diff --git a/node_modules/.gitignore b/node_modules/.gitignore
index b4572588cc6c3..f6a7e6ce8160f 100644
--- a/node_modules/.gitignore
+++ b/node_modules/.gitignore
@@ -30,6 +30,7 @@
 !/@npmcli/git/node_modules/npm-package-arg
 !/@npmcli/git/node_modules/npm-pick-manifest
 !/@npmcli/git/node_modules/proc-log
+!/@npmcli/git/node_modules/validate-npm-package-name
 !/@npmcli/installed-package-contents
 !/@npmcli/map-workspaces
 !/@npmcli/map-workspaces/node_modules/
@@ -62,6 +63,7 @@
 !/@npmcli/metavuln-calculator/node_modules/ssri
 !/@npmcli/metavuln-calculator/node_modules/unique-filename
 !/@npmcli/metavuln-calculator/node_modules/unique-slug
+!/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name
 !/@npmcli/name-from-folder
 !/@npmcli/node-gyp
 !/@npmcli/package-json
@@ -175,9 +177,6 @@
 !/indent-string
 !/ini
 !/init-package-json
-!/init-package-json/node_modules/
-/init-package-json/node_modules/*
-!/init-package-json/node_modules/validate-npm-package-name
 !/ip-address
 !/ip-regex
 !/is-cidr
@@ -246,9 +245,6 @@
 !/npm-install-checks
 !/npm-normalize-package-bin
 !/npm-package-arg
-!/npm-package-arg/node_modules/
-/npm-package-arg/node_modules/*
-!/npm-package-arg/node_modules/validate-npm-package-name
 !/npm-packlist
 !/npm-pick-manifest
 !/npm-pick-manifest/node_modules/
diff --git a/node_modules/init-package-json/node_modules/validate-npm-package-name/LICENSE b/node_modules/@npmcli/git/node_modules/validate-npm-package-name/LICENSE
similarity index 100%
rename from node_modules/init-package-json/node_modules/validate-npm-package-name/LICENSE
rename to node_modules/@npmcli/git/node_modules/validate-npm-package-name/LICENSE
diff --git a/node_modules/init-package-json/node_modules/validate-npm-package-name/lib/index.js b/node_modules/@npmcli/git/node_modules/validate-npm-package-name/lib/index.js
similarity index 100%
rename from node_modules/init-package-json/node_modules/validate-npm-package-name/lib/index.js
rename to node_modules/@npmcli/git/node_modules/validate-npm-package-name/lib/index.js
diff --git a/node_modules/init-package-json/node_modules/validate-npm-package-name/package.json b/node_modules/@npmcli/git/node_modules/validate-npm-package-name/package.json
similarity index 79%
rename from node_modules/init-package-json/node_modules/validate-npm-package-name/package.json
rename to node_modules/@npmcli/git/node_modules/validate-npm-package-name/package.json
index 42089cbbede70..8a38b66e1d3e4 100644
--- a/node_modules/init-package-json/node_modules/validate-npm-package-name/package.json
+++ b/node_modules/@npmcli/git/node_modules/validate-npm-package-name/package.json
@@ -1,14 +1,14 @@
 {
   "name": "validate-npm-package-name",
-  "version": "6.0.0",
+  "version": "5.0.1",
   "description": "Give me a string and I'll tell you if it's a valid npm package name",
   "main": "lib/",
   "directories": {
     "test": "test"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.23.3",
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/template-oss": "4.22.0",
     "tap": "^16.0.1"
   },
   "scripts": {
@@ -16,13 +16,12 @@
     "test:code": "tap ${TAP_FLAGS:-'--'} test/*.js",
     "test:style": "standard",
     "test": "tap",
-    "lint": "npm run eslint",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run eslint -- --fix",
+    "lintfix": "npm run lint -- --fix",
     "snap": "tap",
-    "posttest": "npm run lint",
-    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
+    "posttest": "npm run lint"
   },
   "repository": {
     "type": "git",
@@ -45,11 +44,11 @@
     "lib/"
   ],
   "engines": {
-    "node": "^18.17.0 || >=20.5.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.23.3",
+    "version": "4.22.0",
     "publish": true
   },
   "tap": {
diff --git a/node_modules/npm-package-arg/node_modules/validate-npm-package-name/LICENSE b/node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/LICENSE
similarity index 100%
rename from node_modules/npm-package-arg/node_modules/validate-npm-package-name/LICENSE
rename to node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/LICENSE
diff --git a/node_modules/npm-package-arg/node_modules/validate-npm-package-name/lib/index.js b/node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/lib/index.js
similarity index 100%
rename from node_modules/npm-package-arg/node_modules/validate-npm-package-name/lib/index.js
rename to node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/lib/index.js
diff --git a/node_modules/npm-package-arg/node_modules/validate-npm-package-name/package.json b/node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/package.json
similarity index 79%
rename from node_modules/npm-package-arg/node_modules/validate-npm-package-name/package.json
rename to node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/package.json
index 42089cbbede70..8a38b66e1d3e4 100644
--- a/node_modules/npm-package-arg/node_modules/validate-npm-package-name/package.json
+++ b/node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name/package.json
@@ -1,14 +1,14 @@
 {
   "name": "validate-npm-package-name",
-  "version": "6.0.0",
+  "version": "5.0.1",
   "description": "Give me a string and I'll tell you if it's a valid npm package name",
   "main": "lib/",
   "directories": {
     "test": "test"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.23.3",
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/template-oss": "4.22.0",
     "tap": "^16.0.1"
   },
   "scripts": {
@@ -16,13 +16,12 @@
     "test:code": "tap ${TAP_FLAGS:-'--'} test/*.js",
     "test:style": "standard",
     "test": "tap",
-    "lint": "npm run eslint",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run eslint -- --fix",
+    "lintfix": "npm run lint -- --fix",
     "snap": "tap",
-    "posttest": "npm run lint",
-    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
+    "posttest": "npm run lint"
   },
   "repository": {
     "type": "git",
@@ -45,11 +44,11 @@
     "lib/"
   ],
   "engines": {
-    "node": "^18.17.0 || >=20.5.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.23.3",
+    "version": "4.22.0",
     "publish": true
   },
   "tap": {
diff --git a/node_modules/validate-npm-package-name/package.json b/node_modules/validate-npm-package-name/package.json
index 8a38b66e1d3e4..42089cbbede70 100644
--- a/node_modules/validate-npm-package-name/package.json
+++ b/node_modules/validate-npm-package-name/package.json
@@ -1,14 +1,14 @@
 {
   "name": "validate-npm-package-name",
-  "version": "5.0.1",
+  "version": "6.0.0",
   "description": "Give me a string and I'll tell you if it's a valid npm package name",
   "main": "lib/",
   "directories": {
     "test": "test"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.22.0",
+    "@npmcli/eslint-config": "^5.0.0",
+    "@npmcli/template-oss": "4.23.3",
     "tap": "^16.0.1"
   },
   "scripts": {
@@ -16,12 +16,13 @@
     "test:code": "tap ${TAP_FLAGS:-'--'} test/*.js",
     "test:style": "standard",
     "test": "tap",
-    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
+    "lint": "npm run eslint",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run lint -- --fix",
+    "lintfix": "npm run eslint -- --fix",
     "snap": "tap",
-    "posttest": "npm run lint"
+    "posttest": "npm run lint",
+    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
   },
   "repository": {
     "type": "git",
@@ -44,11 +45,11 @@
     "lib/"
   ],
   "engines": {
-    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+    "node": "^18.17.0 || >=20.5.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.22.0",
+    "version": "4.23.3",
     "publish": true
   },
   "tap": {
diff --git a/package-lock.json b/package-lock.json
index c83d6e1393224..4ad964c9ad5ea 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -151,7 +151,7 @@
         "text-table": "~0.2.0",
         "tiny-relative-date": "^1.3.0",
         "treeverse": "^3.0.0",
-        "validate-npm-package-name": "^5.0.1",
+        "validate-npm-package-name": "^6.0.0",
         "which": "^4.0.0",
         "write-file-atomic": "^5.0.1"
       },
@@ -1688,6 +1688,15 @@
         "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
       }
     },
+    "node_modules/@npmcli/git/node_modules/validate-npm-package-name": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-5.0.1.tgz",
+      "integrity": "sha512-OljLrQ9SQdOUqTaQxqL5dEfZWrXExyyWsozYlAWFawPVNuD83igl7uJD2RTkNMbniIYgt8l81eCJGIdQF7avLQ==",
+      "license": "ISC",
+      "engines": {
+        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+      }
+    },
     "node_modules/@npmcli/installed-package-contents": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/@npmcli/installed-package-contents/-/installed-package-contents-2.1.0.tgz",
@@ -2048,6 +2057,15 @@
         "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
       }
     },
+    "node_modules/@npmcli/metavuln-calculator/node_modules/validate-npm-package-name": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-5.0.1.tgz",
+      "integrity": "sha512-OljLrQ9SQdOUqTaQxqL5dEfZWrXExyyWsozYlAWFawPVNuD83igl7uJD2RTkNMbniIYgt8l81eCJGIdQF7avLQ==",
+      "license": "ISC",
+      "engines": {
+        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+      }
+    },
     "node_modules/@npmcli/mock-globals": {
       "resolved": "mock-globals",
       "link": true
@@ -2417,6 +2435,16 @@
         "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
       }
     },
+    "node_modules/@npmcli/template-oss/node_modules/validate-npm-package-name": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-5.0.1.tgz",
+      "integrity": "sha512-OljLrQ9SQdOUqTaQxqL5dEfZWrXExyyWsozYlAWFawPVNuD83igl7uJD2RTkNMbniIYgt8l81eCJGIdQF7avLQ==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+      }
+    },
     "node_modules/@octokit/auth-token": {
       "version": "3.0.4",
       "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-3.0.4.tgz",
@@ -7400,16 +7428,6 @@
         "node": "^18.17.0 || >=20.5.0"
       }
     },
-    "node_modules/init-package-json/node_modules/validate-npm-package-name": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-6.0.0.tgz",
-      "integrity": "sha512-d7KLgL1LD3U3fgnvWEY1cQXoO/q6EQ1BSz48Sa149V/5zVTAbgmZIpyI8TRi6U9/JNyeYLlTKsEMPtLC27RFUg==",
-      "inBundle": true,
-      "license": "ISC",
-      "engines": {
-        "node": "^18.17.0 || >=20.5.0"
-      }
-    },
     "node_modules/internal-slot": {
       "version": "1.0.7",
       "resolved": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.0.7.tgz",
@@ -10500,16 +10518,6 @@
         "node": "^18.17.0 || >=20.5.0"
       }
     },
-    "node_modules/npm-package-arg/node_modules/validate-npm-package-name": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-6.0.0.tgz",
-      "integrity": "sha512-d7KLgL1LD3U3fgnvWEY1cQXoO/q6EQ1BSz48Sa149V/5zVTAbgmZIpyI8TRi6U9/JNyeYLlTKsEMPtLC27RFUg==",
-      "inBundle": true,
-      "license": "ISC",
-      "engines": {
-        "node": "^18.17.0 || >=20.5.0"
-      }
-    },
     "node_modules/npm-packlist": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-8.0.2.tgz",
@@ -16589,13 +16597,13 @@
       }
     },
     "node_modules/validate-npm-package-name": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-5.0.1.tgz",
-      "integrity": "sha512-OljLrQ9SQdOUqTaQxqL5dEfZWrXExyyWsozYlAWFawPVNuD83igl7uJD2RTkNMbniIYgt8l81eCJGIdQF7avLQ==",
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-6.0.0.tgz",
+      "integrity": "sha512-d7KLgL1LD3U3fgnvWEY1cQXoO/q6EQ1BSz48Sa149V/5zVTAbgmZIpyI8TRi6U9/JNyeYLlTKsEMPtLC27RFUg==",
       "inBundle": true,
       "license": "ISC",
       "engines": {
-        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+        "node": "^18.17.0 || >=20.5.0"
       }
     },
     "node_modules/vfile": {
diff --git a/package.json b/package.json
index aff162a577ce3..8bf438fe6b253 100644
--- a/package.json
+++ b/package.json
@@ -116,7 +116,7 @@
     "text-table": "~0.2.0",
     "tiny-relative-date": "^1.3.0",
     "treeverse": "^3.0.0",
-    "validate-npm-package-name": "^5.0.1",
+    "validate-npm-package-name": "^6.0.0",
     "which": "^4.0.0",
     "write-file-atomic": "^5.0.1"
   },