diff --git a/.eslintrc.json b/.eslintrc.json
index 9347c7d8eb38d..7253bed6af197 100644
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -152,7 +152,7 @@
     "no-unmodified-loop-condition": "error",
     "no-unneeded-ternary": ["error", { "defaultAssignment": false }],
     "no-unreachable": "error",
-    "no-unsafe-finally": "error",
+    "no-unsafe-finally": 0,
     "no-unsafe-negation": "error",
     "no-unused-expressions": ["error", { "allowShortCircuit": true, "allowTernary": true, "allowTaggedTemplates": true }],
     "no-unused-vars": ["error", { "vars": "all", "args": "none", "ignoreRestSiblings": true }],
diff --git a/lib/doctor.js b/lib/doctor.js
index 46aa0e1e7047b..dc78eca1110cb 100644
--- a/lib/doctor.js
+++ b/lib/doctor.js
@@ -1,115 +1,294 @@
-'use strict'
-
-const ansiTrim = require('./utils/ansi-trim')
-const chain = require('slide').chain
-const color = require('ansicolors')
-const defaultRegistry = require('./config/defaults').defaults.registry
-const log = require('npmlog')
-const npm = require('./npm')
-const output = require('./utils/output')
-const path = require('path')
-const semver = require('semver')
-const styles = require('ansistyles')
+const npm = require('./npm.js')
+
+const chalk = require('chalk')
+const ansiTrim = require('./utils/ansi-trim.js')
 const table = require('text-table')
+const output = require('./utils/output.js')
+const completion = require('./utils/completion/none.js')
+const usageUtil = require('./utils/usage.js')
+const usage = usageUtil('doctor', 'npm doctor')
+const { resolve } = require('path')
 
-// steps
-const checkFilesPermission = require('./doctor/check-files-permission')
-const checkPing = require('./doctor/check-ping')
-const getGitPath = require('./doctor/get-git-path')
-const getLatestNodejsVersion = require('./doctor/get-latest-nodejs-version')
-const getLatestNpmVersion = require('./doctor/get-latest-npm-version')
-const verifyCachedFiles = require('./doctor/verify-cached-files')
+const ping = require('./utils/ping.js')
+const checkPing = async () => {
+  const tracker = npm.log.newItem('checkPing', 1)
+  tracker.info('checkPing', 'Pinging registry')
+  try {
+    await ping(npm.flatOptions)
+    return ''
+  } catch (er) {
+    if (/^E\d{3}$/.test(er.code || '')) {
+      throw er.code.substr(1) + ' ' + er.message
+    } else {
+      throw er
+    }
+  } finally {
+    tracker.finish()
+  }
+}
 
-const globalNodeModules = path.join(npm.config.globalPrefix, 'lib', 'node_modules')
-const localNodeModules = path.join(npm.config.localPrefix, 'node_modules')
+const pacote = require('pacote')
+const getLatestNpmVersion = async () => {
+  const tracker = npm.log.newItem('getLatestNpmVersion', 1)
+  tracker.info('getLatestNpmVersion', 'Getting npm package information')
+  try {
+    const latest = (await pacote.manifest('npm@latest', npm.flatOptions)).version
+    if (semver.gte(npm.version, latest)) {
+      return `current: v${npm.version}, latest: v${latest}`
+    } else {
+      throw `Use npm v${latest}`
+    }
+  } finally {
+    tracker.finish()
+  }
+}
 
-const usageUtil = require('./utils/usage.js')
-const usage = usageUtil('doctor', 'npm doctor')
-const completion = require('./utils/completion/none.js')
+const semver = require('semver')
+const fetch = require('make-fetch-happen')
+const getLatestNodejsVersion = async () => {
+  // XXX get the latest in the current major as well
+  const current = process.version
+  const currentRange = `^${current}`
+  const url = 'https://nodejs.org/dist/index.json'
+  const tracker = npm.log.newItem('getLatestNodejsVersion', 1)
+  tracker.info('getLatestNodejsVersion', 'Getting Node.js release information')
+  try {
+    const res = await fetch(url, { method: 'GET', ...npm.flatOptions })
+    const data = await res.json()
+    let maxCurrent = '0.0.0'
+    let maxLTS = '0.0.0'
+    for (const { lts, version } of data) {
+      if (lts && semver.gt(version, maxLTS)) {
+        maxLTS = version
+      }
+      if (semver.satisfies(version, currentRange) && semver.gt(version, maxCurrent)) {
+        maxCurrent = version
+      }
+    }
+    const recommended = semver.gt(maxCurrent, maxLTS) ? maxCurrent : maxLTS
+    if (semver.gte(process.version, recommended)) {
+      return `current: ${current}, recommended: ${recommended}`
+    } else {
+      throw `Use node ${recommended} (current: ${current})`
+    }
+  } finally {
+    tracker.finish()
+  }
+}
 
-function doctor (args, silent, cb) {
-  args = args || {}
-  if (typeof cb !== 'function') {
-    cb = silent
-    silent = false
+const { promisify } = require('util')
+const fs = require('fs')
+const { R_OK, W_OK, X_OK } = fs.constants
+const maskLabel = mask => {
+  const label = []
+  if (mask & R_OK) {
+    label.push('readable')
+  }
+  if (mask & W_OK) {
+    label.push('writable')
+  }
+  if (mask & X_OK) {
+    label.push('executable')
+  }
+  return label.join(', ')
+}
+const lstat = promisify(fs.lstat)
+const readdir = promisify(fs.readdir)
+const access = promisify(fs.access)
+const isWindows = require('./utils/is-windows.js')
+const checkFilesPermission = async (root, shouldOwn = true, mask = null) => {
+  if (mask === null) {
+    mask = shouldOwn ? R_OK | W_OK : R_OK
   }
 
-  const actionsToRun = [
-    [checkPing],
-    [getLatestNpmVersion],
-    [getLatestNodejsVersion, args['node-url']],
-    [getGitPath],
-    [checkFilesPermission, npm.cache, 4, 6],
-    [checkFilesPermission, globalNodeModules, 4, 4],
-    [checkFilesPermission, localNodeModules, 6, 6],
-    [verifyCachedFiles, path.join(npm.cache, '_cacache')]
-  ]
+  let ok = true
+
+  const tracker = npm.log.newItem(root, 1)
+
+  try {
+    const uid = process.getuid()
+    const gid = process.getgid()
+    const files = new Set([root])
+    for (const f of files) {
+      tracker.silly('checkFilesPermission', f.substr(root.length + 1))
+      const st = await lstat(f)
+        .catch(er => {
+          ok = false
+          tracker.warn('checkFilesPermission', 'error getting info for ' + f)
+        })
+
+      tracker.completeWork(1)
 
-  log.info('doctor', 'Running checkup')
-  chain(actionsToRun, function (stderr, stdout) {
-    if (stderr && stderr.message !== 'not found: git') return cb(stderr)
-    const list = makePretty(stdout)
-    let outHead = ['Check', 'Value', 'Recommendation']
-    let outBody = list
-
-    if (npm.color) {
-      outHead = outHead.map(function (item) {
-        return styles.underline(item)
-      })
-      outBody = outBody.map(function (item) {
-        if (item[2]) {
-          item[0] = color.red(item[0])
-          item[2] = color.magenta(item[2])
+      if (!st) {
+        continue
+      }
+
+      if (shouldOwn && (uid !== st.uid || gid !== st.gid)) {
+        tracker.warn('checkFilesPermission', 'should be owner of ' + f)
+        ok = false
+      }
+
+      if (!st.isDirectory() && !st.isFile()) {
+        continue
+      }
+
+      try {
+        await access(f, mask)
+      } catch (er) {
+        ok = false
+        const msg = `Missing permissions on ${f} (expect: ${maskLabel(mask)})`
+        tracker.error('checkFilesPermission', msg)
+        continue
+      }
+
+      if (st.isDirectory()) {
+        const entries = await readdir(f)
+          .catch(er => {
+            ok = false
+            tracker.warn('checkFilesPermission', 'error reading directory ' + f)
+            return []
+          })
+        for (const entry of entries) {
+          files.add(resolve(f, entry))
         }
-        return item
-      })
+      }
     }
-
-    const outTable = [outHead].concat(outBody)
-    const tableOpts = {
-      stringLength: function (s) { return ansiTrim(s).length }
+  } finally {
+    tracker.finish()
+    if (!ok) {
+      throw `Check the permissions of files in ${root}` +
+        (shouldOwn ? ' (should be owned by current user)' : '')
+    } else {
+      return ''
     }
+  }
+}
 
-    if (!silent) output(table(outTable, tableOpts))
+const which = require('which')
+const getGitPath = async () => {
+  const tracker = npm.log.newItem('getGitPath', 1)
+  tracker.info('getGitPath', 'Finding git in your PATH')
+  try {
+    return await which('git').catch(er => {
+      tracker.warn(er)
+      throw "Install git and ensure it's in your PATH."
+    })
+  } finally {
+    tracker.finish()
+  }
+}
+
+const cacache = require('cacache')
+const verifyCachedFiles = async () => {
+  const tracker = npm.log.newItem('verifyCachedFiles', 1)
+  tracker.info('verifyCachedFiles', 'Verifying the npm cache')
+  try {
+    const stats = await cacache.verify(npm.flatOptions.cache)
+    const { badContentCount, reclaimedCount, missingContent, reclaimedSize } = stats
+    if (badContentCount || reclaimedCount || missingContent) {
+      if (badContentCount) {
+        tracker.warn('verifyCachedFiles', `Corrupted content removed: ${badContentCount}`)
+      }
+      if (reclaimedCount) {
+        tracker.warn('verifyCachedFiles', `Content garbage-collected: ${reclaimedCount} (${reclaimedSize} bytes)`)
+      }
+      if (missingContent) {
+        tracker.warn('verifyCachedFiles', `Missing content: ${missingContent}`)
+      }
+      tracker.warn('verifyCachedFiles', 'Cache issues have been fixed')
+    }
+    tracker.info('verifyCachedFiles', `Verification complete. Stats: ${
+      JSON.stringify(stats, null, 2)
+    }`)
+    return `verified ${stats.verifiedContent} tarballs`
+  } finally {
+    tracker.finish()
+  }
+}
 
-    cb(null, list)
-  })
+const { defaults: { registry: defaultRegistry } } = require('./config/defaults.js')
+const checkNpmRegistry = async () => {
+  if (npm.flatOptions.registry !== defaultRegistry) {
+    throw `Try \`npm config set registry=${defaultRegistry}\``
+  } else {
+    return `using default registry (${defaultRegistry})`
+  }
 }
 
-function makePretty (p) {
-  const ping = p[1]
-  const npmLTS = p[2]
-  const nodeLTS = p[3].replace('v', '')
-  const whichGit = p[4] || 'not installed'
-  const readbleCaches = p[5] ? 'ok' : 'notOk'
-  const executableGlobalModules = p[6] ? 'ok' : 'notOk'
-  const executableLocalModules = p[7] ? 'ok' : 'notOk'
-  const cacheStatus = p[8] ? `verified ${p[8].verifiedContent} tarballs` : 'notOk'
-  const npmV = npm.version
-  const nodeV = process.version.replace('v', '')
-  const registry = npm.config.get('registry') || ''
-  const list = [
-    ['npm ping', ping],
-    ['npm -v', 'v' + npmV],
-    ['node -v', 'v' + nodeV],
-    ['npm config get registry', registry],
-    ['which git', whichGit],
-    ['Perms check on cached files', readbleCaches],
-    ['Perms check on global node_modules', executableGlobalModules],
-    ['Perms check on local node_modules', executableLocalModules],
-    ['Verify cache contents', cacheStatus]
+const cmd = (args, cb) => doctor(args).then(() => cb()).catch(cb)
+
+const doctor = async args => {
+  npm.log.info('Running checkup')
+
+  // each message is [title, ok, message]
+  const messages = []
+
+  const actions = [
+    ['npm ping', checkPing, []],
+    ['npm -v', getLatestNpmVersion, []],
+    ['node -v', getLatestNodejsVersion, []],
+    ['npm config get registry', checkNpmRegistry, []],
+    ['which git', getGitPath, []],
+    ...(isWindows ? [] : [
+      ['Perms check on cached files', checkFilesPermission, [npm.cache, true, R_OK]],
+      ['Perms check on local node_modules', checkFilesPermission, [npm.localDir, true]],
+      ['Perms check on global node_modules', checkFilesPermission, [npm.globalDir, false]],
+      ['Perms check on local bin folder', checkFilesPermission, [npm.localBin, false, R_OK | W_OK | X_OK]],
+      ['Perms check on global bin folder', checkFilesPermission, [npm.globalBin, false, X_OK]]
+    ]),
+    ['Verify cache contents', verifyCachedFiles, [npm.flatOptions.cache]]
+    // TODO:
+    // - ensure arborist.loadActual() runs without errors and no invalid edges
+    // - ensure package-lock.json matches loadActual()
+    // - verify loadActual without hidden lock file matches hidden lockfile
+    // - verify all local packages have bins linked
   ]
 
-  if (p[0] !== 200) list[0][2] = 'Check your internet connection'
-  if (!semver.satisfies(npmV, '>=' + npmLTS)) list[1][2] = 'Use npm v' + npmLTS
-  if (!semver.satisfies(nodeV, '>=' + nodeLTS)) list[2][2] = 'Use node v' + nodeLTS
-  if (registry !== defaultRegistry) list[3][2] = 'Try `npm config set registry ' + defaultRegistry + '`'
-  if (whichGit === 'not installed') list[4][2] = 'Install git and ensure it\'s in your PATH.'
-  if (readbleCaches !== 'ok') list[5][2] = 'Check the permissions of your files in ' + npm.config.get('cache')
-  if (executableGlobalModules !== 'ok') list[6][2] = globalNodeModules + ' must be readable and writable by the current user.'
-  if (executableLocalModules !== 'ok') list[7][2] = localNodeModules + ' must be readable and writable by the current user.'
+  for (const [msg, fn, args] of actions) {
+    const line = [msg]
+    try {
+      line.push(true, await fn(...args))
+    } catch (er) {
+      line.push(false, er)
+    }
+    messages.push(line)
+  }
+
+  const silent = npm.log.levels[npm.log.level] > npm.log.levels.error
 
-  return list
+  const outHead = ['Check', 'Value', 'Recommendation/Notes']
+    .map(!npm.color ? h => h : h => chalk.underline(h))
+  let allOk = true
+  const outBody = messages.map(!npm.color
+    ? item => {
+      allOk = allOk && item[1]
+      item[1] = item[1] ? 'ok' : 'not ok'
+      item[2] = String(item[2])
+      return item
+    }
+    : item => {
+      allOk = allOk && item[1]
+      if (!item[1]) {
+        item[0] = chalk.red(item[0])
+        item[2] = chalk.magenta(String(item[2]))
+      }
+      item[1] = item[1] ? chalk.green('ok') : chalk.red('not ok')
+      return item
+    })
+  const outTable = [outHead, ...outBody]
+  const tableOpts = {
+    stringLength: s => ansiTrim(s).length
+  }
+
+  if (!silent) {
+    output(table(outTable, tableOpts))
+    if (!allOk) {
+      console.error('')
+    }
+  }
+  if (!allOk) {
+    throw 'Some problems found. See above for recommendations.'
+  }
 }
 
-module.exports = Object.assign(doctor, { completion, usage })
+module.exports = Object.assign(cmd, { completion, usage })
diff --git a/lib/doctor/check-files-permission.js b/lib/doctor/check-files-permission.js
deleted file mode 100644
index 1cefb6e64cea5..0000000000000
--- a/lib/doctor/check-files-permission.js
+++ /dev/null
@@ -1,57 +0,0 @@
-var fs = require('fs')
-var path = require('path')
-var getUid = require('uid-number')
-var chain = require('slide').chain
-var log = require('npmlog')
-var npm = require('../npm.js')
-var fileCompletion = require('../utils/completion/file-completion.js')
-
-function checkFilesPermission (root, fmask, dmask, cb) {
-  if (process.platform === 'win32') return cb(null, true)
-  getUid(npm.config.get('user'), npm.config.get('group'), function (e, uid, gid) {
-    var tracker = log.newItem('checkFilePermissions', 1)
-    if (e) {
-      tracker.finish()
-      tracker.warn('checkFilePermissions', 'Error looking up user and group:', e)
-      return cb(e)
-    }
-    tracker.info('checkFilePermissions', 'Building file list of ' + root)
-    fileCompletion(root, '.', Infinity, function (e, files) {
-      if (e) {
-        tracker.warn('checkFilePermissions', 'Error building file list:', e)
-        tracker.finish()
-        return cb(e)
-      }
-      tracker.addWork(files.length)
-      tracker.completeWork(1)
-      chain(files.map(andCheckFile), function (er) {
-        tracker.finish()
-        cb(null, !er)
-      })
-      function andCheckFile (f) {
-        return [checkFile, f]
-      }
-      function checkFile (f, next) {
-        var file = path.join(root, f)
-        tracker.silly('checkFilePermissions', f)
-        fs.lstat(file, function (e, stat) {
-          tracker.completeWork(1)
-          if (e) return next(e)
-          if (!stat.isDirectory() && !stat.isFile()) return next()
-          // 6 = fs.constants.R_OK | fs.constants.W_OK
-          // constants aren't available on v4
-          fs.access(file, stat.isFile() ? fmask : dmask, (err) => {
-            if (err) {
-              tracker.error('checkFilePermissions', `Missing permissions on ${file}`)
-              return next(new Error('Missing permissions for ' + file))
-            } else {
-              return next()
-            }
-          })
-        })
-      }
-    })
-  })
-}
-
-module.exports = checkFilesPermission
diff --git a/lib/doctor/check-ping.js b/lib/doctor/check-ping.js
deleted file mode 100644
index 58f14fe69e1e0..0000000000000
--- a/lib/doctor/check-ping.js
+++ /dev/null
@@ -1,16 +0,0 @@
-var log = require('npmlog')
-var ping = require('../ping.js')
-
-function checkPing (cb) {
-  var tracker = log.newItem('checkPing', 1)
-  tracker.info('checkPing', 'Pinging registry')
-  ping({}, true, (err, pong) => {
-    if (err && err.code && err.code.match(/^E\d{3}$/)) {
-      return cb(null, [err.code.substr(1)])
-    } else {
-      cb(null, [200, 'ok'])
-    }
-  })
-}
-
-module.exports = checkPing
diff --git a/lib/doctor/get-git-path.js b/lib/doctor/get-git-path.js
deleted file mode 100644
index 5b00e9d54e6bc..0000000000000
--- a/lib/doctor/get-git-path.js
+++ /dev/null
@@ -1,13 +0,0 @@
-var log = require('npmlog')
-var which = require('which')
-
-function getGitPath (cb) {
-  var tracker = log.newItem('getGitPath', 1)
-  tracker.info('getGitPath', 'Finding git in your PATH')
-  which('git', function (err, path) {
-    tracker.finish()
-    cb(err, path)
-  })
-}
-
-module.exports = getGitPath
diff --git a/lib/doctor/get-latest-nodejs-version.js b/lib/doctor/get-latest-nodejs-version.js
deleted file mode 100644
index 1586b087a0bff..0000000000000
--- a/lib/doctor/get-latest-nodejs-version.js
+++ /dev/null
@@ -1,27 +0,0 @@
-var log = require('npmlog')
-var request = require('request')
-var semver = require('semver')
-
-function getLatestNodejsVersion (url, cb) {
-  var tracker = log.newItem('getLatestNodejsVersion', 1)
-  tracker.info('getLatestNodejsVersion', 'Getting Node.js release information')
-  var version = 'v0.0.0'
-  url = url || 'https://nodejs.org/dist/index.json'
-  request(url, function (e, res, index) {
-    tracker.finish()
-    if (e) return cb(e)
-    if (res.statusCode !== 200) {
-      return cb(new Error('Status not 200, ' + res.statusCode))
-    }
-    try {
-      JSON.parse(index).forEach(function (item) {
-        if (item.lts && semver.gt(item.version, version)) version = item.version
-      })
-      cb(null, version)
-    } catch (e) {
-      cb(e)
-    }
-  })
-}
-
-module.exports = getLatestNodejsVersion
diff --git a/lib/doctor/get-latest-npm-version.js b/lib/doctor/get-latest-npm-version.js
deleted file mode 100644
index be3a87cb8d804..0000000000000
--- a/lib/doctor/get-latest-npm-version.js
+++ /dev/null
@@ -1,18 +0,0 @@
-const log = require('npmlog')
-const pacote = require('pacote')
-
-const getLatestNpmVersion = async cb => {
-  const tracker = log.newItem('getLatestNpmVersion', 1)
-  tracker.info('getLatestNpmVersion', 'Getting npm package information')
-  let version = null
-  let error = null
-  try {
-    version = (await pacote.manifest('npm@latest')).version
-  } catch (er) {
-    error = er
-  }
-  tracker.finish()
-  return cb(error, version)
-}
-
-module.exports = getLatestNpmVersion
diff --git a/lib/doctor/verify-cached-files.js b/lib/doctor/verify-cached-files.js
deleted file mode 100644
index f00dbd6256059..0000000000000
--- a/lib/doctor/verify-cached-files.js
+++ /dev/null
@@ -1,19 +0,0 @@
-'use strict'
-
-const cacache = require('cacache')
-const log = require('npmlog')
-
-module.exports = verifyCachedFiles
-function verifyCachedFiles (cache, cb) {
-  log.info('verifyCachedFiles', `Verifying cache at ${cache}`)
-  cacache.verify(cache).then((stats) => {
-    log.info('verifyCachedFiles', `Verification complete. Stats: ${JSON.stringify(stats, 2)}`)
-    if (stats.reclaimedCount || stats.badContentCount || stats.missingContent) {
-      stats.badContentCount && log.warn('verifyCachedFiles', `Corrupted content removed: ${stats.badContentCount}`)
-      stats.reclaimedCount && log.warn('verifyCachedFiles', `Content garbage-collected: ${stats.reclaimedCount} (${stats.reclaimedSize} bytes)`)
-      stats.missingContent && log.warn('verifyCachedFiles', `Missing content: ${stats.missingContent}`)
-      log.warn('verifyCachedFiles', 'Cache issues have been fixed')
-    }
-    return stats
-  }).then((s) => cb(null, s), cb)
-}
diff --git a/lib/ping.js b/lib/ping.js
index 7802657aef731..71e5a1970d35a 100644
--- a/lib/ping.js
+++ b/lib/ping.js
@@ -1,4 +1,3 @@
-const fetch = require('npm-registry-fetch')
 const log = require('npmlog')
 const npm = require('./npm.js')
 const output = require('./utils/output.js')
@@ -8,19 +7,17 @@ const usage = usageUtil('ping', 'npm ping\nping registry')
 const completion = require('./utils/completion/none.js')
 
 const cmd = (args, cb) => ping(args).then(() => cb()).catch(cb)
+const pingUtil = require('./utils/ping.js')
 
 const ping = async args => {
-  const opts = npm.flatOptions
-  const registry = opts.registry
-  log.notice('PING', registry)
+  log.notice('PING', npm.flatOptions.registry)
   const start = Date.now()
-  const res = await fetch('/-/ping?write=true', opts)
-  const details = await res.json().catch(() => ({}))
+  const details = await pingUtil(npm.flatOptions)
   const time = Date.now() - start
   log.notice('PONG', `${time / 1000}ms`)
-  if (opts.json) {
+  if (npm.flatOptions.json) {
     output(JSON.stringify({
-      registry,
+      registry: npm.flatOptions.registry,
       time,
       details
     }, null, 2))
diff --git a/lib/utils/ping.js b/lib/utils/ping.js
new file mode 100644
index 0000000000000..f5f7fcc6a6258
--- /dev/null
+++ b/lib/utils/ping.js
@@ -0,0 +1,7 @@
+// ping the npm registry
+// used by the ping and doctor commands
+const fetch = require('npm-registry-fetch')
+module.exports = async (opts) => {
+  const res = await fetch('/-/ping?write=true', opts)
+  return res.json().catch(() => ({}))
+}
diff --git a/package-lock.json b/package-lock.json
index caa3192e717d5..fbcc143af845e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "npm",
-  "version": "7.0.0-beta.0",
+  "version": "7.0.0-beta.1",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "npm",
-      "version": "7.0.0-beta.0",
+      "version": "7.0.0-beta.1",
       "bundleDependencies": [
         "@npmcli/arborist",
         "@npmcli/ci-detect",
@@ -124,6 +124,7 @@
         "libnpmteam": "^2.0.1",
         "libnpmversion": "^1.0.2",
         "lockfile": "^1.0.4",
+        "make-fetch-happen": "^8.0.9",
         "meant": "~1.0.1",
         "mkdirp": "^1.0.4",
         "mkdirp-infer-owner": "^2.0.0",
diff --git a/package.json b/package.json
index 808952710d246..5dd45988be9c7 100644
--- a/package.json
+++ b/package.json
@@ -116,7 +116,8 @@
     "uuid": "^3.3.3",
     "validate-npm-package-name": "~3.0.0",
     "which": "^2.0.2",
-    "write-file-atomic": "^2.4.3"
+    "write-file-atomic": "^2.4.3",
+    "make-fetch-happen": "^8.0.9"
   },
   "bundleDependencies": [
     "@npmcli/arborist",