces/libnpmversion
            dev tap@"^16.0.1" from smoke-tests@1.0.0
            smoke-tests
      rimraf@"^3.0.2" from arborist@5.2.0
      workspaces/arborist
      dev rimraf@"^3.0.2" from smoke-tests@1.0.0
      smoke-tests
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/tap-mocha-reporter/node_modules/glob
    glob@"^7.0.5" from tap-mocha-reporter@5.0.3
    node_modules/tap-mocha-reporter
      tap-mocha-reporter@"^5.0.3" from tap@16.0.1
      node_modules/tap
        dev tap@"^16.0.1" from the root project
        dev tap@"^16.0.1" from arborist@5.2.0
        workspaces/arborist
        dev tap@"^16.0.1" from docs@1.0.0
        docs
        dev tap@"^16.0.1" from libnpmaccess@6.0.3
        workspaces/libnpmaccess
        dev tap@"^16.0.1" from libnpmdiff@4.0.3
        workspaces/libnpmdiff
        dev tap@"^16.0.1" from libnpmexec@4.0.5
        workspaces/libnpmexec
        dev tap@"^16.0.1" from libnpmfund@3.0.2
        workspaces/libnpmfund
        dev tap@"^16.0.1" from libnpmhook@8.0.3
        workspaces/libnpmhook
        dev tap@"^16.0.1" from libnpmorg@4.0.3
        workspaces/libnpmorg
        dev tap@"^16.0.1" from libnpmpack@4.0.3
        workspaces/libnpmpack
        dev tap@"^16.0.1" from libnpmpublish@6.0.4
        workspaces/libnpmpublish
        dev tap@"^16.0.1" from libnpmsearch@5.0.3
        workspaces/libnpmsearch
        dev tap@"^16.0.1" from libnpmteam@4.0.3
        workspaces/libnpmteam
        dev tap@"^16.0.1" from libnpmversion@3.0.4
        workspaces/libnpmversion
        dev tap@"^16.0.1" from smoke-tests@1.0.0
        smoke-tests
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/test-exclude/node_modules/glob
    glob@"^7.1.4" from test-exclude@6.0.0
    node_modules/test-exclude
      test-exclude@"^6.0.0" from nyc@15.1.0
      node_modules/nyc
        nyc@"^15.1.0" from tap@16.0.1
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from arborist@5.2.0
          workspaces/arborist
          dev tap@"^16.0.1" from docs@1.0.0
          docs
          dev tap@"^16.0.1" from libnpmaccess@6.0.3
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from libnpmdiff@4.0.3
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from libnpmexec@4.0.5
          workspaces/libnpmexec
          dev tap@"^16.0.1" from libnpmfund@3.0.2
          workspaces/libnpmfund
          dev tap@"^16.0.1" from libnpmhook@8.0.3
          workspaces/libnpmhook
          dev tap@"^16.0.1" from libnpmorg@4.0.3
          workspaces/libnpmorg
          dev tap@"^16.0.1" from libnpmpack@4.0.3
          workspaces/libnpmpack
          dev tap@"^16.0.1" from libnpmpublish@6.0.4
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from libnpmsearch@5.0.3
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from libnpmteam@4.0.3
          workspaces/libnpmteam
          dev tap@"^16.0.1" from libnpmversion@3.0.4
          workspaces/libnpmversion
          dev tap@"^16.0.1" from smoke-tests@1.0.0
          smoke-tests

path-is-absolute@1.0.1 dev bundled
node_modules/tap/node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from glob@7.2.0
  node_modules/tap/node_modules/glob
    glob@"^7.1.6" from tap@16.0.1
    node_modules/tap
      dev tap@"^16.0.1" from the root project
      dev tap@"^16.0.1" from arborist@5.2.0
      workspaces/arborist
      dev tap@"^16.0.1" from docs@1.0.0
      docs
      dev tap@"^16.0.1" from libnpmaccess@6.0.3
      workspaces/libnpmaccess
      dev tap@"^16.0.1" from libnpmdiff@4.0.3
      workspaces/libnpmdiff
      dev tap@"^16.0.1" from libnpmexec@4.0.5
      workspaces/libnpmexec
      dev tap@"^16.0.1" from libnpmfund@3.0.2
      workspaces/libnpmfund
      dev tap@"^16.0.1" from libnpmhook@8.0.3
      workspaces/libnpmhook
      dev tap@"^16.0.1" from libnpmorg@4.0.3
      workspaces/libnpmorg
      dev tap@"^16.0.1" from libnpmpack@4.0.3
      workspaces/libnpmpack
      dev tap@"^16.0.1" from libnpmpublish@6.0.4
      workspaces/libnpmpublish
      dev tap@"^16.0.1" from libnpmsearch@5.0.3
      workspaces/libnpmsearch
      dev tap@"^16.0.1" from libnpmteam@4.0.3
      workspaces/libnpmteam
      dev tap@"^16.0.1" from libnpmversion@3.0.4
      workspaces/libnpmversion
      dev tap@"^16.0.1" from smoke-tests@1.0.0
      smoke-tests
    glob@"^7.1.3" from rimraf@3.0.2
    node_modules/tap/node_modules/rimraf
      rimraf@"^3.0.0" from tap@16.0.1
      node_modules/tap
        dev tap@"^16.0.1" from the root project
        dev tap@"^16.0.1" from arborist@5.2.0
        workspaces/arborist
        dev tap@"^16.0.1" from docs@1.0.0
        docs
        dev tap@"^16.0.1" from libnpmaccess@6.0.3
        workspaces/libnpmaccess
        dev tap@"^16.0.1" from libnpmdiff@4.0.3
        workspaces/libnpmdiff
        dev tap@"^16.0.1" from libnpmexec@4.0.5
        workspaces/libnpmexec
        dev tap@"^16.0.1" from libnpmfund@3.0.2
        workspaces/libnpmfund
        dev tap@"^16.0.1" from libnpmhook@8.0.3
        workspaces/libnpmhook
        dev tap@"^16.0.1" from libnpmorg@4.0.3
        workspaces/libnpmorg
        dev tap@"^16.0.1" from libnpmpack@4.0.3
        workspaces/libnpmpack
        dev tap@"^16.0.1" from libnpmpublish@6.0.4
        workspaces/libnpmpublish
        dev tap@"^16.0.1" from libnpmsearch@5.0.3
        workspaces/libnpmsearch
        dev tap@"^16.0.1" from libnpmteam@4.0.3
        workspaces/libnpmteam
        dev tap@"^16.0.1" from libnpmversion@3.0.4
        workspaces/libnpmversion
        dev tap@"^16.0.1" from smoke-tests@1.0.0
        smoke-tests
      rimraf@"^3.0.0" from @isaacs/import-jsx@4.0.1
      node_modules/tap/node_modules/@isaacs/import-jsx
        bundled @isaacs/import-jsx@"*" from tap@16.0.1
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from arborist@5.2.0
          workspaces/arborist
          dev tap@"^16.0.1" from docs@1.0.0
          docs
          dev tap@"^16.0.1" from libnpmaccess@6.0.3
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from libnpmdiff@4.0.3
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from libnpmexec@4.0.5
          workspaces/libnpmexec
          dev tap@"^16.0.1" from libnpmfund@3.0.2
          workspaces/libnpmfund
          dev tap@"^16.0.1" from libnpmhook@8.0.3
          workspaces/libnpmhook
          dev tap@"^16.0.1" from libnpmorg@4.0.3
          workspaces/libnpmorg
          dev tap@"^16.0.1" from libnpmpack@4.0.3
          workspaces/libnpmpack
          dev tap@"^16.0.1" from libnpmpublish@6.0.4
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from libnpmsearch@5.0.3
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from libnpmteam@4.0.3
          workspaces/libnpmteam
          dev tap@"^16.0.1" from libnpmversion@3.0.4
          workspaces/libnpmversion
          dev tap@"^16.0.1" from smoke-tests@1.0.0
          smoke-tests
        @isaacs/import-jsx@"^4.0.1" from treport@3.0.3
        node_modules/tap/node_modules/treport
          bundled treport@"*" from tap@16.0.1
          node_modules/tap
            dev tap@"^16.0.1" from the root project
            dev tap@"^16.0.1" from arborist@5.2.0
            workspaces/arborist
            dev tap@"^16.0.1" from docs@1.0.0
            docs
            dev tap@"^16.0.1" from libnpmaccess@6.0.3
            workspaces/libnpmaccess
            dev tap@"^16.0.1" from libnpmdiff@4.0.3
            workspaces/libnpmdiff
            dev tap@"^16.0.1" from libnpmexec@4.0.5
            workspaces/libnpmexec
            dev tap@"^16.0.1" from libnpmfund@3.0.2
            workspaces/libnpmfund
            dev tap@"^16.0.1" from libnpmhook@8.0.3
            workspaces/libnpmhook
            dev tap@"^16.0.1" from libnpmorg@4.0.3
            workspaces/libnpmorg
            dev tap@"^16.0.1" from libnpmpack@4.0.3
            workspaces/libnpmpack
            dev tap@"^16.0.1" from libnpmpublish@6.0.4
            workspaces/libnpmpublish
            dev tap@"^16.0.1" from libnpmsearch@5.0.3
            workspaces/libnpmsearch
            dev tap@"^16.0.1" from libnpmteam@4.0.3
            workspaces/libnpmteam
            dev tap@"^16.0.1" from libnpmversion@3.0.4
            workspaces/libnpmversion
            dev tap@"^16.0.1" from smoke-tests@1.0.0
            smoke-tests

Shorter, with a grep:

$ npm explain path-is-absolute | grep path-is-absolute
path-is-absolute@1.0.1 bundled
node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from glob@7.2.0
  path-is-absolute@"^1.0.0" from glob@7.2.0
  path-is-absolute@"^1.0.0" from glob@7.2.0
  path-is-absolute@"^1.0.0" from glob@7.2.0
  path-is-absolute@"^1.0.0" from glob@7.2.0
  path-is-absolute@"^1.0.0" from glob@7.2.0
path-is-absolute@1.0.1 dev bundled
node_modules/tap/node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from glob@7.2.0

@ljharb
Copy link
Collaborator

ljharb commented May 16, 2022

Sounds like it's a direct dev dep, and also from glob, so your glob PR (once released) would solve most of it, and there's at least one usage directly inside the cli as well that'd need to be removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Bug thing that needs fixing Needs Triage needs review for next steps Release 8.x work is associated with a specific npm 8 release
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ljharb @jsha