chore: add DEPENDENCIES.md (#4710)

This adds a script to generate dependency information for the npm cli.
The dependency info shows all of the packages in npm that the npm-cli
team themselves manage.

1 files changed, 738 insertions, 0 deletions

diff --git a/DEPENDENCIES.md b/DEPENDENCIES.md
new file mode 100644
index 000000000..61803e408
--- /dev/null
+++ b/DEPENDENCIES.md
@@ -0,0 +1,738 @@
+# npm dependencies
+
+## `github.com/npm/` only
+```mermaid
+graph LR;
+  bin-links-->cmd-shim;
+  bin-links-->npm-normalize-package-bin;
+  bin-links-->read-cmd-shim;
+  bin-links-->write-file-atomic;
+  cacache-->fs-minipass;
+  cacache-->infer-owner;
+  cacache-->npmcli-fs["@npmcli/fs"];
+  cacache-->npmcli-move-file["@npmcli/move-file"];
+  cacache-->ssri;
+  cacache-->unique-filename;
+  dezalgo-->wrappy;
+  init-package-json-->npm-package-arg;
+  init-package-json-->promzard;
+  init-package-json-->read-package-json;
+  init-package-json-->read;
+  init-package-json-->semver;
+  init-package-json-->validate-npm-package-name;
+  libnpmaccess-->npm-package-arg;
+  libnpmaccess-->npm-registry-fetch;
+  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmaccess-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmdiff-->npm-package-arg;
+  libnpmdiff-->npmcli-disparity-colors["@npmcli/disparity-colors"];
+  libnpmdiff-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmdiff-->npmcli-installed-package-contents["@npmcli/installed-package-contents"];
+  libnpmdiff-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmdiff-->pacote;
+  libnpmexec-->bin-links;
+  libnpmexec-->npm-package-arg;
+  libnpmexec-->npmcli-arborist["@npmcli/arborist"];
+  libnpmexec-->npmcli-ci-detect["@npmcli/ci-detect"];
+  libnpmexec-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmexec-->npmcli-run-script["@npmcli/run-script"];
+  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmexec-->npmlog;
+  libnpmexec-->pacote;
+  libnpmexec-->proc-log;
+  libnpmexec-->read-package-json-fast;
+  libnpmexec-->read;
+  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
+  libnpmfund-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmfund-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmhook-->npm-registry-fetch;
+  libnpmhook-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmhook-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmorg-->npm-registry-fetch;
+  libnpmorg-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmorg-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmpack-->npm-package-arg;
+  libnpmpack-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmpack-->npmcli-run-script["@npmcli/run-script"];
+  libnpmpack-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmpack-->pacote;
+  libnpmpublish-->libnpmpack;
+  libnpmpublish-->normalize-package-data;
+  libnpmpublish-->npm-package-arg;
+  libnpmpublish-->npm-registry-fetch;
+  libnpmpublish-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmpublish-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmpublish-->semver;
+  libnpmpublish-->ssri;
+  libnpmsearch-->npm-registry-fetch;
+  libnpmsearch-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmsearch-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmteam-->npm-registry-fetch;
+  libnpmteam-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmteam-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmversion-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmversion-->npmcli-git["@npmcli/git"];
+  libnpmversion-->npmcli-run-script["@npmcli/run-script"];
+  libnpmversion-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmversion-->proc-log;
+  libnpmversion-->semver;
+  libnpmversion-->stringify-package;
+  make-fetch-happen-->cacache;
+  make-fetch-happen-->minipass-fetch;
+  make-fetch-happen-->ssri;
+  nopt-->abbrev;
+  normalize-package-data-->hosted-git-info;
+  normalize-package-data-->semver;
+  npm-->abbrev;
+  npm-->cacache;
+  npm-->hosted-git-info;
+  npm-->ini;
+  npm-->init-package-json;
+  npm-->libnpmaccess;
+  npm-->libnpmdiff;
+  npm-->libnpmexec;
+  npm-->libnpmfund;
+  npm-->libnpmhook;
+  npm-->libnpmorg;
+  npm-->libnpmpack;
+  npm-->libnpmpublish;
+  npm-->libnpmsearch;
+  npm-->libnpmteam;
+  npm-->libnpmversion;
+  npm-->make-fetch-happen;
+  npm-->nopt;
+  npm-->npm-audit-report;
+  npm-->npm-install-checks;
+  npm-->npm-package-arg;
+  npm-->npm-profile;
+  npm-->npm-registry-fetch;
+  npm-->npm-user-validate;
+  npm-->npmcli-arborist["@npmcli/arborist"];
+  npm-->npmcli-ci-detect["@npmcli/ci-detect"];
+  npm-->npmcli-config["@npmcli/config"];
+  npm-->npmcli-eslint-config["@npmcli/eslint-config"];
+  npm-->npmcli-fs["@npmcli/fs"];
+  npm-->npmcli-map-workspaces["@npmcli/map-workspaces"];
+  npm-->npmcli-package-json["@npmcli/package-json"];
+  npm-->npmcli-run-script["@npmcli/run-script"];
+  npm-->npmcli-template-oss["@npmcli/template-oss"];
+  npm-->npmlog;
+  npm-->pacote;
+  npm-->parse-conflict-json;
+  npm-->proc-log;
+  npm-->read-package-json-fast;
+  npm-->read-package-json;
+  npm-->read;
+  npm-->readdir-scoped-modules;
+  npm-->semver;
+  npm-->ssri;
+  npm-->treeverse;
+  npm-->validate-npm-package-name;
+  npm-->write-file-atomic;
+  npm-bundled-->npm-normalize-package-bin;
+  npm-install-checks-->semver;
+  npm-package-arg-->hosted-git-info;
+  npm-package-arg-->semver;
+  npm-package-arg-->validate-npm-package-name;
+  npm-packlist-->ignore-walk;
+  npm-packlist-->npm-bundled;
+  npm-packlist-->npm-normalize-package-bin;
+  npm-profile-->npm-registry-fetch;
+  npm-profile-->proc-log;
+  npm-registry-fetch-->make-fetch-happen;
+  npm-registry-fetch-->minipass-fetch;
+  npm-registry-fetch-->npm-package-arg;
+  npm-registry-fetch-->proc-log;
+  npmcli-arborist-->bin-links;
+  npmcli-arborist-->cacache;
+  npmcli-arborist-->nopt;
+  npmcli-arborist-->npm-install-checks;
+  npmcli-arborist-->npm-package-arg;
+  npmcli-arborist-->npm-registry-fetch;
+  npmcli-arborist-->npmcli-eslint-config["@npmcli/eslint-config"];
+  npmcli-arborist-->npmcli-installed-package-contents["@npmcli/installed-package-contents"];
+  npmcli-arborist-->npmcli-map-workspaces["@npmcli/map-workspaces"];
+  npmcli-arborist-->npmcli-metavuln-calculator["@npmcli/metavuln-calculator"];
+  npmcli-arborist-->npmcli-move-file["@npmcli/move-file"];
+  npmcli-arborist-->npmcli-name-from-folder["@npmcli/name-from-folder"];
+  npmcli-arborist-->npmcli-node-gyp["@npmcli/node-gyp"];
+  npmcli-arborist-->npmcli-package-json["@npmcli/package-json"];
+  npmcli-arborist-->npmcli-run-script["@npmcli/run-script"];
+  npmcli-arborist-->npmcli-template-oss["@npmcli/template-oss"];
+  npmcli-arborist-->npmlog;
+  npmcli-arborist-->pacote;
+  npmcli-arborist-->parse-conflict-json;
+  npmcli-arborist-->proc-log;
+  npmcli-arborist-->read-package-json-fast;
+  npmcli-arborist-->readdir-scoped-modules;
+  npmcli-arborist-->semver;
+  npmcli-arborist-->ssri;
+  npmcli-arborist-->treeverse;
+  npmcli-config-->ini;
+  npmcli-config-->nopt;
+  npmcli-config-->npmcli-map-workspaces["@npmcli/map-workspaces"];
+  npmcli-config-->proc-log;
+  npmcli-config-->read-package-json-fast;
+  npmcli-config-->semver;
+  npmcli-fs-->semver;
+  npmcli-git-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  npmcli-git-->proc-log;
+  npmcli-git-->semver;
+  npmcli-installed-package-contents-->npm-bundled;
+  npmcli-installed-package-contents-->npm-normalize-package-bin;
+  npmcli-map-workspaces-->npmcli-name-from-folder["@npmcli/name-from-folder"];
+  npmcli-map-workspaces-->read-package-json-fast;
+  npmcli-metavuln-calculator-->cacache;
+  npmcli-metavuln-calculator-->pacote;
+  npmcli-metavuln-calculator-->semver;
+  npmcli-promise-spawn-->infer-owner;
+  npmcli-run-script-->npmcli-node-gyp["@npmcli/node-gyp"];
+  npmcli-run-script-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  npmcli-run-script-->read-package-json-fast;
+  npmlog-->are-we-there-yet;
+  npmlog-->gauge;
+  pacote-->cacache;
+  pacote-->fs-minipass;
+  pacote-->infer-owner;
+  pacote-->npm-package-arg;
+  pacote-->npm-packlist;
+  pacote-->npm-registry-fetch;
+  pacote-->npmcli-git["@npmcli/git"];
+  pacote-->npmcli-installed-package-contents["@npmcli/installed-package-contents"];
+  pacote-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  pacote-->npmcli-run-script["@npmcli/run-script"];
+  pacote-->proc-log;
+  pacote-->read-package-json-fast;
+  pacote-->read-package-json;
+  pacote-->ssri;
+  promzard-->read;
+  read-->mute-stream;
+  read-package-json-->normalize-package-data;
+  read-package-json-->npm-normalize-package-bin;
+  read-package-json-fast-->npm-normalize-package-bin;
+  readdir-scoped-modules-->dezalgo;
+  unique-filename-->unique-slug;
+```
+
+## all dependencies
+```mermaid
+graph LR;
+  agent-base-->debug;
+  agentkeepalive-->debug;
+  agentkeepalive-->depd;
+  agentkeepalive-->humanize-ms;
+  aggregate-error-->clean-stack;
+  aggregate-error-->indent-string;
+  ansi-styles-->color-convert;
+  are-we-there-yet-->delegates;
+  are-we-there-yet-->readable-stream;
+  bin-links-->cmd-shim;
+  bin-links-->mkdirp-infer-owner;
+  bin-links-->npm-normalize-package-bin;
+  bin-links-->read-cmd-shim;
+  bin-links-->rimraf;
+  bin-links-->write-file-atomic;
+  brace-expansion-->balanced-match;
+  brace-expansion-->concat-map;
+  builtins-->semver;
+  cacache-->chownr;
+  cacache-->fs-minipass;
+  cacache-->glob;
+  cacache-->infer-owner;
+  cacache-->lru-cache;
+  cacache-->minipass-collect;
+  cacache-->minipass-flush;
+  cacache-->minipass-pipeline;
+  cacache-->minipass;
+  cacache-->mkdirp;
+  cacache-->npmcli-fs["@npmcli/fs"];
+  cacache-->npmcli-move-file["@npmcli/move-file"];
+  cacache-->p-map;
+  cacache-->promise-inflight;
+  cacache-->rimraf;
+  cacache-->ssri;
+  cacache-->tar;
+  cacache-->unique-filename;
+  chalk-->ansi-styles;
+  chalk-->supports-color;
+  cidr-regex-->ip-regex;
+  cli-columns-->string-width;
+  cli-columns-->strip-ansi;
+  cli-table3-->colors;
+  cli-table3-->string-width;
+  cmd-shim-->mkdirp-infer-owner;
+  color-convert-->color-name;
+  columnify-->strip-ansi;
+  columnify-->wcwidth;
+  debug-->ms;
+  defaults-->clone;
+  dezalgo-->asap;
+  dezalgo-->wrappy;
+  docs-->cmark-gfm;
+  docs-->jsdom;
+  docs-->marked-man;
+  docs-->mdx-js-mdx["@mdx-js/mdx"];
+  docs-->npmcli-eslint-config["@npmcli/eslint-config"];
+  docs-->npmcli-fs["@npmcli/fs"];
+  docs-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  docs-->npmcli-template-oss["@npmcli/template-oss"];
+  docs-->tap;
+  docs-->which;
+  docs-->yaml;
+  encoding-->iconv-lite;
+  fs-minipass-->minipass;
+  gauge-->aproba;
+  gauge-->color-support;
+  gauge-->console-control-strings;
+  gauge-->has-unicode;
+  gauge-->signal-exit;
+  gauge-->string-width;
+  gauge-->strip-ansi;
+  gauge-->wide-align;
+  glob-->fs.realpath;
+  glob-->inflight;
+  glob-->inherits;
+  glob-->minimatch;
+  glob-->once;
+  glob-->path-is-absolute;
+  has-->function-bind;
+  hosted-git-info-->lru-cache;
+  http-proxy-agent-->agent-base;
+  http-proxy-agent-->debug;
+  http-proxy-agent-->tootallnate-once["@tootallnate/once"];
+  https-proxy-agent-->agent-base;
+  https-proxy-agent-->debug;
+  humanize-ms-->ms;
+  iconv-lite-->safer-buffer;
+  ignore-walk-->minimatch;
+  inflight-->once;
+  inflight-->wrappy;
+  init-package-json-->npm-package-arg;
+  init-package-json-->promzard;
+  init-package-json-->read-package-json;
+  init-package-json-->read;
+  init-package-json-->semver;
+  init-package-json-->validate-npm-package-license;
+  init-package-json-->validate-npm-package-name;
+  is-cidr-->cidr-regex;
+  is-core-module-->has;
+  libnpmaccess-->aproba;
+  libnpmaccess-->minipass;
+  libnpmaccess-->nock;
+  libnpmaccess-->npm-package-arg;
+  libnpmaccess-->npm-registry-fetch;
+  libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmaccess-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmaccess-->tap;
+  libnpmdiff-->binary-extensions;
+  libnpmdiff-->diff;
+  libnpmdiff-->minimatch;
+  libnpmdiff-->npm-package-arg;
+  libnpmdiff-->npmcli-disparity-colors["@npmcli/disparity-colors"];
+  libnpmdiff-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmdiff-->npmcli-installed-package-contents["@npmcli/installed-package-contents"];
+  libnpmdiff-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmdiff-->pacote;
+  libnpmdiff-->tap;
+  libnpmdiff-->tar;
+  libnpmexec-->bin-links;
+  libnpmexec-->chalk;
+  libnpmexec-->mkdirp-infer-owner;
+  libnpmexec-->npm-package-arg;
+  libnpmexec-->npmcli-arborist["@npmcli/arborist"];
+  libnpmexec-->npmcli-ci-detect["@npmcli/ci-detect"];
+  libnpmexec-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmexec-->npmcli-run-script["@npmcli/run-script"];
+  libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmexec-->npmlog;
+  libnpmexec-->pacote;
+  libnpmexec-->proc-log;
+  libnpmexec-->read-package-json-fast;
+  libnpmexec-->read;
+  libnpmexec-->tap;
+  libnpmexec-->walk-up-path;
+  libnpmfund-->npmcli-arborist["@npmcli/arborist"];
+  libnpmfund-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmfund-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmfund-->tap;
+  libnpmhook-->aproba;
+  libnpmhook-->nock;
+  libnpmhook-->npm-registry-fetch;
+  libnpmhook-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmhook-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmhook-->tap;
+  libnpmorg-->aproba;
+  libnpmorg-->minipass;
+  libnpmorg-->nock;
+  libnpmorg-->npm-registry-fetch;
+  libnpmorg-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmorg-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmorg-->tap;
+  libnpmpack-->nock;
+  libnpmpack-->npm-package-arg;
+  libnpmpack-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmpack-->npmcli-run-script["@npmcli/run-script"];
+  libnpmpack-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmpack-->pacote;
+  libnpmpack-->tap;
+  libnpmpublish-->libnpmpack;
+  libnpmpublish-->lodash.clonedeep;
+  libnpmpublish-->nock;
+  libnpmpublish-->normalize-package-data;
+  libnpmpublish-->npm-package-arg;
+  libnpmpublish-->npm-registry-fetch;
+  libnpmpublish-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmpublish-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmpublish-->semver;
+  libnpmpublish-->ssri;
+  libnpmpublish-->tap;
+  libnpmsearch-->nock;
+  libnpmsearch-->npm-registry-fetch;
+  libnpmsearch-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmsearch-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmsearch-->tap;
+  libnpmteam-->aproba;
+  libnpmteam-->nock;
+  libnpmteam-->npm-registry-fetch;
+  libnpmteam-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmteam-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmteam-->tap;
+  libnpmversion-->json-parse-even-better-errors;
+  libnpmversion-->npmcli-eslint-config["@npmcli/eslint-config"];
+  libnpmversion-->npmcli-git["@npmcli/git"];
+  libnpmversion-->npmcli-run-script["@npmcli/run-script"];
+  libnpmversion-->npmcli-template-oss["@npmcli/template-oss"];
+  libnpmversion-->proc-log;
+  libnpmversion-->require-inject;
+  libnpmversion-->semver;
+  libnpmversion-->stringify-package;
+  libnpmversion-->tap;
+  make-fetch-happen-->agentkeepalive;
+  make-fetch-happen-->cacache;
+  make-fetch-happen-->http-cache-semantics;
+  make-fetch-happen-->http-proxy-agent;
+  make-fetch-happen-->https-proxy-agent;
+  make-fetch-happen-->is-lambda;
+  make-fetch-happen-->lru-cache;
+  make-fetch-happen-->minipass-collect;
+  make-fetch-happen-->minipass-fetch;
+  make-fetch-happen-->minipass-flush;
+  make-fetch-happen-->minipass-pipeline;
+  make-fetch-happen-->minipass;
+  make-fetch-happen-->negotiator;
+  make-fetch-happen-->promise-retry;
+  make-fetch-happen-->socks-proxy-agent;
+  make-fetch-happen-->ssri;
+  minimatch-->brace-expansion;
+  minipass-->yallist;
+  minipass-collect-->minipass;
+  minipass-fetch-->encoding;
+  minipass-fetch-->minipass-sized;
+  minipass-fetch-->minipass;
+  minipass-fetch-->minizlib;
+  minipass-flush-->minipass;
+  minipass-json-stream-->jsonparse;
+  minipass-json-stream-->minipass;
+  minipass-pipeline-->minipass;
+  minipass-sized-->minipass;
+  minizlib-->minipass;
+  minizlib-->yallist;
+  mkdirp-infer-owner-->chownr;
+  mkdirp-infer-owner-->infer-owner;
+  mkdirp-infer-owner-->mkdirp;
+  node-gyp-->env-paths;
+  node-gyp-->glob;
+  node-gyp-->graceful-fs;
+  node-gyp-->make-fetch-happen;
+  node-gyp-->nopt;
+  node-gyp-->npmlog;
+  node-gyp-->rimraf;
+  node-gyp-->semver;
+  node-gyp-->tar;
+  node-gyp-->which;
+  nopt-->abbrev;
+  normalize-package-data-->hosted-git-info;
+  normalize-package-data-->is-core-module;
+  normalize-package-data-->semver;
+  normalize-package-data-->validate-npm-package-license;
+  npm-->abbrev;
+  npm-->ansicolors;
+  npm-->ansistyles;
+  npm-->archy;
+  npm-->cacache;
+  npm-->chalk;
+  npm-->chownr;
+  npm-->cli-columns;
+  npm-->cli-table3;
+  npm-->columnify;
+  npm-->docs;
+  npm-->fastest-levenshtein;
+  npm-->glob;
+  npm-->graceful-fs;
+  npm-->hosted-git-info;
+  npm-->ini;
+  npm-->init-package-json;
+  npm-->is-cidr;
+  npm-->isaacs-string-locale-compare["@isaacs/string-locale-compare"];
+  npm-->json-parse-even-better-errors;
+  npm-->libnpmaccess;
+  npm-->libnpmdiff;
+  npm-->libnpmexec;
+  npm-->libnpmfund;
+  npm-->libnpmhook;
+  npm-->libnpmorg;
+  npm-->libnpmpack;
+  npm-->libnpmpublish;
+  npm-->libnpmsearch;
+  npm-->libnpmteam;
+  npm-->libnpmversion;
+  npm-->licensee;
+  npm-->make-fetch-happen;
+  npm-->minipass-pipeline;
+  npm-->minipass;
+  npm-->mkdirp-infer-owner;
+  npm-->mkdirp;
+  npm-->ms;
+  npm-->nock;
+  npm-->node-gyp;
+  npm-->nopt;
+  npm-->npm-audit-report;
+  npm-->npm-install-checks;
+  npm-->npm-package-arg;
+  npm-->npm-pick-manifest;
+  npm-->npm-profile;
+  npm-->npm-registry-fetch;
+  npm-->npm-user-validate;
+  npm-->npmcli-arborist["@npmcli/arborist"];
+  npm-->npmcli-ci-detect["@npmcli/ci-detect"];
+  npm-->npmcli-config["@npmcli/config"];
+  npm-->npmcli-eslint-config["@npmcli/eslint-config"];
+  npm-->npmcli-fs["@npmcli/fs"];
+  npm-->npmcli-map-workspaces["@npmcli/map-workspaces"];
+  npm-->npmcli-package-json["@npmcli/package-json"];
+  npm-->npmcli-run-script["@npmcli/run-script"];
+  npm-->npmcli-template-oss["@npmcli/template-oss"];
+  npm-->npmlog;
+  npm-->opener;
+  npm-->pacote;
+  npm-->parse-conflict-json;
+  npm-->proc-log;
+  npm-->qrcode-terminal;
+  npm-->read-package-json-fast;
+  npm-->read-package-json;
+  npm-->read;
+  npm-->readdir-scoped-modules;
+  npm-->rimraf;
+  npm-->semver;
+  npm-->spawk;
+  npm-->ssri;
+  npm-->tap;
+  npm-->tar;
+  npm-->text-table;
+  npm-->tiny-relative-date;
+  npm-->treeverse;
+  npm-->validate-npm-package-name;
+  npm-->which;
+  npm-->write-file-atomic;
+  npm-audit-report-->chalk;
+  npm-bundled-->npm-normalize-package-bin;
+  npm-install-checks-->semver;
+  npm-package-arg-->hosted-git-info;
+  npm-package-arg-->semver;
+  npm-package-arg-->validate-npm-package-name;
+  npm-packlist-->glob;
+  npm-packlist-->ignore-walk;
+  npm-packlist-->npm-bundled;
+  npm-packlist-->npm-normalize-package-bin;
+  npm-pick-manifest-->npm-install-checks;
+  npm-pick-manifest-->npm-normalize-package-bin;
+  npm-pick-manifest-->npm-package-arg;
+  npm-pick-manifest-->semver;
+  npm-profile-->npm-registry-fetch;
+  npm-profile-->proc-log;
+  npm-registry-fetch-->make-fetch-happen;
+  npm-registry-fetch-->minipass-fetch;
+  npm-registry-fetch-->minipass-json-stream;
+  npm-registry-fetch-->minipass;
+  npm-registry-fetch-->minizlib;
+  npm-registry-fetch-->npm-package-arg;
+  npm-registry-fetch-->proc-log;
+  npmcli-arborist-->benchmark;
+  npmcli-arborist-->bin-links;
+  npmcli-arborist-->cacache;
+  npmcli-arborist-->chalk;
+  npmcli-arborist-->common-ancestor-path;
+  npmcli-arborist-->isaacs-string-locale-compare["@isaacs/string-locale-compare"];
+  npmcli-arborist-->json-parse-even-better-errors;
+  npmcli-arborist-->json-stringify-nice;
+  npmcli-arborist-->minify-registry-metadata;
+  npmcli-arborist-->mkdirp-infer-owner;
+  npmcli-arborist-->mkdirp;
+  npmcli-arborist-->nock;
+  npmcli-arborist-->nopt;
+  npmcli-arborist-->npm-install-checks;
+  npmcli-arborist-->npm-package-arg;
+  npmcli-arborist-->npm-pick-manifest;
+  npmcli-arborist-->npm-registry-fetch;
+  npmcli-arborist-->npmcli-eslint-config["@npmcli/eslint-config"];
+  npmcli-arborist-->npmcli-installed-package-contents["@npmcli/installed-package-contents"];
+  npmcli-arborist-->npmcli-map-workspaces["@npmcli/map-workspaces"];
+  npmcli-arborist-->npmcli-metavuln-calculator["@npmcli/metavuln-calculator"];
+  npmcli-arborist-->npmcli-move-file["@npmcli/move-file"];
+  npmcli-arborist-->npmcli-name-from-folder["@npmcli/name-from-folder"];
+  npmcli-arborist-->npmcli-node-gyp["@npmcli/node-gyp"];
+  npmcli-arborist-->npmcli-package-json["@npmcli/package-json"];
+  npmcli-arborist-->npmcli-run-script["@npmcli/run-script"];
+  npmcli-arborist-->npmcli-template-oss["@npmcli/template-oss"];
+  npmcli-arborist-->npmlog;
+  npmcli-arborist-->pacote;
+  npmcli-arborist-->parse-conflict-json;
+  npmcli-arborist-->proc-log;
+  npmcli-arborist-->promise-all-reject-late;
+  npmcli-arborist-->promise-call-limit;
+  npmcli-arborist-->read-package-json-fast;
+  npmcli-arborist-->readdir-scoped-modules;
+  npmcli-arborist-->rimraf;
+  npmcli-arborist-->semver;
+  npmcli-arborist-->ssri;
+  npmcli-arborist-->tap;
+  npmcli-arborist-->tcompare;
+  npmcli-arborist-->treeverse;
+  npmcli-arborist-->walk-up-path;
+  npmcli-config-->ini;
+  npmcli-config-->mkdirp-infer-owner;
+  npmcli-config-->nopt;
+  npmcli-config-->npmcli-map-workspaces["@npmcli/map-workspaces"];
+  npmcli-config-->proc-log;
+  npmcli-config-->read-package-json-fast;
+  npmcli-config-->semver;
+  npmcli-config-->walk-up-path;
+  npmcli-disparity-colors-->ansi-styles;
+  npmcli-fs-->gar-promisify["@gar/promisify"];
+  npmcli-fs-->semver;
+  npmcli-git-->lru-cache;
+  npmcli-git-->mkdirp;
+  npmcli-git-->npm-pick-manifest;
+  npmcli-git-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  npmcli-git-->proc-log;
+  npmcli-git-->promise-inflight;
+  npmcli-git-->promise-retry;
+  npmcli-git-->semver;
+  npmcli-git-->which;
+  npmcli-installed-package-contents-->npm-bundled;
+  npmcli-installed-package-contents-->npm-normalize-package-bin;
+  npmcli-map-workspaces-->glob;
+  npmcli-map-workspaces-->minimatch;
+  npmcli-map-workspaces-->npmcli-name-from-folder["@npmcli/name-from-folder"];
+  npmcli-map-workspaces-->read-package-json-fast;
+  npmcli-metavuln-calculator-->cacache;
+  npmcli-metavuln-calculator-->json-parse-even-better-errors;
+  npmcli-metavuln-calculator-->pacote;
+  npmcli-metavuln-calculator-->semver;
+  npmcli-move-file-->mkdirp;
+  npmcli-move-file-->rimraf;
+  npmcli-package-json-->json-parse-even-better-errors;
+  npmcli-promise-spawn-->infer-owner;
+  npmcli-run-script-->node-gyp;
+  npmcli-run-script-->npmcli-node-gyp["@npmcli/node-gyp"];
+  npmcli-run-script-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  npmcli-run-script-->read-package-json-fast;
+  npmlog-->are-we-there-yet;
+  npmlog-->console-control-strings;
+  npmlog-->gauge;
+  npmlog-->set-blocking;
+  once-->wrappy;
+  p-map-->aggregate-error;
+  pacote-->cacache;
+  pacote-->chownr;
+  pacote-->fs-minipass;
+  pacote-->infer-owner;
+  pacote-->minipass;
+  pacote-->mkdirp;
+  pacote-->npm-package-arg;
+  pacote-->npm-packlist;
+  pacote-->npm-pick-manifest;
+  pacote-->npm-registry-fetch;
+  pacote-->npmcli-git["@npmcli/git"];
+  pacote-->npmcli-installed-package-contents["@npmcli/installed-package-contents"];
+  pacote-->npmcli-promise-spawn["@npmcli/promise-spawn"];
+  pacote-->npmcli-run-script["@npmcli/run-script"];
+  pacote-->proc-log;
+  pacote-->promise-retry;
+  pacote-->read-package-json-fast;
+  pacote-->read-package-json;
+  pacote-->rimraf;
+  pacote-->ssri;
+  pacote-->tar;
+  parse-conflict-json-->json-parse-even-better-errors;
+  parse-conflict-json-->just-diff-apply;
+  parse-conflict-json-->just-diff;
+  promise-retry-->err-code;
+  promise-retry-->retry;
+  promzard-->read;
+  read-->mute-stream;
+  read-package-json-->glob;
+  read-package-json-->json-parse-even-better-errors;
+  read-package-json-->normalize-package-data;
+  read-package-json-->npm-normalize-package-bin;
+  read-package-json-fast-->json-parse-even-better-errors;
+  read-package-json-fast-->npm-normalize-package-bin;
+  readable-stream-->inherits;
+  readable-stream-->string_decoder;
+  readable-stream-->util-deprecate;
+  readdir-scoped-modules-->debuglog;
+  readdir-scoped-modules-->dezalgo;
+  readdir-scoped-modules-->graceful-fs;
+  readdir-scoped-modules-->once;
+  rimraf-->glob;
+  semver-->lru-cache;
+  socks-->ip;
+  socks-->smart-buffer;
+  socks-proxy-agent-->agent-base;
+  socks-proxy-agent-->debug;
+  socks-proxy-agent-->socks;
+  spdx-correct-->spdx-expression-parse;
+  spdx-correct-->spdx-license-ids;
+  spdx-expression-parse-->spdx-exceptions;
+  spdx-expression-parse-->spdx-license-ids;
+  ssri-->minipass;
+  string-width-->emoji-regex;
+  string-width-->is-fullwidth-code-point;
+  string-width-->strip-ansi;
+  string_decoder-->safe-buffer;
+  strip-ansi-->ansi-regex;
+  supports-color-->has-flag;
+  tar-->chownr;
+  tar-->fs-minipass;
+  tar-->minipass;
+  tar-->minizlib;
+  tar-->mkdirp;
+  tar-->yallist;
+  unique-filename-->unique-slug;
+  unique-slug-->imurmurhash;
+  validate-npm-package-license-->spdx-correct;
+  validate-npm-package-license-->spdx-expression-parse;
+  validate-npm-package-name-->builtins;
+  wcwidth-->defaults;
+  which-->isexe;
+  wide-align-->string-width;
+  write-file-atomic-->imurmurhash;
+  write-file-atomic-->signal-exit;
+```
+
+## npm dependency heirarchy
+
+These are the groups of dependencies in npm that depend on each other.
+Each group depends on packages lower down the chain, nothing depends on
+packages higher up the chain.
+
+ - npm
+ - libnpmexec, libnpmfund
+ - @npmcli/arborist, libnpmpublish
+ - @npmcli/metavuln-calculator, libnpmdiff, libnpmpack
+ - pacote, libnpmaccess, libnpmhook, libnpmorg, libnpmsearch, libnpmteam, npm-profile
+ - npm-registry-fetch
+ - make-fetch-happen, libnpmversion, @npmcli/config, init-package-json
+ - @npmcli/installed-package-contents, @npmcli/map-workspaces, cacache, @npmcli/git, @npmcli/run-script, npm-packlist, read-package-json, readdir-scoped-modules, promzard
+ - npm-bundled, read-package-json-fast, @npmcli/fs, unique-filename, @npmcli/promise-spawn, npm-package-arg, normalize-package-data, bin-links, nopt, npm-install-checks, npmlog, dezalgo, read
+ - npm-normalize-package-bin, @npmcli/name-from-folder, semver, @npmcli/move-file, fs-minipass, infer-owner, ssri, unique-slug, proc-log, @npmcli/node-gyp, hosted-git-info, validate-npm-package-name, ignore-walk, minipass-fetch, @npmcli/package-json, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, are-we-there-yet, gauge, parse-conflict-json, wrappy, treeverse, @npmcli/eslint-config, @npmcli/template-oss, @npmcli/disparity-colors, @npmcli/ci-detect, mute-stream, stringify-package, ini, npm-audit-report, npm-user-validate
\ No newline at end of file