deps: @npmcli/template-oss@3.2.1

- `no-shadow` was disabled for the cli and arborist due to the amount
of changes required. These should be fixed later.
- Manually updated linting in the cli root to match closer to what
template-oss does
- Included docs to be managed with template-oss. This required adding
an empty test for now, with the plan to add real tests later.

76 files changed, 324 insertions, 558 deletions

diff --git a/workspaces/arborist/.eslintrc.js b/workspaces/arborist/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/arborist/.eslintrc.js
+++ b/workspaces/arborist/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/arborist/.eslintrc.local.json b/workspaces/arborist/.eslintrc.local.json
index 9542f520e..a3fa6576f 100644
--- a/workspaces/arborist/.eslintrc.local.json
+++ b/workspaces/arborist/.eslintrc.local.json
@@ -1,5 +1,10 @@
 {
+  "ignorePatterns": [
+    "test/fixtures/",
+    "!test/fixtures/*.js"
+  ],
   "rules": {
-    "max-len": 0
+    "max-len": "off",
+    "no-shadow": "off"
   }
 }
diff --git a/workspaces/arborist/.gitignore b/workspaces/arborist/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/arborist/.gitignore
+++ b/workspaces/arborist/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/arborist/.npmrc b/workspaces/arborist/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/arborist/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/arborist/SECURITY.md b/workspaces/arborist/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/arborist/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/arborist/package.json b/workspaces/arborist/package.json
index 258234b97..77c76821b 100644
--- a/workspaces/arborist/package.json
+++ b/workspaces/arborist/package.json
@@ -39,7 +39,8 @@
     "walk-up-path": "^1.0.0"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "benchmark": "^2.1.4",
     "chalk": "^4.1.0",
     "minify-registry-metadata": "^2.1.0",
@@ -57,24 +58,24 @@
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
     "eslint": "eslint",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "lintfix": "npm run lint -- --fix",
     "benchmark": "node scripts/benchmark.js",
     "benchclean": "rm -rf scripts/benchmark/*/",
     "npmclilint": "npmcli-lint",
-    "postlint": "npm-template-check",
-    "template-copy": "npm-template-copy --force"
+    "postlint": "template-oss-check",
+    "template-oss-apply": "template-oss-apply --force"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/arborist"
   },
   "author": "GitHub Inc.",
   "license": "ISC",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "main": "lib/index.js",
   "bin": {
@@ -96,13 +97,10 @@
     "timeout": "360"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
-  "eslintIgnore": [
-    "test/fixtures/",
-    "!test/fixtures/*.js"
-  ],
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmaccess/.eslintrc.js b/workspaces/libnpmaccess/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmaccess/.eslintrc.js
+++ b/workspaces/libnpmaccess/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmaccess/.gitignore b/workspaces/libnpmaccess/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmaccess/.gitignore
+++ b/workspaces/libnpmaccess/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmaccess/.npmrc b/workspaces/libnpmaccess/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmaccess/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmaccess/CHANGELOG.md b/workspaces/libnpmaccess/CHANGELOG.md
index d79d9b54c..fd590f39b 100644
--- a/workspaces/libnpmaccess/CHANGELOG.md
+++ b/workspaces/libnpmaccess/CHANGELOG.md
@@ -1,6 +1,5 @@
 # Changelog
 
-<a name="4.0.0"></a>
 ### [6.0.2](https://www.github.com/npm/cli/compare/libnpmaccess-v6.0.1...libnpmaccess-v6.0.2) (2022-03-15)
 
 
diff --git a/workspaces/libnpmaccess/SECURITY.md b/workspaces/libnpmaccess/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmaccess/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmaccess/lib/index.js b/workspaces/libnpmaccess/lib/index.js
index 925f74292..71219d009 100644
--- a/workspaces/libnpmaccess/lib/index.js
+++ b/workspaces/libnpmaccess/lib/index.js
@@ -116,7 +116,7 @@ cmd.lsPackages.stream = (entity, opts = {}) => {
       if (err.code === 'E404' && !team) {
         uri = `/-/user/${eu(scope)}/package`
         npmFetch.json.stream(uri, '*', nextOpts)
-          .on('error', err => ret.emit('error', err))
+          .on('error', streamErr => ret.emit('error', streamErr))
           .pipe(ret)
       } else {
         ret.emit('error', err)
diff --git a/workspaces/libnpmaccess/package.json b/workspaces/libnpmaccess/package.json
index ab3880a46..9efc85076 100644
--- a/workspaces/libnpmaccess/package.json
+++ b/workspaces/libnpmaccess/package.json
@@ -9,23 +9,24 @@
     "preversion": "npm test",
     "postversion": "npm publish",
     "postpublish": "git push origin --follow-tags",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "test": "tap",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "prepublishOnly": "git push origin --follow-tags",
     "snap": "tap",
     "posttest": "npm run lint",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "nock": "^13.2.4",
     "tap": "^15.1.0"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmaccess"
   },
   "bugs": "https://github.com/npm/libnpmaccess/issues",
@@ -37,16 +38,17 @@
     "npm-registry-fetch": "^13.0.0"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "tap": {
     "check-coverage": true
   },
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmdiff/.eslintrc.js b/workspaces/libnpmdiff/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmdiff/.eslintrc.js
+++ b/workspaces/libnpmdiff/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmdiff/.gitignore b/workspaces/libnpmdiff/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmdiff/.gitignore
+++ b/workspaces/libnpmdiff/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmdiff/.npmrc b/workspaces/libnpmdiff/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmdiff/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmdiff/SECURITY.md b/workspaces/libnpmdiff/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmdiff/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmdiff/package.json b/workspaces/libnpmdiff/package.json
index 11d0f5887..eff595823 100644
--- a/workspaces/libnpmdiff/package.json
+++ b/workspaces/libnpmdiff/package.json
@@ -4,16 +4,16 @@
   "description": "The registry diff",
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmdiff"
   },
   "main": "lib/index.js",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "keywords": [
     "npm",
@@ -33,7 +33,7 @@
   "license": "ISC",
   "scripts": {
     "eslint": "eslint",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "lintfix": "npm run lint -- --fix",
     "test": "tap",
     "posttest": "npm run lint",
@@ -41,15 +41,15 @@
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "postlint": "npm-template-check",
-    "template-copy": "npm-template-copy --force"
+    "postlint": "template-oss-check",
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
-    "eslint": "^8.1.0",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "tap": "^15.0.9"
   },
   "dependencies": {
@@ -63,6 +63,7 @@
     "tar": "^6.1.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmdiff/test/tarball.js b/workspaces/libnpmdiff/test/tarball.js
index 3a959be6e..b0a507c84 100644
--- a/workspaces/libnpmdiff/test/tarball.js
+++ b/workspaces/libnpmdiff/test/tarball.js
@@ -36,9 +36,9 @@ t.test('returns a tarball from node_modules', t => {
   tarball({ bin: { a: 'index.js' }, _resolved: resolve(path, 'node_modules/a') }, { where: path })
     .then(res => {
       tar.list({
-        filter: path => {
+        filter: p => {
           t.match(
-            path,
+            p,
             /package.json|index.js/,
             'should return tarball with expected files'
           )
diff --git a/workspaces/libnpmexec/.editorconfig b/workspaces/libnpmexec/.editorconfig
deleted file mode 100644
index 0f3bb618c..000000000
--- a/workspaces/libnpmexec/.editorconfig
+++ /dev/null
@@ -1,3 +0,0 @@
-[*.js]
-indent_style = space
-indent_size = 2
diff --git a/workspaces/libnpmexec/.eslintrc.js b/workspaces/libnpmexec/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmexec/.eslintrc.js
+++ b/workspaces/libnpmexec/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmexec/.gitignore b/workspaces/libnpmexec/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmexec/.gitignore
+++ b/workspaces/libnpmexec/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmexec/.npmrc b/workspaces/libnpmexec/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmexec/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmexec/CONTRIBUTING.md b/workspaces/libnpmexec/CONTRIBUTING.md
deleted file mode 100644
index 045ba4b2e..000000000
--- a/workspaces/libnpmexec/CONTRIBUTING.md
+++ /dev/null
@@ -1,68 +0,0 @@
-# Contributing
-## Table of Contents
-
-* [Introduction](#introduction)
-* [Running Tests](#running-tests)
-* [Coverage](#coverage)
-* [Types of Contributions](#types-of-contributions)
-  * [Contributing an Issue?](#contributing-an-issue)
-  * [Contributing a Question?](#contributing-a-question)
-  * [Contributing a Bug Fix?](#contributing-a-bug-fix)
-  * [Contributing a Feature?](#contributing-a-feature)
-* [Development Dependencies](#development-dependencies)
-* [Dependencies](#dependencies)
-
-## Introduction
-
-Welcome to the **libnpmexec** Contributor Guide! This document outlines the libnpmexec's process for community interaction and contribution. This includes the issue tracker, pull requests, wiki pages, and, to a certain extent, outside communication in the context of the libnpmexec. This is an entry point for anyone wishing to contribute their time and effort to making libnpmexec a better tool for the JavaScript community!
-
-All interactions in the **libnpmexec** repository are covered by the [npm Code of Conduct](https://www.npmjs.com/policies/conduct)
-
-
-## Running Tests
-
-```
-# Make sure you install the dependencies first before running tests.
-$ npm install
-
-# Run tests for the CLI (it could take awhile).
-$ npm run test
-```
-
-## Coverage
-
-We try and make sure that each new feature or bug fix has tests to go along with them in order to keep code coverages consistent and increasing. We are actively striving for 100% code coverage!
-
-## Types of Contributions
-
-> Before contributing something, double check the issue you're creating doesn't already exist in the repository but doing a quick search. Search of the [current issues](https://github.com/npm/libnpmexec/issues).
-
-### Contributing a Question?
-
-Huh? 🤔 Got a situation you're not sure about?! Perfect!
-
-You can create a new question [here](https://github.com/npm/libnpmexec/issues/new?template=question.md&title=%5BQUESTION%5D+%3Ctitle%3E)!
-
-### Contributing a Bug Fix?
-
-We'd be happy to triage and help! Head over to the issues and [create a new one](https://github.com/npm/libnpmexec/issues/new?template=bug.md&title=%5BBUG%5D+%3Ctitle%3E)!
-
-
-### Contributing a Feature?
-
-Snazzy, we're always up for fancy new things! If the feature is fairly minor [create a new one](https://github.com/npm/libnpmexec/issues/new?template=feature.md&title=%5BFEATURE%5D+%3Ctitle%3E), and the team can triage it and prioritize it into our backlog. However, if the feature is a little more complex, then it's best to create an [RFC](https://en.wikipedia.org/wiki/Request_for_Comments) in our [RFC repository](https://github.com/npm/rfcs). Exactly how to do that is outlined in that repository. If you're not sure _exactly_ how to implement your idea, or don't want to make a document about your idea, then please create an issue on that repository. We consider these RRFC's, or a "Requesting Request For Comment".
-
-## Development Dependencies
-
-You'll need a few things installed in order to update and test **libnpmexec** during development:
-
-
-* [node](https://nodejs.org/) v10 or greater
-
-> We recommend that you have a [node version manager](https://github.com/nvm-sh/nvm) installed if you plan on fixing bugs that might be present in a specific version of node. With a version manager you can easily switch versions of node and test if your changes to the CLI project are working.
-
-* [git](https://git-scm.com/) v2.11+
-
-
-## Dependencies
-<!-- Optional Section -->
diff --git a/workspaces/libnpmexec/SECURITY.md b/workspaces/libnpmexec/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmexec/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmexec/lib/file-exists.js b/workspaces/libnpmexec/lib/file-exists.js
index 05dddc89f..f89cfc217 100644
--- a/workspaces/libnpmexec/lib/file-exists.js
+++ b/workspaces/libnpmexec/lib/file-exists.js
@@ -4,7 +4,7 @@ const stat = promisify(require('fs').stat)
 const walkUp = require('walk-up-path')
 
 const fileExists = (file) => stat(file)
-  .then((stat) => stat.isFile())
+  .then((res) => res.isFile())
   .catch(() => false)
 
 const localFileExists = async (dir, binName, root = '/') => {
diff --git a/workspaces/libnpmexec/lib/index.js b/workspaces/libnpmexec/lib/index.js
index 3c7be1149..81d152a20 100644
--- a/workspaces/libnpmexec/lib/index.js
+++ b/workspaces/libnpmexec/lib/index.js
@@ -119,11 +119,11 @@ const exec = async (opts) => {
     ...flatOptions,
     path,
   })
-  const tree = await localArb.loadActual()
+  const localTree = await localArb.loadActual()
 
   // do we have all the packages in manifest list?
   const needInstall =
-    manis.some(manifest => manifestMissing({ tree, manifest }))
+    manis.some(manifest => manifestMissing({ tree: localTree, manifest }))
 
   if (needInstall) {
     const { npxCache } = flatOptions
diff --git a/workspaces/libnpmexec/package.json b/workspaces/libnpmexec/package.json
index 9af42b299..f40ee4b43 100644
--- a/workspaces/libnpmexec/package.json
+++ b/workspaces/libnpmexec/package.json
@@ -2,17 +2,17 @@
   "name": "libnpmexec",
   "version": "4.0.2",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "main": "lib/index.js",
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "description": "npm exec (npx) programmatic API",
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmexec"
   },
   "keywords": [
@@ -33,16 +33,16 @@
   ],
   "license": "ISC",
   "scripts": {
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "posttest": "npm run lint",
     "test": "tap",
     "snap": "tap",
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "color": true,
@@ -50,7 +50,8 @@
     "files": "test/*.js"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "bin-links": "^3.0.0",
     "tap": "^15.0.6"
   },
@@ -69,6 +70,7 @@
     "walk-up-path": "^1.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmexec/test/index.js b/workspaces/libnpmexec/test/index.js
index e44bc00c7..bd1b67cec 100644
--- a/workspaces/libnpmexec/test/index.js
+++ b/workspaces/libnpmexec/test/index.js
@@ -310,13 +310,13 @@ t.test('run multiple from registry', async t => {
 t.test('no args', async t => {
   const path = t.testdir({})
   const runPath = path
-  const libexec = t.mock('../lib/index.js', {
+  const mockexec = t.mock('../lib/index.js', {
     '../lib/run-script': ({ args }) => {
       t.ok(args.length === 0, 'should call run-script with no args')
     },
   })
 
-  await libexec({
+  await mockexec({
     ...baseOpts,
     path,
     runPath,
@@ -334,7 +334,7 @@ t.test('prompt, accepts', async t => {
   const cache = resolve(testdir, 'cache')
   const npxCache = resolve(testdir, 'npxCache')
   t.test('with clearProgress function', async t => {
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '@npmcli/ci-detect': () => false,
       npmlog: {
         clearProgress () {
@@ -349,7 +349,7 @@ t.test('prompt, accepts', async t => {
       '../lib/no-tty.js': () => false,
     })
 
-    await libexec({
+    await mockexec({
       ...baseOpts,
       args: ['@ruyadorno/create-index'],
       cache,
@@ -365,7 +365,7 @@ t.test('prompt, accepts', async t => {
   })
 
   t.test('without clearProgress function', async t => {
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '@npmcli/ci-detect': () => false,
       read (opts, cb) {
         cb(null, 'y')
@@ -373,7 +373,7 @@ t.test('prompt, accepts', async t => {
       '../lib/no-tty.js': () => false,
     })
 
-    await libexec({
+    await mockexec({
       ...baseOpts,
       args: ['@ruyadorno/create-index'],
       cache,
@@ -400,7 +400,7 @@ t.test('prompt, refuses', async t => {
   const cache = resolve(testdir, 'cache')
   const npxCache = resolve(testdir, 'npxCache')
   t.test('with clearProgress function', async t => {
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '@npmcli/ci-detect': () => false,
       npmlog: {
         clearProgress () {
@@ -415,7 +415,7 @@ t.test('prompt, refuses', async t => {
     })
 
     await t.rejects(
-      libexec({
+      mockexec({
         ...baseOpts,
         args: ['@ruyadorno/create-index'],
         cache,
@@ -439,7 +439,7 @@ t.test('prompt, refuses', async t => {
   })
 
   t.test('without clearProgress function', async t => {
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '@npmcli/ci-detect': () => false,
       read (opts, cb) {
         cb(null, 'n')
@@ -448,7 +448,7 @@ t.test('prompt, refuses', async t => {
     })
 
     await t.rejects(
-      libexec({
+      mockexec({
         ...baseOpts,
         args: ['@ruyadorno/create-index'],
         cache,
@@ -517,11 +517,11 @@ t.test('no prompt if no tty', async t => {
   const runPath = path
   const cache = resolve(testdir, 'cache')
   const npxCache = resolve(testdir, 'npxCache')
-  const libexec = t.mock('../lib/index.js', {
+  const mockexec = t.mock('../lib/index.js', {
     '../lib/no-tty.js': () => true,
   })
 
-  await libexec({
+  await mockexec({
     ...baseOpts,
     args: ['@ruyadorno/create-index'],
     cache,
@@ -546,11 +546,11 @@ t.test('no prompt if CI', async t => {
   const runPath = path
   const cache = resolve(testdir, 'cache')
   const npxCache = resolve(testdir, 'npxCache')
-  const libexec = t.mock('../lib/index.js', {
+  const mockexec = t.mock('../lib/index.js', {
     '@npmcli/ci-detect': () => true,
   })
 
-  await libexec({
+  await mockexec({
     ...baseOpts,
     args: ['@ruyadorno/create-index'],
     cache,
@@ -575,7 +575,7 @@ t.test('no prompt if CI, multiple packages', async t => {
   const runPath = path
   const cache = resolve(testdir, 'cache')
   const npxCache = resolve(testdir, 'npxCache')
-  const libexec = t.mock('../lib/index.js', {
+  const mockexec = t.mock('../lib/index.js', {
     '@npmcli/ci-detect': () => true,
     'proc-log': {
       warn (title, msg) {
@@ -587,7 +587,7 @@ t.test('no prompt if CI, multiple packages', async t => {
     },
   })
 
-  await libexec({
+  await mockexec({
     ...baseOpts,
     call: 'create-index',
     packages: ['@ruyadorno/create-index', '@ruyadorno/create-test'],
@@ -629,41 +629,41 @@ t.test('sane defaults', async t => {
 t.test('scriptShell default value', t => {
   t.test('/bin/sh platforms', t => {
     t.plan(1)
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '../lib/is-windows.js': false,
       '../lib/run-script.js': (opt) => {
         t.equal(opt.scriptShell, 'sh', 'should use expected shell value')
       },
     })
-    libexec({ args: [], runPath: t.testDirName })
+    mockexec({ args: [], runPath: t.testDirName })
   })
 
   t.test('win32 defined ComSpec env var', t => {
     t.plan(1)
     const comspec = process.env.ComSpec
     process.env.ComSpec = 'CMD'
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '../lib/is-windows.js': true,
       '../lib/run-script.js': ({ scriptShell }) => {
         t.equal(scriptShell, 'CMD', 'should use expected ComSpec value')
         process.env.ComSpec = comspec
       },
     })
-    libexec({ args: [], runPath: t.testDirName })
+    mockexec({ args: [], runPath: t.testDirName })
   })
 
   t.test('win32 cmd', t => {
     t.plan(1)
     const comspec = process.env.ComSpec
     process.env.ComSpec = ''
-    const libexec = t.mock('../lib/index.js', {
+    const mockexec = t.mock('../lib/index.js', {
       '../lib/is-windows.js': true,
       '../lib/run-script.js': ({ scriptShell }) => {
         t.equal(scriptShell, 'cmd', 'should use expected cmd default value')
         process.env.ComSpec = comspec
       },
     })
-    libexec({ args: [], runPath: t.testDirName })
+    mockexec({ args: [], runPath: t.testDirName })
   })
 
   t.end()
diff --git a/workspaces/libnpmexec/test/registry/server.js b/workspaces/libnpmexec/test/registry/server.js
index 1db583a93..f35acfdeb 100644
--- a/workspaces/libnpmexec/test/registry/server.js
+++ b/workspaces/libnpmexec/test/registry/server.js
@@ -83,7 +83,7 @@ const startServer = cb => {
               opts.headers.host = opts.host
               opts.path = '/v1/advisories/bulk'
               https.request(opts)
-                .on('response', upstream => handleUpstream(upstream))
+                .on('response', r => handleUpstream(r))
                 .end(Buffer.concat(body))
             } else {
               handleUpstream(upstream)
@@ -195,9 +195,9 @@ const startServer = cb => {
 
           const ct = upstream.headers['content-type']
           const isJson = ct.includes('application/json')
-          const file = isJson ? f + '.json' : f
-          console.error('PROXY', `${req.url} -> ${file} ${ct}`)
-          mkdirp.sync(dirname(file))
+          const proxyFile = isJson ? f + '.json' : f
+          console.error('PROXY', `${req.url} -> ${proxyFile} ${ct}`)
+          mkdirp.sync(dirname(proxyFile))
           const data = []
           res.statusCode = upstream.statusCode
           res.setHeader('content-type', ct)
@@ -207,13 +207,13 @@ const startServer = cb => {
             if (!errorStatus) {
               if (isJson) {
                 const obj = JSON.parse(out.toString())
-                writeFileSync(file, JSON.stringify(obj, 0, 2) + '\n')
+                writeFileSync(proxyFile, JSON.stringify(obj, 0, 2) + '\n')
                 const mrm = require('minify-registry-metadata')
-                const minFile = file.replace(/\.json$/, '.min.json')
+                const minFile = proxyFile.replace(/\.json$/, '.min.json')
                 writeFileSync(minFile, JSON.stringify(mrm(obj), 0, 2) + '\n')
-                console.error('WROTE JSONS', [file, minFile])
+                console.error('WROTE JSONS', [proxyFile, minFile])
               } else {
-                writeFileSync(file, out)
+                writeFileSync(proxyFile, out)
               }
             }
             res.end(out)
diff --git a/workspaces/libnpmfund/.editorconfig b/workspaces/libnpmfund/.editorconfig
deleted file mode 100644
index 0f3bb618c..000000000
--- a/workspaces/libnpmfund/.editorconfig
+++ /dev/null
@@ -1,3 +0,0 @@
-[*.js]
-indent_style = space
-indent_size = 2
diff --git a/workspaces/libnpmfund/.eslintrc.js b/workspaces/libnpmfund/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmfund/.eslintrc.js
+++ b/workspaces/libnpmfund/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmfund/.gitignore b/workspaces/libnpmfund/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmfund/.gitignore
+++ b/workspaces/libnpmfund/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmfund/.npmrc b/workspaces/libnpmfund/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmfund/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmfund/SECURITY.md b/workspaces/libnpmfund/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmfund/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmfund/lib/index.js b/workspaces/libnpmfund/lib/index.js
index a3d2d8223..a53893dc1 100644
--- a/workspaces/libnpmfund/lib/index.js
+++ b/workspaces/libnpmfund/lib/index.js
@@ -91,8 +91,8 @@ function readTree (tree, opts) {
     }
   }
 
-  function getFundingDependencies (tree) {
-    const edges = tree && tree.edgesOut && tree.edgesOut.values()
+  function getFundingDependencies (t) {
+    const edges = t && t.edgesOut && t.edgesOut.values()
     if (!edges) {
       return empty()
     }
diff --git a/workspaces/libnpmfund/package.json b/workspaces/libnpmfund/package.json
index 2abf897ee..99795bf43 100644
--- a/workspaces/libnpmfund/package.json
+++ b/workspaces/libnpmfund/package.json
@@ -3,13 +3,13 @@
   "version": "3.0.1",
   "main": "lib/index.js",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "description": "Programmatic API for npm fund",
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmfund"
   },
   "keywords": [
@@ -32,7 +32,7 @@
   "license": "ISC",
   "scripts": {
     "eslint": "eslint",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "lintfix": "npm run lint -- --fix",
     "posttest": "npm run lint",
     "test": "tap",
@@ -40,23 +40,25 @@
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "postlint": "npm-template-check",
-    "template-copy": "npm-template-copy --force"
+    "postlint": "template-oss-check",
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "tap": "^15.0.9"
   },
   "dependencies": {
     "@npmcli/arborist": "^5.0.0"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmfund/test.js b/workspaces/libnpmfund/test/index.js
index f862f46ce..0a84e62bc 100644
--- a/workspaces/libnpmfund/test.js
+++ b/workspaces/libnpmfund/test/index.js
@@ -6,7 +6,7 @@ const {
   readTree,
   normalizeFunding,
   isValidFunding,
-} = require('./lib/index.js')
+} = require('../lib/index.js')
 const { join } = require('path')
 
 t.test('symlink tree', async (t) => {
@@ -171,7 +171,7 @@ t.test('loading tree from path', async (t) => {
 t.test('no args', async (t) => {
   // will parse data from libnpmfund itself which has *many* fund-listed deps
   const res = await read({
-    path: join(__dirname, '..', '..'),
+    path: join(__dirname, '..', '..', '..'),
   })
   t.ok(
     res.length > 0, // thus length should always be greater than 0
diff --git a/workspaces/libnpmhook/.eslintrc.js b/workspaces/libnpmhook/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmhook/.eslintrc.js
+++ b/workspaces/libnpmhook/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmhook/.gitignore b/workspaces/libnpmhook/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmhook/.gitignore
+++ b/workspaces/libnpmhook/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmhook/.npmrc b/workspaces/libnpmhook/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmhook/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmhook/SECURITY.md b/workspaces/libnpmhook/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmhook/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmhook/package.json b/workspaces/libnpmhook/package.json
index dc18e6867..552bc019a 100644
--- a/workspaces/libnpmhook/package.json
+++ b/workspaces/libnpmhook/package.json
@@ -4,29 +4,29 @@
   "description": "programmatic API for managing npm registry hooks",
   "main": "lib/index.js",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "scripts": {
     "prerelease": "npm t",
     "postrelease": "npm publish && git push --follow-tags",
     "test": "tap",
-    "lint": "eslint '**/*.js'",
-    "postlint": "npm-template-check",
+    "lint": "eslint \"**/*.js\"",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
     "snap": "tap",
     "posttest": "npm run lint",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "check-coverage": true
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmhook"
   },
   "keywords": [
@@ -42,14 +42,16 @@
     "npm-registry-fetch": "^13.0.0"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "nock": "^13.2.4",
     "tap": "^15.1.0"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmorg/.eslintrc.js b/workspaces/libnpmorg/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmorg/.eslintrc.js
+++ b/workspaces/libnpmorg/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmorg/.gitignore b/workspaces/libnpmorg/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmorg/.gitignore
+++ b/workspaces/libnpmorg/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmorg/.npmrc b/workspaces/libnpmorg/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmorg/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmorg/SECURITY.md b/workspaces/libnpmorg/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmorg/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmorg/package.json b/workspaces/libnpmorg/package.json
index e48b6e5ac..9096f799b 100644
--- a/workspaces/libnpmorg/package.json
+++ b/workspaces/libnpmorg/package.json
@@ -17,30 +17,31 @@
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "test": "tap",
     "posttest": "npm run lint",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "snap": "tap",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "tap": {
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "minipass": "^3.1.1",
     "nock": "^13.2.4",
     "tap": "^15.0.0"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmorg"
   },
   "bugs": "https://github.com/npm/libnpmorg/issues",
@@ -50,9 +51,10 @@
     "npm-registry-fetch": "^13.0.0"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmpack/.eslintrc.js b/workspaces/libnpmpack/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmpack/.eslintrc.js
+++ b/workspaces/libnpmpack/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmpack/.gitignore b/workspaces/libnpmpack/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmpack/.gitignore
+++ b/workspaces/libnpmpack/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmpack/.npmrc b/workspaces/libnpmpack/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmpack/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmpack/SECURITY.md b/workspaces/libnpmpack/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmpack/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmpack/package.json b/workspaces/libnpmpack/package.json
index f98f0269b..a76b859d4 100644
--- a/workspaces/libnpmpack/package.json
+++ b/workspaces/libnpmpack/package.json
@@ -8,33 +8,34 @@
     "Claudia Hernández <claudia@npmjs.com>"
   ],
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "license": "ISC",
   "scripts": {
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "test": "tap",
     "posttest": "npm run lint",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "snap": "tap",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "nock": "^13.0.7",
     "tap": "^15.0.0"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmpack"
   },
   "bugs": "https://github.com/npm/libnpmpack/issues",
@@ -45,9 +46,10 @@
     "pacote": "^13.0.5"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmpublish/.eslintrc.js b/workspaces/libnpmpublish/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmpublish/.eslintrc.js
+++ b/workspaces/libnpmpublish/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmpublish/.gitignore b/workspaces/libnpmpublish/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmpublish/.gitignore
+++ b/workspaces/libnpmpublish/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmpublish/.npmrc b/workspaces/libnpmpublish/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmpublish/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmpublish/SECURITY.md b/workspaces/libnpmpublish/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmpublish/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmpublish/package.json b/workspaces/libnpmpublish/package.json
index 48b4c2f91..3828f3579 100644
--- a/workspaces/libnpmpublish/package.json
+++ b/workspaces/libnpmpublish/package.json
@@ -9,28 +9,29 @@
     "Claudia Hernández <claudia@npmjs.com>"
   ],
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "license": "ISC",
   "scripts": {
     "eslint": "eslint",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "lintfix": "npm run lint -- --fix",
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
     "test": "tap",
     "posttest": "npm run lint",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "snap": "tap",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "libnpmpack": "^4.0.0",
     "lodash.clonedeep": "^4.5.0",
     "nock": "^13.2.4",
@@ -38,7 +39,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmpublish"
   },
   "bugs": "https://github.com/npm/cli/issues",
@@ -51,9 +52,10 @@
     "ssri": "^8.0.1"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmsearch/.eslintrc.js b/workspaces/libnpmsearch/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmsearch/.eslintrc.js
+++ b/workspaces/libnpmsearch/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmsearch/.gitignore b/workspaces/libnpmsearch/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmsearch/.gitignore
+++ b/workspaces/libnpmsearch/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmsearch/.npmrc b/workspaces/libnpmsearch/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmsearch/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmsearch/SECURITY.md b/workspaces/libnpmsearch/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmsearch/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmsearch/package.json b/workspaces/libnpmsearch/package.json
index b25fa709f..9d44e4057 100644
--- a/workspaces/libnpmsearch/package.json
+++ b/workspaces/libnpmsearch/package.json
@@ -5,8 +5,8 @@
   "author": "GitHub Inc.",
   "main": "lib/index.js",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "keywords": [
     "npm",
@@ -21,23 +21,24 @@
     "prepublishOnly": "git push origin --follow-tags",
     "posttest": "npm run lint",
     "test": "tap",
-    "lint": "eslint '**/*.js'",
-    "postlint": "npm-template-check",
+    "lint": "eslint \"**/*.js\"",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "snap": "tap",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "nock": "^13.2.4",
     "tap": "^15"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmsearch"
   },
   "bugs": "https://github.com/npm/libnpmsearch/issues",
@@ -46,9 +47,10 @@
     "npm-registry-fetch": "^13.0.0"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmteam/.eslintrc.js b/workspaces/libnpmteam/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmteam/.eslintrc.js
+++ b/workspaces/libnpmteam/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmteam/.github/settings.yml b/workspaces/libnpmteam/.github/settings.yml
deleted file mode 100644
index 1019e26fb..000000000
--- a/workspaces/libnpmteam/.github/settings.yml
+++ /dev/null
@@ -1,2 +0,0 @@
----
-_extends: '.github:npm-cli/settings.yml'
diff --git a/workspaces/libnpmteam/.github/workflows/ci.yml b/workspaces/libnpmteam/.github/workflows/ci.yml
deleted file mode 100644
index c20a298c4..000000000
--- a/workspaces/libnpmteam/.github/workflows/ci.yml
+++ /dev/null
@@ -1,97 +0,0 @@
----
-################################################################################
-# Template - Node CI
-#
-# Location: .github/workflows/{filename}.yml
-#
-# Description:
-#   This contains the basic information to: install dependencies, run tests,
-#   get coverage, and run linting on a nodejs project. This template will run
-#   over the MxN matrix of all operating systems, and all current LTS versions
-#   of NodeJS.
-#
-# Dependencies:
-#   This template assumes that your project is using the `tap` module for
-#   testing. If you're not using this module, then the step that runs your
-#   coverage will need to be adjusted.
-#
-################################################################################
-name: node-ci
-
-on: [push, pull_request]
-
-jobs:
-  build:
-    strategy:
-      fail-fast: false
-      matrix:
-        node-version: [10.x, 12.x, 13.x]
-        os: [ubuntu-latest, windows-latest, macOS-latest]
-
-    runs-on: ${{ matrix.os }}
-
-    steps:
-      # Checkout the repository
-      - uses: actions/checkout@v2
-        # Installs the specific version of Node.js
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v1
-        with:
-          node-version: ${{ matrix.node-version }}
-
-      ################################################################################
-      # Install Dependencies
-      #
-      #   ASSUMPTIONS:
-      #     - The project has a package-lock.json file
-      #
-      #   Simply run the tests for the project.
-      ################################################################################
-      - name: Install dependencies
-        run: npm ci
-
-      ################################################################################
-      # Run Testing
-      #
-      #   ASSUMPTIONS:
-      #     - The project has `tap` as a devDependency
-      #     - There is a script called "test" in the package.json
-      #
-      #   Simply run the tests for the project.
-      ################################################################################
-      - name: Run tests
-        if: github.event_name != 'push' || matrix.node-version != '12.x' || matrix.os != 'ubuntu-latest'
-        run: npm test -- --no-coverage
-
-      ################################################################################
-      # Run coverage check
-      #
-      #   ASSUMPTIONS:
-      #     - The project has `tap` as a devDependency
-      #     - There is a script called "coverage" in the package.json
-      #
-      #   Coverage should only be posted once, we are choosing the latest LTS of
-      #   node, and ubuntu as the matrix point to post coverage from. We limit
-      #   to the 'push' event so that coverage ins't posted twice from the
-      #   pull-request event, and push event (line 3).
-      ################################################################################
-      - name: Run coverage report
-        if: github.event_name == 'push' && matrix.node-version == '12.x' && matrix.os == 'ubuntu-latest'
-        run: npm test
-        env:
-          # The environment variable name is leveraged by `tap`
-          COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }}
-
-      ################################################################################
-      # Run linting
-      #
-      #   ASSUMPTIONS:
-      #     - There is a script called "lint" in the package.json
-      #
-      #   We run linting AFTER we run testing and coverage checks, because if a step
-      #   fails in an GitHub Action, all other steps are not run. We don't want to
-      #   fail to run tests or coverage because of linting. It should be the lowest
-      #   priority of all the steps.
-      ################################################################################
-      - name: Run linter
-        run: npm run lint
diff --git a/workspaces/libnpmteam/.gitignore b/workspaces/libnpmteam/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmteam/.gitignore
+++ b/workspaces/libnpmteam/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmteam/.npmrc b/workspaces/libnpmteam/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmteam/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmteam/SECURITY.md b/workspaces/libnpmteam/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmteam/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmteam/package.json b/workspaces/libnpmteam/package.json
index e7cfc2153..70a6e0a36 100644
--- a/workspaces/libnpmteam/package.json
+++ b/workspaces/libnpmteam/package.json
@@ -9,27 +9,28 @@
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "test": "tap",
     "posttest": "npm run lint",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "snap": "tap",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "nock": "^13.2.4",
     "tap": "^15"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmteam"
   },
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "homepage": "https://npmjs.com/package/libnpmteam",
   "dependencies": {
@@ -37,12 +38,13 @@
     "npm-registry-fetch": "^13.0.0"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "tap": {
     "check-coverage": true
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmversion/.eslintrc.js b/workspaces/libnpmversion/.eslintrc.js
index 022767bc3..0e8ad0071 100644
--- a/workspaces/libnpmversion/.eslintrc.js
+++ b/workspaces/libnpmversion/.eslintrc.js
@@ -1,4 +1,4 @@
-// This file is automatically added by @npmcli/template-oss. Do not edit.
+/* This file is automatically added by @npmcli/template-oss. Do not edit. */
 
 const { readdirSync: readdir } = require('fs')
 
@@ -7,6 +7,7 @@ const localConfigs = readdir(__dirname)
   .map((file) => `./${file}`)
 
 module.exports = {
+  root: true,
   extends: [
     '@npmcli',
     ...localConfigs,
diff --git a/workspaces/libnpmversion/.gitignore b/workspaces/libnpmversion/.gitignore
index 6ed44c72b..617e50ca0 100644
--- a/workspaces/libnpmversion/.gitignore
+++ b/workspaces/libnpmversion/.gitignore
@@ -4,20 +4,18 @@
 /*
 
 # keep these
-!/.commitlintrc.js
-!/.npmrc
-!/.eslintrc*
-!/.github
+!/.eslintrc.local.*
 !**/.gitignore
-!/package.json
-!/docs
-!/bin
-!/lib
+!/docs/
+!/tap-snapshots/
+!/test/
 !/map.js
-!/tap-snapshots
-!/test
-!/scripts
+!/scripts/
 !/README*
 !/LICENSE*
-!/SECURITY*
 !/CHANGELOG*
+!/.eslintrc.js
+!/.gitignore
+!/bin/
+!/lib/
+!/package.json
diff --git a/workspaces/libnpmversion/.npmrc b/workspaces/libnpmversion/.npmrc
deleted file mode 100644
index 878b7ddef..000000000
--- a/workspaces/libnpmversion/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-;This file is automatically added by @npmcli/template-oss. Do not edit.
-
-package-lock=false
diff --git a/workspaces/libnpmversion/SECURITY.md b/workspaces/libnpmversion/SECURITY.md
deleted file mode 100644
index a93106d0c..000000000
--- a/workspaces/libnpmversion/SECURITY.md
+++ /dev/null
@@ -1,3 +0,0 @@
-<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
-
-Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/workspaces/libnpmversion/package.json b/workspaces/libnpmversion/package.json
index ddb56c1cf..980a86bc0 100644
--- a/workspaces/libnpmversion/package.json
+++ b/workspaces/libnpmversion/package.json
@@ -3,35 +3,36 @@
   "version": "3.0.1",
   "main": "lib/index.js",
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "description": "library to do the things that 'npm version' does",
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/cli",
+    "url": "https://github.com/npm/cli.git",
     "directory": "workspaces/libnpmversion"
   },
   "author": "GitHub Inc.",
   "license": "ISC",
   "scripts": {
-    "lint": "eslint '**/*.js'",
+    "lint": "eslint \"**/*.js\"",
     "test": "tap",
     "posttest": "npm run lint",
     "snap": "tap",
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "postlint": "npm-template-check",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "coverage-map": "map.js",
     "check-coverage": true
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.4.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.1",
     "require-inject": "^1.4.4",
     "tap": "^15"
   },
@@ -44,9 +45,10 @@
     "stringify-package": "^1.0.1"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
   },
   "templateOSS": {
-    "version": "2.9.2"
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.1"
   }
 }
diff --git a/workspaces/libnpmversion/test/version.js b/workspaces/libnpmversion/test/version.js
index 19cf7ea0a..2cbd615c5 100644
--- a/workspaces/libnpmversion/test/version.js
+++ b/workspaces/libnpmversion/test/version.js
@@ -11,8 +11,8 @@ const gitMock = {
 const version = requireInject('../lib/version.js', {
   '../lib/enforce-clean.js': async () => true,
   '../lib/write-json.js': async (file, data) => actionLog.push(['write-json', file, data]),
-  '../lib/commit.js': async (version, opts) => actionLog.push(['commit', version, opts]),
-  '../lib/tag.js': async (version, opts) => actionLog.push(['tag', version, opts]),
+  '../lib/commit.js': async (v, opts) => actionLog.push(['commit', v, opts]),
+  '../lib/tag.js': async (v, opts) => actionLog.push(['tag', v, opts]),
   '../lib/retrieve-tag.js': async (opts) => {
     if (/\bnot-git$/.test(opts.path)) {
       throw new Error('not a git dir')