update pacote

package.json

@@ -35,12 +35,13 @@
     "version": "git add README.md"
   },
   "dependencies": {
+    "@npmcli/arborist": "^6.3.0",
     "boilerplate-update": "^2.1.1",
     "debug": "^4.2.0",
     "execa": "^5.0.0",
     "fs-extra": "^10.0.0",
     "inquirer": "^8.0.0",
-    "pacote": "^13.6.0",
+    "pacote": "^17.0.4",
     "resolve": "^1.10.0",
     "semver": "^7.3.2",
     "tmp": "0.2.1",

src/download-package.js

@@ -4,6 +4,7 @@ const path = require('path');
 const { createTmpDir } = require('./tmp');
 const pacote = require('pacote');
 const { mkdir } = require('fs/promises');
+const Arborist = require('@npmcli/arborist');
 
 /**
  * Download the package in a temporary location and read the contents of the package.json
@@ -32,7 +33,9 @@ async function downloadPackage(name, url, range) {
 
   await mkdir(_path);
 
-  await pacote.extract(url, _path);
+  await pacote.extract(url, _path, {
+    Arborist
+  });
 
   return {
     name: manifest.name,