@sitecore/sc-contenthub-blok 1.0.17 → 1.0.27

package/node_modules/resolve/.github/INCIDENT_RESPONSE_PROCESS.md

@@ -0,0 +1,119 @@
+# Incident Response Process for **resolve**
+
+## Reporting a Vulnerability
+
+We take the security of **resolve** very seriously. If you believe you’ve found a security vulnerability, please inform us responsibly through coordinated disclosure.
+
+### How to Report
+
+> **Do not** report security vulnerabilities through public GitHub issues, discussions, or social media.
+
+Instead, please use one of these secure channels:
+
+1. **GitHub Security Advisories**
+   Use the **Report a vulnerability** button in the Security tab of the [browserify/resolve repository](https://github.com/browserify/resolve).
+
+2. **Email**
+   Follow the posted [Security Policy](https://github.com/browserify/resolve/security/policy).
+
+### What to Include
+
+**Required Information:**
+- Brief description of the vulnerability type
+- Affected version(s) and components
+- Steps to reproduce the issue
+- Impact assessment (what an attacker could achieve)
+- Confirm the issue is not present in test files (in other words, only via the official entry points in `exports`)
+
+**Helpful Additional Details:**
+- Full paths of affected source files
+- Specific commit or branch where the issue exists
+- Required configuration to reproduce
+- Proof-of-concept code (if available)
+- Suggested mitigation or fix
+
+## Our Response Process
+
+**Timeline Commitments:**
+- **Initial acknowledgment**: Within 24 hours
+- **Detailed response**: Within 3 business days
+- **Status updates**: Every 7 days until resolved
+- **Resolution target**: 90 days for most issues
+
+**What We’ll Do:**
+1. Acknowledge your report and assign a tracking ID
+2. Assess the vulnerability and determine severity
+3. Develop and test a fix
+4. Coordinate disclosure timeline with you
+5. Release a security update and publish an advisory and CVE
+6. Credit you in our security advisory (if desired)
+
+## Disclosure Policy
+
+- **Coordinated disclosure**: We’ll work with you on timing
+- **Typical timeline**: 90 days from report to public disclosure
+- **Early disclosure**: If actively exploited
+- **Delayed disclosure**: For complex issues
+
+## Scope
+
+**In Scope:**
+- **resolve** package (all supported versions)
+- Official examples and documentation
+- Core resolution APIs
+- Dependencies with direct security implications
+
+**Out of Scope:**
+- Third-party wrappers or extensions
+- Bundler-specific integrations
+- Social engineering or physical attacks
+- Theoretical vulnerabilities without practical exploitation
+- Issues in non-production files
+
+## Security Measures
+
+**Our Commitments:**
+- Regular vulnerability scanning via `npm audit`
+- Automated security checks in CI/CD (GitHub Actions)
+- Secure coding practices and mandatory code review
+- Prompt patch releases for critical issues
+
+**User Responsibilities:**
+- Keep **resolve** updated
+- Monitor dependency vulnerabilities
+- Follow secure configuration guidelines for module resolution
+
+## Legal Safe Harbor
+
+**We will NOT:**
+- Initiate legal action
+- Contact law enforcement
+- Suspend or terminate your access
+
+**You must:**
+- Only test against your own installations
+- Not access, modify, or delete user data
+- Not degrade service availability
+- Not publicly disclose before coordinated disclosure
+- Act in good faith
+
+## Recognition
+
+- **Advisory Credits**: Credit in GitHub Security Advisories (unless anonymous)
+
+## Security Updates
+
+**Stay Informed:**
+- Subscribe to npm updates for **resolve**
+- Enable GitHub Security Advisory notifications
+
+**Update Process:**
+- Patch releases (e.g., 1.22.10 → 1.22.11)
+- Out-of-band releases for critical issues
+- Advisories via GitHub Security Advisories
+
+## Contact Information
+
+- **Security reports**: Security tab of [browserify/resolve](https://github.com/browserify/resolve/security)
+- **General inquiries**: GitHub Discussions or Issues
+

package/node_modules/resolve/.github/THREAT_MODEL.md

@@ -0,0 +1,74 @@
+## Threat Model for resolve (module path resolution library)
+
+### 1. Library Overview
+
+- **Library Name:** resolve
+- **Brief Description:** Implements Node.js `require.resolve()` algorithm for synchronous and asynchronous file path resolution. Used to locate modules and files in Node.js projects.
+- **Key Public APIs/Functions:** `resolve.sync()` / `resolve/sync`, `resolve()` / `resolve/async`
+
+### 2. Define Scope
+
+This threat model focuses on the core path resolution algorithm, including filesystem interaction, option handling, and cache management.
+
+### 3. Conceptual System Diagram
+
+```
+Caller Application → resolve(id, options) → Resolution Algorithm → File System
+                           │
+                           └→ Options Handling
+                           └→ Cache System
+```
+
+**Trust Boundaries:**
+- **Input module IDs:** May come from untrusted sources (user input, configuration)
+- **Filesystem access:** The library interacts with the filesystem to resolve paths
+- **Options:** Provided by the caller
+- **Cache:** Used to improve performance, but could be a vector for tampering or information disclosure if not handled securely
+
+### 4. Identify Assets
+
+- **Integrity of resolution output:** Ensure correct and safe file path matching.
+- **Confidentiality of configuration:** Prevent sensitive path information from being leaked.
+- **Availability/performance for host application:** Prevent crashes or resource exhaustion.
+- **Security of host application:** Prevent path traversal or unintended filesystem access.
+- **Reputation of library:** Maintain trust by avoiding supply chain attacks and vulnerabilities[1][3][4].
+
+### 5. Identify Threats
+
+| Component / API / Interaction                       | S  | T  | R  | I  | D  | E  |
+|-----------------------------------------------------|----|----|----|----|----|----|
+| Public API Call (`resolve/async`, `resolve/sync`)   | ✓  | ✓  | –  | ✓  | –  | –  |
+| Filesystem Access                                   | –  | ✓  | –  | ✓  | ✓  | –  |
+| Options Handling                                    | ✓  | ✓  | –  | ✓  | –  | –  |
+| Cache System                                        | –  | ✓  | –  | ✓  | –  | –  |
+
+**Key Threats:**
+- **Spoofing:** Malicious module IDs mimicking legitimate packages, or spoofing configuration options[1].
+- **Tampering:** Caller-provided paths altering resolution order, or cache tampering leading to incorrect results[1][4].
+- **Information Disclosure:** Error messages revealing filesystem structure or sensitive paths[1].
+- **Denial of Service:** Recursive or excessive resolution exhausting filesystem handles or causing application crashes[1].
+- **Path Traversal:** Malicious input allowing access to files outside the intended directory[4].
+
+### 6. Mitigation/Countermeasures
+
+| Threat Identified                          | Proposed Mitigation |
+|--------------------------------------------|---------------------|
+| Spoofing (malicious module IDs/config)     | Sanitize input IDs; validate against known patterns; restrict `basedir` to app-controlled paths[1][4]. |
+| Tampering (path traversal, cache)          | Validate input IDs for directory escapes; secure cache reads/writes; restrict cache to trusted sources[1][4]. |
+| Information Disclosure (error messages)    | Generic "not found" errors without internal paths; avoid exposing sensitive configuration in errors[1]. |
+| Denial of Service (resource exhaustion)    | Limit recursive resolution depth; implement timeout; monitor for excessive filesystem operations[1]. |
+
+### 7. Risk Ranking
+
+- **High:** Path traversal via malicious IDs (if not properly mitigated)
+- **Medium:** Cache tampering or spoofing (if cache is not secured)
+- **Low:** Information disclosure in errors (if error handling is generic)
+
+### 8. Next Steps & Review
+
+1. **Implement input sanitization for module IDs and configuration.**
+2. **Add resolution depth limiting and timeout.**
+3. **Audit cache handling for race conditions and tampering.**
+4. **Regularly review dependencies for vulnerabilities.**
+5. **Keep documentation and threat model up to date.**
+6. **Monitor for new threats as the ecosystem and library evolve[1][3].**

package/node_modules/resolve/SECURITY.md

@@ -1,3 +1,13 @@
 # Security
 
-Please email [@ljharb](https://github.com/ljharb) or see https://tidelift.com/security if you have a potential security vulnerability to report.
+Please [file a private vulnerability report](https://github.com/browserify/resolve/security/advisories/new),
+or email [@ljharb](https://github.com/ljharb),
+if you have a potential security vulnerability to report.
+
+## Incident Response
+
+See our [Incident Response Process](.github/INCIDENT_RESPONSE_PROCESS.md).
+
+## Threat Model
+
+See [THREAT_MODEL.md](./THREAT_MODEL.md).

package/node_modules/resolve/eslint.config.mjs

@@ -0,0 +1,80 @@
+import ljharb from '@ljharb/eslint-config/flat';
+
+export default [
+	...ljharb,
+	{
+		ignores: [
+			'test/resolver/malformed_package_json/package.json',
+			'test/list-exports/**',
+		],
+	},
+	{
+		rules: {
+			'array-bracket-newline': 'off',
+			complexity: 'off',
+			'consistent-return': 'off',
+			curly: 'off',
+			'dot-notation': ['error', { allowKeywords: true }],
+			'func-name-matching': 'off',
+			'func-style': 'off',
+			'global-require': 'warn',
+			'id-length': ['error', { min: 1, max: 40 }],
+			'max-depth': 'off',
+			'max-lines-per-function': 'off',
+			'max-lines': 'off',
+			'max-nested-callbacks': 'off',
+			'max-params': 'off',
+			'max-statements-per-line': ['error', { max: 2 }],
+			'max-statements': 'off',
+			'multiline-comment-style': 'off',
+			'no-magic-numbers': 'off',
+			'no-shadow': 'off',
+			'no-use-before-define': 'off',
+			'sort-keys': 'off',
+			strict: 'off',
+		},
+	},
+	{
+		files: ['**/*.js'],
+		rules: {
+			indent: ['error', 4],
+		},
+	},
+	{
+		files: ['bin/**'],
+		rules: {
+			'no-process-exit': 'off',
+		},
+	},
+	{
+		files: ['example/**'],
+		rules: {
+			'no-console': 'off',
+		},
+	},
+	{
+		files: ['test/resolver/nested_symlinks/mylib/*.js'],
+		rules: {
+			'no-throw-literal': 'off',
+		},
+	},
+	{
+		files: ['test/**'],
+		languageOptions: {
+			ecmaVersion: 5,
+			parserOptions: {
+				allowReserved: false,
+			},
+		},
+		rules: {
+			'dot-notation': ['error', { allowPattern: 'throws' }],
+			'max-lines': 'off',
+			'max-lines-per-function': 'off',
+			'no-unused-vars': ['error', {
+				vars: 'all',
+				args: 'none',
+				caughtErrors: 'none',
+			}],
+		},
+	},
+];

package/node_modules/resolve/lib/async.js

@@ -5,16 +5,23 @@ var caller = require('./caller');
 var nodeModulesPaths = require('./node-modules-paths');
 var normalizeOptions = require('./normalize-options');
 var isCore = require('is-core-module');
+var $Error = require('es-errors');
+var $TypeError = require('es-errors/type');
 
 var realpathFS = process.platform !== 'win32' && fs.realpath && typeof fs.realpath.native === 'function' ? fs.realpath.native : fs.realpath;
 
+var relativePathRegex = /^(?:\.\.?(?:\/|$)|\/|([A-Za-z]:)?[/\\])/;
+var windowsDriveRegex = /^\w:[/\\]*$/;
+var nodeModulesRegex = /[/\\]node_modules[/\\]*$/;
+
 var homedir = getHomedir();
-var defaultPaths = function () {
+function defaultPaths() {
+    if (!homedir) return [];
     return [
         path.join(homedir, '.node_modules'),
         path.join(homedir, '.node_libraries')
     ];
-};
+}
 
 var defaultIsFile = function isFile(file, cb) {
     fs.stat(file, function (err, stat) {
@@ -43,15 +50,15 @@ var defaultRealpath = function realpath(x, cb) {
     });
 };
 
-var maybeRealpath = function maybeRealpath(realpath, x, opts, cb) {
+function maybeRealpath(realpath, x, opts, cb) {
     if (opts && opts.preserveSymlinks === false) {
         realpath(x, cb);
     } else {
         cb(null, x);
     }
-};
+}
 
-var defaultReadPackage = function defaultReadPackage(readFile, pkgfile, cb) {
+function defaultReadPackage(readFile, pkgfile, cb) {
     readFile(pkgfile, function (readFileErr, body) {
         if (readFileErr) cb(readFileErr);
         else {
@@ -63,15 +70,15 @@ var defaultReadPackage = function defaultReadPackage(readFile, pkgfile, cb) {
             }
         }
     });
-};
+}
 
-var getPackageCandidates = function getPackageCandidates(x, start, opts) {
+function getPackageCandidates(x, start, opts) {
     var dirs = nodeModulesPaths(start, opts, x);
     for (var i = 0; i < dirs.length; i++) {
         dirs[i] = path.join(dirs[i], x);
     }
     return dirs;
-};
+}
 
 module.exports = function resolve(x, options, callback) {
     var cb = callback;
@@ -81,7 +88,7 @@ module.exports = function resolve(x, options, callback) {
         opts = {};
     }
     if (typeof x !== 'string') {
-        var err = new TypeError('Path must be a string.');
+        var err = new $TypeError('Path must be a string.');
         return process.nextTick(function () {
             cb(err);
         });
@@ -95,7 +102,7 @@ module.exports = function resolve(x, options, callback) {
     var realpath = opts.realpath || defaultRealpath;
     var readPackage = opts.readPackage || defaultReadPackage;
     if (opts.readFile && opts.readPackage) {
-        var conflictErr = new TypeError('`readFile` and `readPackage` are mutually exclusive.');
+        var conflictErr = new $TypeError('`readFile` and `readPackage` are mutually exclusive.');
         return process.nextTick(function () {
             cb(conflictErr);
         });
@@ -124,10 +131,10 @@ module.exports = function resolve(x, options, callback) {
 
     var res;
     function init(basedir) {
-        if ((/^(?:\.\.?(?:\/|$)|\/|([A-Za-z]:)?[/\\])/).test(x)) {
+        if (relativePathRegex.test(x)) {
             res = path.resolve(basedir, x);
             if (x === '.' || x === '..' || x.slice(-1) === '/') res += '/';
-            if ((/\/$/).test(x) && res === basedir) {
+            if (x.slice(-1) === '/' && res === basedir) {
                 loadAsDirectory(res, opts.package, onfile);
             } else loadAsFile(res, opts.package, onfile);
         } else if (includeCoreModules && isCore(x)) {
@@ -143,7 +150,7 @@ module.exports = function resolve(x, options, callback) {
                     }
                 });
             } else {
-                var moduleError = new Error("Cannot find module '" + x + "' from '" + parent + "'");
+                var moduleError = new $Error("Cannot find module '" + x + "' from '" + parent + "'");
                 moduleError.code = 'MODULE_NOT_FOUND';
                 cb(moduleError);
             }
@@ -164,7 +171,7 @@ module.exports = function resolve(x, options, callback) {
                     }
                 });
             } else {
-                var moduleError = new Error("Cannot find module '" + x + "' from '" + parent + "'");
+                var moduleError = new $Error("Cannot find module '" + x + "' from '" + parent + "'");
                 moduleError.code = 'MODULE_NOT_FOUND';
                 cb(moduleError);
             }
@@ -198,7 +205,7 @@ module.exports = function resolve(x, options, callback) {
                     var rel = rfile.slice(0, rfile.length - exts[0].length);
                     var r = opts.pathFilter(pkg, x, rel);
                     if (r) return load(
-                        [''].concat(extensions.slice()),
+                        [''].concat(extensions),
                         path.resolve(dir, r),
                         pkg
                     );
@@ -215,10 +222,10 @@ module.exports = function resolve(x, options, callback) {
 
     function loadpkg(dir, cb) {
         if (dir === '' || dir === '/') return cb(null);
-        if (process.platform === 'win32' && (/^\w:[/\\]*$/).test(dir)) {
+        if (process.platform === 'win32' && windowsDriveRegex.test(dir)) {
             return cb(null);
         }
-        if ((/[/\\]node_modules[/\\]*$/).test(dir)) return cb(null);
+        if (nodeModulesRegex.test(dir)) return cb(null);
 
         maybeRealpath(realpath, dir, opts, function (unwrapErr, pkgdir) {
             if (unwrapErr) return loadpkg(path.dirname(dir), cb);
@@ -228,7 +235,7 @@ module.exports = function resolve(x, options, callback) {
                 if (!ex) return loadpkg(path.dirname(dir), cb);
 
                 readPackage(readFile, pkgfile, function (err, pkgParam) {
-                    if (err) cb(err);
+                    if (err) { return cb(err); }
 
                     var pkg = pkgParam;
 
@@ -267,7 +274,7 @@ module.exports = function resolve(x, options, callback) {
 
                     if (pkg && pkg.main) {
                         if (typeof pkg.main !== 'string') {
-                            var mainError = new TypeError('package “' + pkg.name + '” `main` must be a string');
+                            var mainError = new $TypeError('package “' + pkg.name + '” `main` must be a string');
                             mainError.code = 'INVALID_PACKAGE_MAIN';
                             return cb(mainError);
                         }

package/node_modules/resolve/lib/caller.js

@@ -1,8 +1,12 @@
+'use strict';
+
+var $Error = require('es-errors');
+
 module.exports = function () {
     // see https://code.google.com/p/v8/wiki/JavaScriptStackTraceApi
-    var origPrepareStackTrace = Error.prepareStackTrace;
-    Error.prepareStackTrace = function (_, stack) { return stack; };
-    var stack = (new Error()).stack;
-    Error.prepareStackTrace = origPrepareStackTrace;
+    var origPrepareStackTrace = $Error.prepareStackTrace;
+    $Error.prepareStackTrace = function (_, stack) { return stack; };
+    var stack = (new $Error()).stack;
+    $Error.prepareStackTrace = origPrepareStackTrace;
     return stack[2].getFileName();
 };

package/node_modules/resolve/lib/core.json

@@ -89,7 +89,9 @@
 	"node:readline/promises": ">= 17",
 	"repl": true,
 	"node:repl": [">= 14.18 && < 15", ">= 16"],
+	"node:sea": [">= 20.12 && < 21", ">= 21.7"],
 	"smalloc": ">= 0.11.5 && < 3",
+	"node:sqlite": [">= 22.13 && < 23", ">= 23.4"],
 	"_stream_duplex": ">= 0.9.4",
 	"node:_stream_duplex": [">= 14.18 && < 15", ">= 16"],
 	"_stream_transform": ">= 0.9.4",
@@ -116,6 +118,8 @@
 	"node:sys": [">= 14.18 && < 15", ">= 16"],
 	"test/reporters": ">= 19.9 && < 20.2",
 	"node:test/reporters": [">= 18.17 && < 19", ">= 19.9", ">= 20"],
+	"test/mock_loader": ">= 22.3 && < 22.7",
+	"node:test/mock_loader": ">= 22.3 && < 22.7",
 	"node:test": [">= 16.17 && < 17", ">= 18"],
 	"timers": true,
 	"node:timers": [">= 14.18 && < 15", ">= 16"],

package/node_modules/resolve/lib/homedir.js

@@ -9,7 +9,14 @@ module.exports = os.homedir || function homedir() {
     var user = process.env.LOGNAME || process.env.USER || process.env.LNAME || process.env.USERNAME;
 
     if (process.platform === 'win32') {
-        return process.env.USERPROFILE || process.env.HOMEDRIVE + process.env.HOMEPATH || home || null;
+        return process.env.USERPROFILE
+            || (
+                process.env.HOMEDRIVE
+                && process.env.HOMEPATH
+                && (process.env.HOMEDRIVE + process.env.HOMEPATH)
+            )
+            || home
+            || null;
     }
 
     if (process.platform === 'darwin') {

package/node_modules/resolve/lib/node-modules-paths.js

@@ -1,11 +1,14 @@
 var path = require('path');
 var parse = path.parse || require('path-parse'); // eslint-disable-line global-require
 
-var getNodeModulesDirs = function getNodeModulesDirs(absoluteStart, modules) {
+var driveLetterRegex = /^([A-Za-z]:)/;
+var uncPathRegex = /^\\\\/;
+
+function getNodeModulesDirs(absoluteStart, modules) {
     var prefix = '/';
-    if ((/^([A-Za-z]:)/).test(absoluteStart)) {
+    if (driveLetterRegex.test(absoluteStart)) {
         prefix = '';
-    } else if ((/^\\\\/).test(absoluteStart)) {
+    } else if (uncPathRegex.test(absoluteStart)) {
         prefix = '\\\\';
     }
 
@@ -21,7 +24,7 @@ var getNodeModulesDirs = function getNodeModulesDirs(absoluteStart, modules) {
             return path.resolve(prefix, aPath, moduleDir);
         }));
     }, []);
-};
+}
 
 module.exports = function nodeModulesPaths(start, opts, request) {
     var modules = opts && opts.moduleDirectory

package/node_modules/resolve/lib/sync.js

@@ -1,6 +1,9 @@
 var isCore = require('is-core-module');
 var fs = require('fs');
 var path = require('path');
+var $Error = require('es-errors');
+var $TypeError = require('es-errors/type');
+
 var getHomedir = require('./homedir');
 var caller = require('./caller');
 var nodeModulesPaths = require('./node-modules-paths');
@@ -8,13 +11,18 @@ var normalizeOptions = require('./normalize-options');
 
 var realpathFS = process.platform !== 'win32' && fs.realpathSync && typeof fs.realpathSync.native === 'function' ? fs.realpathSync.native : fs.realpathSync;
 
+var relativePathRegex = /^(?:\.\.?(?:\/|$)|\/|([A-Za-z]:)?[/\\])/;
+var windowsDriveRegex = /^\w:[/\\]*$/;
+var nodeModulesRegex = /[/\\]node_modules[/\\]*$/;
+
 var homedir = getHomedir();
-var defaultPaths = function () {
+function defaultPaths() {
+    if (!homedir) return [];
     return [
         path.join(homedir, '.node_modules'),
         path.join(homedir, '.node_libraries')
     ];
-};
+}
 
 var defaultIsFile = function isFile(file) {
     try {
@@ -47,32 +55,32 @@ var defaultRealpathSync = function realpathSync(x) {
     return x;
 };
 
-var maybeRealpathSync = function maybeRealpathSync(realpathSync, x, opts) {
+function maybeRealpathSync(realpathSync, x, opts) {
     if (opts && opts.preserveSymlinks === false) {
         return realpathSync(x);
     }
     return x;
-};
+}
 
-var defaultReadPackageSync = function defaultReadPackageSync(readFileSync, pkgfile) {
+function defaultReadPackageSync(readFileSync, pkgfile) {
     var body = readFileSync(pkgfile);
     try {
         var pkg = JSON.parse(body);
         return pkg;
     } catch (jsonErr) {}
-};
+}
 
-var getPackageCandidates = function getPackageCandidates(x, start, opts) {
+function getPackageCandidates(x, start, opts) {
     var dirs = nodeModulesPaths(start, opts, x);
     for (var i = 0; i < dirs.length; i++) {
         dirs[i] = path.join(dirs[i], x);
     }
     return dirs;
-};
+}
 
 module.exports = function resolveSync(x, options) {
     if (typeof x !== 'string') {
-        throw new TypeError('Path must be a string.');
+        throw new $TypeError('Path must be a string.');
     }
     var opts = normalizeOptions(x, options);
 
@@ -82,7 +90,7 @@ module.exports = function resolveSync(x, options) {
     var realpathSync = opts.realpathSync || defaultRealpathSync;
     var readPackageSync = opts.readPackageSync || defaultReadPackageSync;
     if (opts.readFileSync && opts.readPackageSync) {
-        throw new TypeError('`readFileSync` and `readPackageSync` are mutually exclusive.');
+        throw new $TypeError('`readFileSync` and `readPackageSync` are mutually exclusive.');
     }
     var packageIterator = opts.packageIterator;
 
@@ -96,7 +104,7 @@ module.exports = function resolveSync(x, options) {
     // ensure that `basedir` is an absolute path at this point, resolving against the process' current working directory
     var absoluteStart = maybeRealpathSync(realpathSync, path.resolve(basedir), opts);
 
-    if ((/^(?:\.\.?(?:\/|$)|\/|([A-Za-z]:)?[/\\])/).test(x)) {
+    if (relativePathRegex.test(x)) {
         var res = path.resolve(absoluteStart, x);
         if (x === '.' || x === '..' || x.slice(-1) === '/') res += '/';
         var m = loadAsFileSync(res) || loadAsDirectorySync(res);
@@ -108,7 +116,7 @@ module.exports = function resolveSync(x, options) {
         if (n) return maybeRealpathSync(realpathSync, n, opts);
     }
 
-    var err = new Error("Cannot find module '" + x + "' from '" + parent + "'");
+    var err = new $Error("Cannot find module '" + x + "' from '" + parent + "'");
     err.code = 'MODULE_NOT_FOUND';
     throw err;
 
@@ -137,10 +145,10 @@ module.exports = function resolveSync(x, options) {
 
     function loadpkg(dir) {
         if (dir === '' || dir === '/') return;
-        if (process.platform === 'win32' && (/^\w:[/\\]*$/).test(dir)) {
+        if (process.platform === 'win32' && windowsDriveRegex.test(dir)) {
             return;
         }
-        if ((/[/\\]node_modules[/\\]*$/).test(dir)) return;
+        if (nodeModulesRegex.test(dir)) return;
 
         var pkgfile = path.join(maybeRealpathSync(realpathSync, dir, opts), 'package.json');
 
@@ -172,7 +180,7 @@ module.exports = function resolveSync(x, options) {
 
             if (pkg && pkg.main) {
                 if (typeof pkg.main !== 'string') {
-                    var mainError = new TypeError('package “' + pkg.name + '” `main` must be a string');
+                    var mainError = new $TypeError('package “' + pkg.name + '” `main` must be a string');
                     mainError.code = 'INVALID_PACKAGE_MAIN';
                     throw mainError;
                 }