[BUG] Depends on deprecated packages path-is-absolute and read-package-tree

[jsha]

Is there an existing issue for this?

• I have searched the existing issues

This issue exists in the latest npm version

• I am using the latest npm

Current Behavior

Hiya! 👋🏻

When I installed the latest npm, I was surprised to see path-is-absolute among the dependencies. Its npm page says:

This package has been deprecated
This package is no longer relevant as Node.js 0.12 is unmaintained.

On further digging, I found that read-package-tree is also deprecated:

The functionality that this package provided is now in @npmcli/arborist

Here's a quick-and-dirty command I ran to try and figure out where these dependencies came from:

$ rg path-is-absolute -l | grep package.json
node_modules/path-is-absolute/package.json
node_modules/tap/node_modules/path-is-absolute/package.json
node_modules/tap/node_modules/glob/package.json
node_modules/read-package-tree/node_modules/glob/package.json
node_modules/test-exclude/node_modules/glob/package.json
node_modules/tap-mocha-reporter/node_modules/glob/package.json
node_modules/nyc/node_modules/glob/package.json
node_modules/node-gyp/node_modules/glob/package.json
node_modules/rimraf/node_modules/glob/package.json
workspaces/arborist/test/fixtures/install-types/node_modules/glob/package.json
workspaces/arborist/test/fixtures/install-types/node_modules/path-is-absolute/package.json
workspaces/arborist/test/fixtures/global-style/lib/node_modules/rimraf/node_modules/glob/package.json
workspaces/arborist/test/fixtures/global-style/lib/node_modules/rimraf/node_modules/path-is-absolute/package.json
workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/path-is-absolute/package.json
workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/babel-core/package.json
workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/glob/package.json
$ rg read-package-tree -l | grep package.json
node_modules/read-package-tree/package.json
node_modules/licensee/package.json
workspaces/arborist/test/fixtures/root/node_modules/foo/node_modules/express/package.json

I've filed one PR on node-glob and updated one issue on licensee, but I figured I should open an overall issue on npm/cli for the main issue I'm trying to address.

Expected Behavior

No response

Steps To Reproduce

No response

Environment

No response

[ljharb]

What does npm explain path-is-absolute say?

Either way, a package being deprecates is not automatically a problem, and isn't necessarily actionable. A package that's not strictly necessary isn't harmful.

[jsha]

npm explain path-is-absolute

[email protected] bundled
node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/node-gyp/node_modules/glob
    glob@"^7.1.4" from [email protected]
    node_modules/node-gyp
      bundled node-gyp@"^9.0.0" from the root project
      node-gyp@"^9.0.0" from @npmcli/[email protected]
      node_modules/@npmcli/run-script
        bundled @npmcli/run-script@"^3.0.1" from the root project
        @npmcli/run-script@"^3.0.1" from [email protected]
        node_modules/pacote
          bundled pacote@"^13.3.0" from the root project
          pacote@"^13.0.3" from @npmcli/[email protected]
          node_modules/@npmcli/metavuln-calculator
            @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
            workspaces/arborist
          pacote@"^13.0.5" from [email protected]
          workspaces/arborist
          pacote@"^13.0.5" from [email protected]
          workspaces/libnpmdiff
          pacote@"^13.0.5" from [email protected]
          workspaces/libnpmexec
          pacote@"^13.0.5" from [email protected]
          workspaces/libnpmpack
        @npmcli/run-script@"^3.0.0" from [email protected]
        workspaces/arborist
        @npmcli/run-script@"^3.0.0" from [email protected]
        workspaces/libnpmexec
        @npmcli/run-script@"^3.0.0" from [email protected]
        workspaces/libnpmpack
        @npmcli/run-script@"^3.0.0" from [email protected]
        workspaces/libnpmversion
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/nyc/node_modules/glob
    glob@"^7.1.6" from [email protected]
    node_modules/nyc
      nyc@"^15.1.0" from [email protected]
      node_modules/tap
        dev tap@"^16.0.1" from the root project
        dev tap@"^16.0.1" from [email protected]
        workspaces/arborist
        dev tap@"^16.0.1" from [email protected]
        docs
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmaccess
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmdiff
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmexec
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmfund
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmhook
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmorg
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmpack
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmpublish
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmsearch
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmteam
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmversion
        dev tap@"^16.0.1" from [email protected]
        smoke-tests
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/read-package-tree/node_modules/glob
    glob@"^7.1.1" from [email protected]
    node_modules/read-package-tree/node_modules/read-package-json
      read-package-json@"^2.0.0" from [email protected]
      node_modules/read-package-tree
        read-package-tree@"^5.3.1" from [email protected]
        node_modules/licensee
          dev licensee@"^8.2.0" from the root project
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/rimraf/node_modules/glob
    glob@"^7.1.3" from [email protected]
    node_modules/rimraf
      bundled rimraf@"^3.0.2" from the root project
      rimraf@"^3.0.2" from @npmcli/[email protected]
      node_modules/@npmcli/move-file
        @npmcli/move-file@"^2.0.0" from [email protected]
        node_modules/cacache
          bundled cacache@"^16.0.7" from the root project
          cacache@"^16.0.0" from @npmcli/[email protected]
          node_modules/@npmcli/metavuln-calculator
            @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
            workspaces/arborist
          cacache@"^16.0.2" from [email protected]
          node_modules/make-fetch-happen
            bundled make-fetch-happen@"^10.1.3" from the root project
            make-fetch-happen@"^10.0.3" from [email protected]
            node_modules/node-gyp
              bundled node-gyp@"^9.0.0" from the root project
              node-gyp@"^9.0.0" from @npmcli/[email protected]
              node_modules/@npmcli/run-script
                bundled @npmcli/run-script@"^3.0.1" from the root project
                @npmcli/run-script@"^3.0.1" from [email protected]
                node_modules/pacote
                  bundled pacote@"^13.3.0" from the root project
                  pacote@"^13.0.3" from @npmcli/[email protected]
                  node_modules/@npmcli/metavuln-calculator
                    @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
                    workspaces/arborist
                  pacote@"^13.0.5" from [email protected]
                  workspaces/arborist
                  pacote@"^13.0.5" from [email protected]
                  workspaces/libnpmdiff
                  pacote@"^13.0.5" from [email protected]
                  workspaces/libnpmexec
                  pacote@"^13.0.5" from [email protected]
                  workspaces/libnpmpack
                @npmcli/run-script@"^3.0.0" from [email protected]
                workspaces/arborist
                @npmcli/run-script@"^3.0.0" from [email protected]
                workspaces/libnpmexec
                @npmcli/run-script@"^3.0.0" from [email protected]
                workspaces/libnpmpack
                @npmcli/run-script@"^3.0.0" from [email protected]
                workspaces/libnpmversion
            make-fetch-happen@"^10.0.6" from [email protected]
            node_modules/npm-registry-fetch
              bundled npm-registry-fetch@"^13.1.1" from the root project
              npm-registry-fetch@"^13.0.1" from [email protected]
              node_modules/npm-profile
                bundled npm-profile@"^6.0.3" from the root project
              npm-registry-fetch@"^13.0.1" from [email protected]
              node_modules/pacote
                bundled pacote@"^13.3.0" from the root project
                pacote@"^13.0.3" from @npmcli/[email protected]
                node_modules/@npmcli/metavuln-calculator
                  @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
                  workspaces/arborist
                pacote@"^13.0.5" from [email protected]
                workspaces/arborist
                pacote@"^13.0.5" from [email protected]
                workspaces/libnpmdiff
                pacote@"^13.0.5" from [email protected]
                workspaces/libnpmexec
                pacote@"^13.0.5" from [email protected]
                workspaces/libnpmpack
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/arborist
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/libnpmaccess
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/libnpmhook
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/libnpmorg
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/libnpmpublish
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/libnpmsearch
              npm-registry-fetch@"^13.0.0" from [email protected]
              workspaces/libnpmteam
          cacache@"^16.0.0" from [email protected]
          node_modules/pacote
            bundled pacote@"^13.3.0" from the root project
            pacote@"^13.0.3" from @npmcli/[email protected]
            node_modules/@npmcli/metavuln-calculator
              @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
              workspaces/arborist
            pacote@"^13.0.5" from [email protected]
            workspaces/arborist
            pacote@"^13.0.5" from [email protected]
            workspaces/libnpmdiff
            pacote@"^13.0.5" from [email protected]
            workspaces/libnpmexec
            pacote@"^13.0.5" from [email protected]
            workspaces/libnpmpack
          cacache@"^16.0.6" from [email protected]
          workspaces/arborist
        @npmcli/move-file@"^2.0.0" from [email protected]
        workspaces/arborist
      rimraf@"^3.0.0" from [email protected]
      node_modules/bin-links
        bin-links@"^3.0.0" from [email protected]
        workspaces/arborist
        dev bin-links@"^3.0.0" from [email protected]
        workspaces/libnpmexec
      rimraf@"^3.0.2" from [email protected]
      node_modules/cacache
        bundled cacache@"^16.0.7" from the root project
        cacache@"^16.0.0" from @npmcli/[email protected]
        node_modules/@npmcli/metavuln-calculator
          @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
          workspaces/arborist
        cacache@"^16.0.2" from [email protected]
        node_modules/make-fetch-happen
          bundled make-fetch-happen@"^10.1.3" from the root project
          make-fetch-happen@"^10.0.3" from [email protected]
          node_modules/node-gyp
            bundled node-gyp@"^9.0.0" from the root project
            node-gyp@"^9.0.0" from @npmcli/[email protected]
            node_modules/@npmcli/run-script
              bundled @npmcli/run-script@"^3.0.1" from the root project
              @npmcli/run-script@"^3.0.1" from [email protected]
              node_modules/pacote
                bundled pacote@"^13.3.0" from the root project
                pacote@"^13.0.3" from @npmcli/[email protected]
                node_modules/@npmcli/metavuln-calculator
                  @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
                  workspaces/arborist
                pacote@"^13.0.5" from [email protected]
                workspaces/arborist
                pacote@"^13.0.5" from [email protected]
                workspaces/libnpmdiff
                pacote@"^13.0.5" from [email protected]
                workspaces/libnpmexec
                pacote@"^13.0.5" from [email protected]
                workspaces/libnpmpack
              @npmcli/run-script@"^3.0.0" from [email protected]
              workspaces/arborist
              @npmcli/run-script@"^3.0.0" from [email protected]
              workspaces/libnpmexec
              @npmcli/run-script@"^3.0.0" from [email protected]
              workspaces/libnpmpack
              @npmcli/run-script@"^3.0.0" from [email protected]
              workspaces/libnpmversion
          make-fetch-happen@"^10.0.6" from [email protected]
          node_modules/npm-registry-fetch
            bundled npm-registry-fetch@"^13.1.1" from the root project
            npm-registry-fetch@"^13.0.1" from [email protected]
            node_modules/npm-profile
              bundled npm-profile@"^6.0.3" from the root project
            npm-registry-fetch@"^13.0.1" from [email protected]
            node_modules/pacote
              bundled pacote@"^13.3.0" from the root project
              pacote@"^13.0.3" from @npmcli/[email protected]
              node_modules/@npmcli/metavuln-calculator
                @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
                workspaces/arborist
              pacote@"^13.0.5" from [email protected]
              workspaces/arborist
              pacote@"^13.0.5" from [email protected]
              workspaces/libnpmdiff
              pacote@"^13.0.5" from [email protected]
              workspaces/libnpmexec
              pacote@"^13.0.5" from [email protected]
              workspaces/libnpmpack
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/arborist
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/libnpmaccess
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/libnpmhook
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/libnpmorg
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/libnpmpublish
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/libnpmsearch
            npm-registry-fetch@"^13.0.0" from [email protected]
            workspaces/libnpmteam
        cacache@"^16.0.0" from [email protected]
        node_modules/pacote
          bundled pacote@"^13.3.0" from the root project
          pacote@"^13.0.3" from @npmcli/[email protected]
          node_modules/@npmcli/metavuln-calculator
            @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
            workspaces/arborist
          pacote@"^13.0.5" from [email protected]
          workspaces/arborist
          pacote@"^13.0.5" from [email protected]
          workspaces/libnpmdiff
          pacote@"^13.0.5" from [email protected]
          workspaces/libnpmexec
          pacote@"^13.0.5" from [email protected]
          workspaces/libnpmpack
        cacache@"^16.0.6" from [email protected]
        workspaces/arborist
      rimraf@"^3.0.2" from [email protected]
      node_modules/flat-cache
        flat-cache@"^3.0.4" from [email protected]
        node_modules/file-entry-cache
          file-entry-cache@"^6.0.1" from [email protected]
          node_modules/eslint
            peer eslint@">= 8" from @npmcli/[email protected]
            node_modules/@npmcli/eslint-config
              dev @npmcli/eslint-config@"^3.0.1" from the root project
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/arborist
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              docs
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmaccess
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmdiff
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmexec
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmfund
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmhook
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmorg
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmpack
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmpublish
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmsearch
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmteam
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              workspaces/libnpmversion
              dev @npmcli/eslint-config@"^3.0.1" from [email protected]
              smoke-tests
            peer eslint@">=4.19.1" from [email protected]
            node_modules/eslint-plugin-es
              eslint-plugin-es@"^3.0.0" from [email protected]
              node_modules/eslint-plugin-node
                peer eslint-plugin-node@"^11.1.0" from @npmcli/[email protected]
                node_modules/@npmcli/eslint-config
                  dev @npmcli/eslint-config@"^3.0.1" from the root project
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/arborist
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  docs
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmaccess
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmdiff
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmexec
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmfund
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmhook
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmorg
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmpack
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmpublish
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmsearch
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmteam
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  workspaces/libnpmversion
                  dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                  smoke-tests
            peer eslint@">=5.16.0" from [email protected]
            node_modules/eslint-plugin-node
              peer eslint-plugin-node@"^11.1.0" from @npmcli/[email protected]
              node_modules/@npmcli/eslint-config
                dev @npmcli/eslint-config@"^3.0.1" from the root project
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/arborist
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                docs
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmaccess
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmdiff
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmexec
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmfund
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmhook
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmorg
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmpack
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmpublish
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmsearch
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmteam
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                workspaces/libnpmversion
                dev @npmcli/eslint-config@"^3.0.1" from [email protected]
                smoke-tests
            peer eslint@">=5" from [email protected]
            node_modules/eslint/node_modules/eslint-utils
              eslint-utils@"^3.0.0" from [email protected]
      rimraf@"^3.0.0" from [email protected]
      node_modules/istanbul-lib-processinfo
        istanbul-lib-processinfo@"^2.0.2" from [email protected]
        node_modules/nyc
          nyc@"^15.1.0" from [email protected]
          node_modules/tap
            dev tap@"^16.0.1" from the root project
            dev tap@"^16.0.1" from [email protected]
            workspaces/arborist
            dev tap@"^16.0.1" from [email protected]
            docs
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmaccess
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmdiff
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmexec
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmfund
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmhook
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmorg
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmpack
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmpublish
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmsearch
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmteam
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmversion
            dev tap@"^16.0.1" from [email protected]
            smoke-tests
        istanbul-lib-processinfo@"^2.0.2" from [email protected]
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from [email protected]
          workspaces/arborist
          dev tap@"^16.0.1" from [email protected]
          docs
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmexec
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmfund
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmhook
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmorg
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpack
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmteam
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmversion
          dev tap@"^16.0.1" from [email protected]
          smoke-tests
      rimraf@"^3.0.2" from [email protected]
      node_modules/node-gyp
        bundled node-gyp@"^9.0.0" from the root project
        node-gyp@"^9.0.0" from @npmcli/[email protected]
        node_modules/@npmcli/run-script
          bundled @npmcli/run-script@"^3.0.1" from the root project
          @npmcli/run-script@"^3.0.1" from [email protected]
          node_modules/pacote
            bundled pacote@"^13.3.0" from the root project
            pacote@"^13.0.3" from @npmcli/[email protected]
            node_modules/@npmcli/metavuln-calculator
              @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
              workspaces/arborist
            pacote@"^13.0.5" from [email protected]
            workspaces/arborist
            pacote@"^13.0.5" from [email protected]
            workspaces/libnpmdiff
            pacote@"^13.0.5" from [email protected]
            workspaces/libnpmexec
            pacote@"^13.0.5" from [email protected]
            workspaces/libnpmpack
          @npmcli/run-script@"^3.0.0" from [email protected]
          workspaces/arborist
          @npmcli/run-script@"^3.0.0" from [email protected]
          workspaces/libnpmexec
          @npmcli/run-script@"^3.0.0" from [email protected]
          workspaces/libnpmpack
          @npmcli/run-script@"^3.0.0" from [email protected]
          workspaces/libnpmversion
      rimraf@"^3.0.0" from [email protected]
      node_modules/nyc
        nyc@"^15.1.0" from [email protected]
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from [email protected]
          workspaces/arborist
          dev tap@"^16.0.1" from [email protected]
          docs
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmexec
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmfund
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmhook
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmorg
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpack
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmteam
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmversion
          dev tap@"^16.0.1" from [email protected]
          smoke-tests
      rimraf@"^3.0.2" from [email protected]
      node_modules/pacote
        bundled pacote@"^13.3.0" from the root project
        pacote@"^13.0.3" from @npmcli/[email protected]
        node_modules/@npmcli/metavuln-calculator
          @npmcli/metavuln-calculator@"^3.0.1" from [email protected]
          workspaces/arborist
        pacote@"^13.0.5" from [email protected]
        workspaces/arborist
        pacote@"^13.0.5" from [email protected]
        workspaces/libnpmdiff
        pacote@"^13.0.5" from [email protected]
        workspaces/libnpmexec
        pacote@"^13.0.5" from [email protected]
        workspaces/libnpmpack
      rimraf@"^3.0.0" from [email protected]
      node_modules/spawn-wrap
        spawn-wrap@"^2.0.0" from [email protected]
        node_modules/nyc
          nyc@"^15.1.0" from [email protected]
          node_modules/tap
            dev tap@"^16.0.1" from the root project
            dev tap@"^16.0.1" from [email protected]
            workspaces/arborist
            dev tap@"^16.0.1" from [email protected]
            docs
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmaccess
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmdiff
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmexec
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmfund
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmhook
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmorg
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmpack
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmpublish
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmsearch
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmteam
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmversion
            dev tap@"^16.0.1" from [email protected]
            smoke-tests
      rimraf@"^3.0.2" from [email protected]
      workspaces/arborist
      dev rimraf@"^3.0.2" from [email protected]
      smoke-tests
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/tap-mocha-reporter/node_modules/glob
    glob@"^7.0.5" from [email protected]
    node_modules/tap-mocha-reporter
      tap-mocha-reporter@"^5.0.3" from [email protected]
      node_modules/tap
        dev tap@"^16.0.1" from the root project
        dev tap@"^16.0.1" from [email protected]
        workspaces/arborist
        dev tap@"^16.0.1" from [email protected]
        docs
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmaccess
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmdiff
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmexec
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmfund
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmhook
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmorg
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmpack
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmpublish
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmsearch
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmteam
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmversion
        dev tap@"^16.0.1" from [email protected]
        smoke-tests
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/test-exclude/node_modules/glob
    glob@"^7.1.4" from [email protected]
    node_modules/test-exclude
      test-exclude@"^6.0.0" from [email protected]
      node_modules/nyc
        nyc@"^15.1.0" from [email protected]
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from [email protected]
          workspaces/arborist
          dev tap@"^16.0.1" from [email protected]
          docs
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmexec
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmfund
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmhook
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmorg
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpack
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmteam
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmversion
          dev tap@"^16.0.1" from [email protected]
          smoke-tests

[email protected] dev bundled
node_modules/tap/node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from [email protected]
  node_modules/tap/node_modules/glob
    glob@"^7.1.6" from [email protected]
    node_modules/tap
      dev tap@"^16.0.1" from the root project
      dev tap@"^16.0.1" from [email protected]
      workspaces/arborist
      dev tap@"^16.0.1" from [email protected]
      docs
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmaccess
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmdiff
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmexec
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmfund
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmhook
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmorg
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmpack
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmpublish
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmsearch
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmteam
      dev tap@"^16.0.1" from [email protected]
      workspaces/libnpmversion
      dev tap@"^16.0.1" from [email protected]
      smoke-tests
    glob@"^7.1.3" from [email protected]
    node_modules/tap/node_modules/rimraf
      rimraf@"^3.0.0" from [email protected]
      node_modules/tap
        dev tap@"^16.0.1" from the root project
        dev tap@"^16.0.1" from [email protected]
        workspaces/arborist
        dev tap@"^16.0.1" from [email protected]
        docs
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmaccess
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmdiff
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmexec
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmfund
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmhook
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmorg
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmpack
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmpublish
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmsearch
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmteam
        dev tap@"^16.0.1" from [email protected]
        workspaces/libnpmversion
        dev tap@"^16.0.1" from [email protected]
        smoke-tests
      rimraf@"^3.0.0" from @isaacs/[email protected]
      node_modules/tap/node_modules/@isaacs/import-jsx
        bundled @isaacs/import-jsx@"*" from [email protected]
        node_modules/tap
          dev tap@"^16.0.1" from the root project
          dev tap@"^16.0.1" from [email protected]
          workspaces/arborist
          dev tap@"^16.0.1" from [email protected]
          docs
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmaccess
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmdiff
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmexec
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmfund
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmhook
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmorg
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpack
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmpublish
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmsearch
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmteam
          dev tap@"^16.0.1" from [email protected]
          workspaces/libnpmversion
          dev tap@"^16.0.1" from [email protected]
          smoke-tests
        @isaacs/import-jsx@"^4.0.1" from [email protected]
        node_modules/tap/node_modules/treport
          bundled treport@"*" from [email protected]
          node_modules/tap
            dev tap@"^16.0.1" from the root project
            dev tap@"^16.0.1" from [email protected]
            workspaces/arborist
            dev tap@"^16.0.1" from [email protected]
            docs
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmaccess
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmdiff
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmexec
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmfund
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmhook
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmorg
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmpack
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmpublish
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmsearch
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmteam
            dev tap@"^16.0.1" from [email protected]
            workspaces/libnpmversion
            dev tap@"^16.0.1" from [email protected]
            smoke-tests

Shorter, with a grep:

$ npm explain path-is-absolute | grep path-is-absolute
[email protected] bundled
node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from [email protected]
  path-is-absolute@"^1.0.0" from [email protected]
  path-is-absolute@"^1.0.0" from [email protected]
  path-is-absolute@"^1.0.0" from [email protected]
  path-is-absolute@"^1.0.0" from [email protected]
  path-is-absolute@"^1.0.0" from [email protected]
[email protected] dev bundled
node_modules/tap/node_modules/path-is-absolute
  path-is-absolute@"^1.0.0" from [email protected]

[ljharb]

Sounds like it's a direct dev dep, and also from glob, so your glob PR (once released) would solve most of it, and there's at least one usage directly inside the cli as well that'd need to be removed.