diff --git a/package-lock.json b/package-lock.json
index 45ebe290e105e..91508cab7f1f5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -31,6 +31,7 @@
         "ini",
         "init-package-json",
         "is-cidr",
+        "json-parse-even-better-errors",
         "leven",
         "libnpmaccess",
         "libnpmfund",
@@ -227,7 +228,6 @@
         "js-tokens",
         "js-yaml",
         "jsbn",
-        "json-parse-even-better-errors",
         "json-schema",
         "json-schema-traverse",
         "json-stable-stringify-without-jsonify",
@@ -354,6 +354,7 @@
         "wrappy",
         "yallist"
       ],
+      "hasInstallScript": true,
       "license": "Artistic-2.0",
       "dependencies": {
         "@npmcli/arborist": "^2.0.0",
@@ -418,6 +419,7 @@
         "tar": "^6.0.5",
         "text-table": "~0.2.0",
         "tiny-relative-date": "^1.3.0",
+        "treeverse": "^1.0.4",
         "uuid": "^8.3.1",
         "validate-npm-package-name": "~3.0.0",
         "which": "^2.0.2",
diff --git a/package.json b/package.json
index bcd789297d449..a065d64fc8e88 100644
--- a/package.json
+++ b/package.json
@@ -104,6 +104,7 @@
     "tar": "^6.0.5",
     "text-table": "~0.2.0",
     "tiny-relative-date": "^1.3.0",
+    "treeverse": "^1.0.4",
     "uuid": "^8.3.1",
     "validate-npm-package-name": "~3.0.0",
     "which": "^2.0.2",
@@ -171,6 +172,7 @@
     "tar",
     "text-table",
     "tiny-relative-date",
+    "treeverse",
     "uuid",
     "validate-npm-package-name",
     "which",
@@ -205,7 +207,6 @@
     "lint": "npm run eslint -- test/lib test/bin \"lib/**/*.js\"",
     "lintfix": "npm run lint -- --fix",
     "prelint": "rimraf test/npm_cache*",
-    "postinstall": "node ./scripts/bundle-and-gitignore-deps.js",
     "resetdeps": "bash scripts/resetdeps.sh"
   },
   "//": [