- [Fix] `defaultPaths`: handle null homedir gracefully
 - [Fix] `homedir`: fix operator precedence bug with HOMEDRIVE/HOMEPATH concatenation
 - [Fix] `loadpkg`: add missing `return` after error callback to prevent double-callback
 - [Performance] avoid an unnecessary slice
 - [Robustness] use `es-errors`
 - [Refactor] use non-hoisted declarations instead of expressions
 - [readme] replace runkit CI badge with shields.io check-runs badge
 - [readme] add CII Best Practices badge
 - [meta] update security policy to use GitHub PVR instead of Tidelift
 - [meta] add CONTRIBUTING.md
 - [Test] add test from v2 branch
 - [Dev Deps] update `eslint`, `@ljharb/eslint-config`, `mkdirp`
 - [Dev Deps] update `@ljharb/eslint-config`, `eslint`, `npmignore`
 - [actions] fix workflow permissions