fix: deps/npm/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-IP-7148531

deps/npm/package.json

@@ -75,11 +75,11 @@
     "lazy-property": "~1.0.0",
     "libcipm": "^4.0.7",
     "libnpm": "^3.0.1",
-    "libnpmaccess": "^3.0.2",
-    "libnpmhook": "^5.0.3",
-    "libnpmorg": "^1.0.1",
-    "libnpmsearch": "^2.0.2",
-    "libnpmteam": "^1.0.2",
+    "libnpmaccess": "^4.0.0",
+    "libnpmhook": "^6.0.0",
+    "libnpmorg": "^2.0.0",
+    "libnpmsearch": "^3.0.0",
+    "libnpmteam": "^2.0.0",
     "libnpx": "^10.2.0",
     "lock-verify": "^2.1.0",
     "lockfile": "^1.0.4",
@@ -103,14 +103,14 @@
     "npm-package-arg": "^6.1.1",
     "npm-packlist": "^1.4.6",
     "npm-pick-manifest": "^3.0.2",
-    "npm-profile": "^4.0.2",
-    "npm-registry-fetch": "^4.0.2",
+    "npm-profile": "^5.0.0",
+    "npm-registry-fetch": "^7.0.0",
     "npm-user-validate": "~1.0.0",
     "npmlog": "~4.1.2",
     "once": "~1.4.0",
     "opener": "^1.5.1",
     "osenv": "^0.1.5",
-    "pacote": "^9.5.9",
+    "pacote": "^11.0.0",
     "path-is-inside": "~1.0.2",
     "promise-inflight": "~1.0.1",
     "qrcode-terminal": "^0.12.0",