@surgeapi/node 0.30.0 → 0.32.0

package/oidc/node_modules/npm/man/man1/npx.1

@@ -1,156 +0,0 @@
-.TH "NPX" "1" "October 2025" "NPM@11.6.2" ""
-.SH "NAME"
-\fBnpx\fR - Run a command from a local or remote npm package
-.SS "Synopsis"
-.P
-.RS 2
-.nf
-npx -- <pkg>\[lB]@<version>\[rB] \[lB]args...\[rB]
-npx --package=<pkg>\[lB]@<version>\[rB] -- <cmd> \[lB]args...\[rB]
-npx -c '<cmd> \[lB]args...\[rB]'
-npx --package=foo -c '<cmd> \[lB]args...\[rB]'
-.fi
-.RE
-.SS "Description"
-.P
-This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via \fBnpm run\fR.
-.P
-Whatever packages are specified by the \fB--package\fR option will be provided in the \fBPATH\fR of the executed command, along with any locally installed package executables. The \fB--package\fR option may be specified multiple times, to execute the supplied command in an environment where all specified packages are available.
-.P
-If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the \fBPATH\fR environment variable in the executed process. A prompt is printed (which can be suppressed by providing either \fB--yes\fR or \fB--no\fR).
-.P
-Package names provided without a specifier will be matched with whatever version exists in the local project. Package names with a specifier will only be considered a match if they have the exact same name and version as the local dependency.
-.P
-If no \fB-c\fR or \fB--call\fR option is provided, then the positional arguments are used to generate the command string. If no \fB--package\fR options are provided, then npm will attempt to determine the executable name from the package specifier provided as the first positional argument according to the following heuristic:
-.RS 0
-.IP \(bu 4
-If the package has a single entry in its \fBbin\fR field in \fBpackage.json\fR, or if all entries are aliases of the same command, then that command will be used.
-.IP \(bu 4
-If the package has multiple \fBbin\fR entries, and one of them matches the unscoped portion of the \fBname\fR field, then that command will be used.
-.IP \(bu 4
-If this does not result in exactly one option (either because there are no bin entries, or none of them match the \fBname\fR of the package), then \fBnpm exec\fR exits with an error.
-.RE 0
-
-.P
-To run a binary \fIother than\fR the named binary, specify one or more \fB--package\fR options, which will prevent npm from inferring the package from the first command argument.
-.SS "\fBnpx\fR vs \fBnpm exec\fR"
-.P
-When run via the \fBnpx\fR binary, all flags and options \fImust\fR be set prior to any positional arguments. When run via \fBnpm exec\fR, a double-hyphen \fB--\fR flag can be used to suppress npm's parsing of switches and options that should be sent to the executed command.
-.P
-For example:
-.P
-.RS 2
-.nf
-$ npx foo@latest bar --package=@npmcli/foo
-.fi
-.RE
-.P
-In this case, npm will resolve the \fBfoo\fR package name, and run the following command:
-.P
-.RS 2
-.nf
-$ foo bar --package=@npmcli/foo
-.fi
-.RE
-.P
-Since the \fB--package\fR option comes \fIafter\fR the positional arguments, it is treated as an argument to the executed command.
-.P
-In contrast, due to npm's argument parsing logic, running this command is different:
-.P
-.RS 2
-.nf
-$ npm exec foo@latest bar --package=@npmcli/foo
-.fi
-.RE
-.P
-In this case, npm will parse the \fB--package\fR option first, resolving the \fB@npmcli/foo\fR package. Then, it will execute the following command in that context:
-.P
-.RS 2
-.nf
-$ foo@latest bar
-.fi
-.RE
-.P
-The double-hyphen character is recommended to explicitly tell npm to stop parsing command line options and switches. The following command would thus be equivalent to the \fBnpx\fR command above:
-.P
-.RS 2
-.nf
-$ npm exec -- foo@latest bar --package=@npmcli/foo
-.fi
-.RE
-.SS "Examples"
-.P
-Run the version of \fBtap\fR in the local dependencies, with the provided arguments:
-.P
-.RS 2
-.nf
-$ npm exec -- tap --bail test/foo.js
-$ npx tap --bail test/foo.js
-.fi
-.RE
-.P
-Run a command \fIother than\fR the command whose name matches the package name by specifying a \fB--package\fR option:
-.P
-.RS 2
-.nf
-$ npm exec --package=foo -- bar --bar-argument
-# ~ or ~
-$ npx --package=foo bar --bar-argument
-.fi
-.RE
-.P
-Run an arbitrary shell script, in the context of the current project:
-.P
-.RS 2
-.nf
-$ npm x -c 'eslint && say "hooray, lint passed"'
-$ npx -c 'eslint && say "hooray, lint passed"'
-.fi
-.RE
-.SS "Compatibility with Older npx Versions"
-.P
-The \fBnpx\fR binary was rewritten in npm v7.0.0, and the standalone \fBnpx\fR package deprecated at that time. \fBnpx\fR uses the \fBnpm exec\fR command instead of a separate argument parser and install process, with some affordances to maintain backwards compatibility with the arguments it accepted in previous versions.
-.P
-This resulted in some shifts in its functionality:
-.RS 0
-.IP \(bu 4
-Any \fBnpm\fR config value may be provided.
-.IP \(bu 4
-To prevent security and user-experience problems from mistyping package names, \fBnpx\fR prompts before installing anything. Suppress this prompt with the \fB-y\fR or \fB--yes\fR option.
-.IP \(bu 4
-The \fB--no-install\fR option is deprecated, and will be converted to \fB--no\fR.
-.IP \(bu 4
-Shell fallback functionality is removed, as it is not advisable.
-.IP \(bu 4
-The \fB-p\fR argument is a shorthand for \fB--parseable\fR in npm, but shorthand for \fB--package\fR in npx. This is maintained, but only for the \fBnpx\fR executable.
-.IP \(bu 4
-The \fB--ignore-existing\fR option is removed. Locally installed bins are always present in the executed process \fBPATH\fR.
-.IP \(bu 4
-The \fB--npm\fR option is removed. \fBnpx\fR will always use the \fBnpm\fR it ships with.
-.IP \(bu 4
-The \fB--node-arg\fR and \fB-n\fR options have been removed. Use \fB\[rs]fBNODE_OPTIONS\[rs]fR\fR \fI\(lahttps://nodejs.org/api/cli.html#node_optionsoptions\(ra\fR instead: e.g., \fBNODE_OPTIONS="--trace-warnings --trace-exit" npx foo --random=true\fR
-.IP \(bu 4
-The \fB--always-spawn\fR option is redundant, and thus removed.
-.IP \(bu 4
-The \fB--shell\fR option is replaced with \fB--script-shell\fR, but maintained in the \fBnpx\fR executable for backwards compatibility.
-.RE 0
-
-.SS "See Also"
-.RS 0
-.IP \(bu 4
-npm help run
-.IP \(bu 4
-npm help scripts
-.IP \(bu 4
-npm help test
-.IP \(bu 4
-npm help start
-.IP \(bu 4
-npm help restart
-.IP \(bu 4
-npm help stop
-.IP \(bu 4
-npm help config
-.IP \(bu 4
-npm help exec
-.RE 0

package/oidc/node_modules/npm/man/man5/folders.5

@@ -1,147 +0,0 @@
-.TH "FOLDERS" "5" "October 2025" "NPM@11.6.2" ""
-.SH "NAME"
-\fBfolders\fR - Folder Structures Used by npm
-.SS "Description"
-.P
-npm puts various things on your computer. That's its job.
-.P
-This document will tell you what it puts where.
-.SS "tl;dr"
-.RS 0
-.IP \(bu 4
-Local install (default): puts stuff in \fB./node_modules\fR of the current package root.
-.IP \(bu 4
-Global install (with \fB-g\fR): puts stuff in /usr/local or wherever node is installed.
-.IP \(bu 4
-Install it \fBlocally\fR if you're going to \fBrequire()\fR it.
-.IP \(bu 4
-Install it \fBglobally\fR if you're going to run it on the command line.
-.IP \(bu 4
-If you need both, then install it in both places, or use \fBnpm link\fR.
-.RE 0
-
-.SS "prefix Configuration"
-.P
-The \fB\[rs]fBprefix\[rs]fR config\fR \fI\(la/using-npm/config#prefix\(ra\fR defaults to the location where node is installed. On most systems, this is \fB/usr/local\fR. On Windows, it's \fB%AppData%\[rs]npm\fR. On Unix systems, it's one level up, since node is typically installed at \fB{prefix}/bin/node\fR rather than \fB{prefix}/node.exe\fR.
-.P
-When the \fBglobal\fR flag is set, npm installs things into this prefix. When it is not set, it uses the root of the current package, or the current working directory if not in a package already.
-.SS "Node Modules"
-.P
-Packages are dropped into the \fBnode_modules\fR folder under the \fBprefix\fR. When installing locally, this means that you can \fBrequire("packagename")\fR to load its main module, or \fBrequire("packagename/lib/path/to/sub/module")\fR to load other modules.
-.P
-Global installs on Unix systems go to \fB{prefix}/lib/node_modules\fR. Global installs on Windows go to \fB{prefix}/node_modules\fR (that is, no \fBlib\fR folder.)
-.P
-Scoped packages are installed the same way, except they are grouped together in a sub-folder of the relevant \fBnode_modules\fR folder with the name of that scope prefix by the @ symbol, e.g. \fBnpm install @myorg/package\fR would place the package in \fB{prefix}/node_modules/@myorg/package\fR. See npm help scope for more details.
-.P
-If you wish to \fBrequire()\fR a package, then install it locally.
-.SS "Executables"
-.P
-When in global mode, executables are linked into \fB{prefix}/bin\fR on Unix, or directly into \fB{prefix}\fR on Windows. Ensure that path is in your terminal's \fBPATH\fR environment to run them.
-.P
-When in local mode, executables are linked into \fB./node_modules/.bin\fR so that they can be made available to scripts run through npm. (For example, so that a test runner will be in the path when you run \fBnpm test\fR.)
-.SS "Man Pages"
-.P
-When in global mode, man pages are linked into \fB{prefix}/share/man\fR.
-.P
-When in local mode, man pages are not installed.
-.P
-Man pages are not installed on Windows systems.
-.SS "Cache"
-.P
-See npm help cache. Cache files are stored in \fB~/.npm\fR on Posix, or \fB%LocalAppData%/npm-cache\fR on Windows.
-.P
-This is controlled by the \fB\[rs]fBcache\[rs]fR config\fR \fI\(la/using-npm/config#cache\(ra\fR param.
-.SS "More Information"
-.P
-When installing locally, npm first tries to find an appropriate \fBprefix\fR folder. This is so that \fBnpm install foo@1.2.3\fR will install to the sensible root of your package, even if you happen to have \fBcd\fRed into some other folder.
-.P
-Starting at the $PWD, npm will walk up the folder tree checking for a folder that contains either a \fBpackage.json\fR file, or a \fBnode_modules\fR folder. If such a thing is found, then that is treated as the effective "current directory" for the purpose of running npm commands. (This behavior is inspired by and similar to git's .git-folder seeking logic when running git commands in a working dir.)
-.P
-If no package root is found, then the current folder is used.
-.P
-When you run \fBnpm install foo@1.2.3\fR, then the package is loaded into the cache, and then unpacked into \fB./node_modules/foo\fR. Then, any of foo's dependencies are similarly unpacked into \fB./node_modules/foo/node_modules/...\fR.
-.P
-Any bin files are symlinked to \fB./node_modules/.bin/\fR, so that they may be found by npm scripts when necessary.
-.SS "Global Installation"
-.P
-If the \fB\[rs]fBglobal\[rs]fR config\fR \fI\(la/using-npm/config#global\(ra\fR is set to true, then npm will install packages "globally".
-.P
-For global installation, packages are installed roughly the same way, but using the folders described above.
-.SS "Cycles, Conflicts, and Folder Parsimony"
-.P
-Cycles are handled using the property of node's module system that it walks up the directories looking for \fBnode_modules\fR folders. So, at every stage, if a package is already installed in an ancestor \fBnode_modules\fR folder, then it is not installed at the current location.
-.P
-Consider the case above, where \fBfoo -> bar -> baz\fR. Imagine if, in addition to that, baz depended on bar, so you'd have: \fBfoo -> bar -> baz -> bar -> baz ...\fR. However, since the folder structure is: \fBfoo/node_modules/bar/node_modules/baz\fR, there's no need to put another copy of bar into \fB.../baz/node_modules\fR, since when baz calls \fBrequire("bar")\fR, it will get the copy that is installed in \fBfoo/node_modules/bar\fR.
-.P
-This shortcut is only used if the exact same version would be installed in multiple nested \fBnode_modules\fR folders. It is still possible to have \fBa/node_modules/b/node_modules/a\fR if the two "a" packages are different versions. However, without repeating the exact same package multiple times, an infinite regress will always be prevented.
-.P
-Another optimization can be made by installing dependencies at the highest level possible, below the localized "target" folder (hoisting). Since version 3, npm hoists dependencies by default.
-.SS "Example"
-.P
-Consider this dependency graph:
-.P
-.RS 2
-.nf
-foo
-+-- blerg@1.2.5
-+-- bar@1.2.3
-|   +-- blerg@1.x (latest=1.3.7)
-|   +-- baz@2.x
-|   |   `-- quux@3.x
-|   |       `-- bar@1.2.3 (cycle)
-|   `-- asdf@*
-`-- baz@1.2.3
-    `-- quux@3.x
-        `-- bar
-.fi
-.RE
-.P
-In this case, we might expect a folder structure like this (with all dependencies hoisted to the highest level possible):
-.P
-.RS 2
-.nf
-foo
-+-- node_modules
-    +-- blerg (1.2.5) <---\[lB]A\[rB]
-    +-- bar (1.2.3) <---\[lB]B\[rB]
-    |   +-- node_modules
-    |       +-- baz (2.0.2) <---\[lB]C\[rB]
-    +-- asdf (2.3.4)
-    +-- baz (1.2.3) <---\[lB]D\[rB]
-    +-- quux (3.2.0) <---\[lB]E\[rB]
-.fi
-.RE
-.P
-Since foo depends directly on \fBbar@1.2.3\fR and \fBbaz@1.2.3\fR, those are installed in foo's \fBnode_modules\fR folder.
-.P
-Even though the latest copy of blerg is 1.3.7, foo has a specific dependency on version 1.2.5. So, that gets installed at \[lB]A\[rB]. Since the parent installation of blerg satisfies bar's dependency on \fBblerg@1.x\fR, it does not install another copy under \[lB]B\[rB].
-.P
-Bar \[lB]B\[rB] also has dependencies on baz and asdf. Because it depends on \fBbaz@2.x\fR, it cannot re-use the \fBbaz@1.2.3\fR installed in the parent \fBnode_modules\fR folder \[lB]D\[rB], and must install its own copy \[lB]C\[rB]. In order to minimize duplication, npm hoists dependencies to the top level by default, so asdf is installed under \[lB]A\[rB].
-.P
-Underneath bar, the \fBbaz -> quux -> bar\fR dependency creates a cycle. However, because bar is already in quux's ancestry \[lB]B\[rB], it does not unpack another copy of bar into that folder. Likewise, quux's \[lB]E\[rB] folder tree is empty, because its dependency on bar is satisfied by the parent folder copy installed at \[lB]B\[rB].
-.P
-For a graphical breakdown of what is installed where, use \fBnpm ls\fR.
-.SS "Publishing"
-.P
-Upon publishing, npm will look in the \fBnode_modules\fR folder. If any of the items there are not in the \fBbundleDependencies\fR array, then they will not be included in the package tarball.
-.P
-This allows a package maintainer to install all of their dependencies (and dev dependencies) locally, but only re-publish those items that cannot be found elsewhere. See \fB\[rs]fBpackage.json\[rs]fR\fR \fI\(la/configuring-npm/package-json\(ra\fR for more information.
-.SS "See also"
-.RS 0
-.IP \(bu 4
-\fBpackage.json\fR \fI\(la/configuring-npm/package-json\(ra\fR
-.IP \(bu 4
-npm help install
-.IP \(bu 4
-npm help pack
-.IP \(bu 4
-npm help cache
-.IP \(bu 4
-npm help config
-.IP \(bu 4
-npm help npmrc
-.IP \(bu 4
-npm help config
-.IP \(bu 4
-npm help publish
-.RE 0

package/oidc/node_modules/npm/man/man5/install.5

@@ -1,54 +0,0 @@
-.TH "INSTALL" "5" "October 2025" "NPM@11.6.2" ""
-.SH "NAME"
-\fBinstall\fR - Download and install node and npm
-.SS "Description"
-.P
-To publish and install packages to and from the public npm registry, you must install Node.js and the npm command line interface using either a Node version manager or a Node installer. \fBWe strongly recommend using a Node version manager to install Node.js and npm.\fR We do not recommend using a Node installer, since the Node installation process installs npm in a directory with local permissions and can cause permissions errors when you run npm packages globally.
-.SS "Overview"
-.RS 0
-.IP \(bu 4
-\fI(Checking your version of npm and Node.js)\fR
-.IP \(bu 4
-\fI(Using a Node version manager to install Node.js and npm)\fR
-.IP \(bu 4
-\fI(Using a Node installer to install Node.js and npm)\fR
-.RE 0
-
-.SS "Checking your version of npm and Node.js"
-.P
-To see if you already have Node.js and npm installed and check the installed version, run the following commands:
-.P
-.RS 2
-.nf
-node -v
-npm -v
-.fi
-.RE
-.SS "Using a Node version manager to install Node.js and npm"
-.P
-Node version managers allow you to install and switch between multiple versions of Node.js and npm on your system so you can test your applications on multiple versions of npm to ensure they work for users on different versions. You can \fBsearch for them on GitHub\fR \fI\(lahttps://github.com/search?q=node+version+manager+archived%3Afalse&type=repositories&ref=advsearch\(ra\fR.
-.SS "Using a Node installer to install Node.js and npm"
-.P
-If you are unable to use a Node version manager, you can use a Node installer to install both Node.js and npm on your system.
-.RS 0
-.IP \(bu 4
-\fBNode.js installer\fR \fI\(lahttps://nodejs.org/en/download/\(ra\fR
-.IP \(bu 4
-\fBNodeSource installer\fR \fI\(lahttps://github.com/nodesource/distributions\(ra\fR. If you use Linux, we recommend that you use a NodeSource installer.
-.RE 0
-
-.SS "macOS or Windows Node installers"
-.P
-If you're using macOS or Windows, use one of the installers from the \fBNode.js download page\fR \fI\(lahttps://nodejs.org/en/download/\(ra\fR. Be sure to install the version labeled \fBLTS\fR. Other versions have not yet been tested with npm.
-.SS "Linux or other operating systems Node installers"
-.P
-If you're using Linux or another operating system, use one of the following installers:
-.RS 0
-.IP \(bu 4
-\fBNodeSource installer\fR \fI\(lahttps://github.com/nodesource/distributions\(ra\fR (recommended)
-.IP \(bu 4
-One of the installers on the \fBNode.js download page\fR \fI\(lahttps://nodejs.org/en/download/\(ra\fR
-.RE 0
-
-.P
-Or see \fBthis page\fR \fI\(lahttps://nodejs.org/en/download/package-manager/\(ra\fR to install npm for Linux in the way many Linux developers prefer.

package/oidc/node_modules/npm/man/man5/npm-global.5

@@ -1,147 +0,0 @@
-.TH "FOLDERS" "5" "October 2025" "NPM@11.6.2" ""
-.SH "NAME"
-\fBfolders\fR - Folder Structures Used by npm
-.SS "Description"
-.P
-npm puts various things on your computer. That's its job.
-.P
-This document will tell you what it puts where.
-.SS "tl;dr"
-.RS 0
-.IP \(bu 4
-Local install (default): puts stuff in \fB./node_modules\fR of the current package root.
-.IP \(bu 4
-Global install (with \fB-g\fR): puts stuff in /usr/local or wherever node is installed.
-.IP \(bu 4
-Install it \fBlocally\fR if you're going to \fBrequire()\fR it.
-.IP \(bu 4
-Install it \fBglobally\fR if you're going to run it on the command line.
-.IP \(bu 4
-If you need both, then install it in both places, or use \fBnpm link\fR.
-.RE 0
-
-.SS "prefix Configuration"
-.P
-The \fB\[rs]fBprefix\[rs]fR config\fR \fI\(la/using-npm/config#prefix\(ra\fR defaults to the location where node is installed. On most systems, this is \fB/usr/local\fR. On Windows, it's \fB%AppData%\[rs]npm\fR. On Unix systems, it's one level up, since node is typically installed at \fB{prefix}/bin/node\fR rather than \fB{prefix}/node.exe\fR.
-.P
-When the \fBglobal\fR flag is set, npm installs things into this prefix. When it is not set, it uses the root of the current package, or the current working directory if not in a package already.
-.SS "Node Modules"
-.P
-Packages are dropped into the \fBnode_modules\fR folder under the \fBprefix\fR. When installing locally, this means that you can \fBrequire("packagename")\fR to load its main module, or \fBrequire("packagename/lib/path/to/sub/module")\fR to load other modules.
-.P
-Global installs on Unix systems go to \fB{prefix}/lib/node_modules\fR. Global installs on Windows go to \fB{prefix}/node_modules\fR (that is, no \fBlib\fR folder.)
-.P
-Scoped packages are installed the same way, except they are grouped together in a sub-folder of the relevant \fBnode_modules\fR folder with the name of that scope prefix by the @ symbol, e.g. \fBnpm install @myorg/package\fR would place the package in \fB{prefix}/node_modules/@myorg/package\fR. See npm help scope for more details.
-.P
-If you wish to \fBrequire()\fR a package, then install it locally.
-.SS "Executables"
-.P
-When in global mode, executables are linked into \fB{prefix}/bin\fR on Unix, or directly into \fB{prefix}\fR on Windows. Ensure that path is in your terminal's \fBPATH\fR environment to run them.
-.P
-When in local mode, executables are linked into \fB./node_modules/.bin\fR so that they can be made available to scripts run through npm. (For example, so that a test runner will be in the path when you run \fBnpm test\fR.)
-.SS "Man Pages"
-.P
-When in global mode, man pages are linked into \fB{prefix}/share/man\fR.
-.P
-When in local mode, man pages are not installed.
-.P
-Man pages are not installed on Windows systems.
-.SS "Cache"
-.P
-See npm help cache. Cache files are stored in \fB~/.npm\fR on Posix, or \fB%LocalAppData%/npm-cache\fR on Windows.
-.P
-This is controlled by the \fB\[rs]fBcache\[rs]fR config\fR \fI\(la/using-npm/config#cache\(ra\fR param.
-.SS "More Information"
-.P
-When installing locally, npm first tries to find an appropriate \fBprefix\fR folder. This is so that \fBnpm install foo@1.2.3\fR will install to the sensible root of your package, even if you happen to have \fBcd\fRed into some other folder.
-.P
-Starting at the $PWD, npm will walk up the folder tree checking for a folder that contains either a \fBpackage.json\fR file, or a \fBnode_modules\fR folder. If such a thing is found, then that is treated as the effective "current directory" for the purpose of running npm commands. (This behavior is inspired by and similar to git's .git-folder seeking logic when running git commands in a working dir.)
-.P
-If no package root is found, then the current folder is used.
-.P
-When you run \fBnpm install foo@1.2.3\fR, then the package is loaded into the cache, and then unpacked into \fB./node_modules/foo\fR. Then, any of foo's dependencies are similarly unpacked into \fB./node_modules/foo/node_modules/...\fR.
-.P
-Any bin files are symlinked to \fB./node_modules/.bin/\fR, so that they may be found by npm scripts when necessary.
-.SS "Global Installation"
-.P
-If the \fB\[rs]fBglobal\[rs]fR config\fR \fI\(la/using-npm/config#global\(ra\fR is set to true, then npm will install packages "globally".
-.P
-For global installation, packages are installed roughly the same way, but using the folders described above.
-.SS "Cycles, Conflicts, and Folder Parsimony"
-.P
-Cycles are handled using the property of node's module system that it walks up the directories looking for \fBnode_modules\fR folders. So, at every stage, if a package is already installed in an ancestor \fBnode_modules\fR folder, then it is not installed at the current location.
-.P
-Consider the case above, where \fBfoo -> bar -> baz\fR. Imagine if, in addition to that, baz depended on bar, so you'd have: \fBfoo -> bar -> baz -> bar -> baz ...\fR. However, since the folder structure is: \fBfoo/node_modules/bar/node_modules/baz\fR, there's no need to put another copy of bar into \fB.../baz/node_modules\fR, since when baz calls \fBrequire("bar")\fR, it will get the copy that is installed in \fBfoo/node_modules/bar\fR.
-.P
-This shortcut is only used if the exact same version would be installed in multiple nested \fBnode_modules\fR folders. It is still possible to have \fBa/node_modules/b/node_modules/a\fR if the two "a" packages are different versions. However, without repeating the exact same package multiple times, an infinite regress will always be prevented.
-.P
-Another optimization can be made by installing dependencies at the highest level possible, below the localized "target" folder (hoisting). Since version 3, npm hoists dependencies by default.
-.SS "Example"
-.P
-Consider this dependency graph:
-.P
-.RS 2
-.nf
-foo
-+-- blerg@1.2.5
-+-- bar@1.2.3
-|   +-- blerg@1.x (latest=1.3.7)
-|   +-- baz@2.x
-|   |   `-- quux@3.x
-|   |       `-- bar@1.2.3 (cycle)
-|   `-- asdf@*
-`-- baz@1.2.3
-    `-- quux@3.x
-        `-- bar
-.fi
-.RE
-.P
-In this case, we might expect a folder structure like this (with all dependencies hoisted to the highest level possible):
-.P
-.RS 2
-.nf
-foo
-+-- node_modules
-    +-- blerg (1.2.5) <---\[lB]A\[rB]
-    +-- bar (1.2.3) <---\[lB]B\[rB]
-    |   +-- node_modules
-    |       +-- baz (2.0.2) <---\[lB]C\[rB]
-    +-- asdf (2.3.4)
-    +-- baz (1.2.3) <---\[lB]D\[rB]
-    +-- quux (3.2.0) <---\[lB]E\[rB]
-.fi
-.RE
-.P
-Since foo depends directly on \fBbar@1.2.3\fR and \fBbaz@1.2.3\fR, those are installed in foo's \fBnode_modules\fR folder.
-.P
-Even though the latest copy of blerg is 1.3.7, foo has a specific dependency on version 1.2.5. So, that gets installed at \[lB]A\[rB]. Since the parent installation of blerg satisfies bar's dependency on \fBblerg@1.x\fR, it does not install another copy under \[lB]B\[rB].
-.P
-Bar \[lB]B\[rB] also has dependencies on baz and asdf. Because it depends on \fBbaz@2.x\fR, it cannot re-use the \fBbaz@1.2.3\fR installed in the parent \fBnode_modules\fR folder \[lB]D\[rB], and must install its own copy \[lB]C\[rB]. In order to minimize duplication, npm hoists dependencies to the top level by default, so asdf is installed under \[lB]A\[rB].
-.P
-Underneath bar, the \fBbaz -> quux -> bar\fR dependency creates a cycle. However, because bar is already in quux's ancestry \[lB]B\[rB], it does not unpack another copy of bar into that folder. Likewise, quux's \[lB]E\[rB] folder tree is empty, because its dependency on bar is satisfied by the parent folder copy installed at \[lB]B\[rB].
-.P
-For a graphical breakdown of what is installed where, use \fBnpm ls\fR.
-.SS "Publishing"
-.P
-Upon publishing, npm will look in the \fBnode_modules\fR folder. If any of the items there are not in the \fBbundleDependencies\fR array, then they will not be included in the package tarball.
-.P
-This allows a package maintainer to install all of their dependencies (and dev dependencies) locally, but only re-publish those items that cannot be found elsewhere. See \fB\[rs]fBpackage.json\[rs]fR\fR \fI\(la/configuring-npm/package-json\(ra\fR for more information.
-.SS "See also"
-.RS 0
-.IP \(bu 4
-\fBpackage.json\fR \fI\(la/configuring-npm/package-json\(ra\fR
-.IP \(bu 4
-npm help install
-.IP \(bu 4
-npm help pack
-.IP \(bu 4
-npm help cache
-.IP \(bu 4
-npm help config
-.IP \(bu 4
-npm help npmrc
-.IP \(bu 4
-npm help config
-.IP \(bu 4
-npm help publish
-.RE 0