diff --git a/package-lock.json b/package-lock.json
index 970783dc..6a8a62ce 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3211,13 +3211,12 @@
       }
     },
     "node_modules/azure-pipelines-task-lib/node_modules/uuid": {
-      "version": "3.4.0",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz",
-      "integrity": "sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==",
-      "deprecated": "Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.",
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
+      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rqjBhK3QblZTVX5r1y8sDXKMtKCIm9LxCLNSB13FQnCFzC4sQ==",
       "license": "MIT",
       "bin": {
-        "uuid": "bin/uuid"
+        "uuid": "dist/bin/uuid"
       }
     },
     "node_modules/azure-pipelines-tool-lib": {
@@ -3251,13 +3250,12 @@
       }
     },
     "node_modules/azure-pipelines-tool-lib/node_modules/uuid": {
-      "version": "3.4.0",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz",
-      "integrity": "sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==",
-      "deprecated": "Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.",
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
+      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rqjBhK3QblZTVX5r1y8sDXKMtKCIm9LxCLNSB13FQnCFzC4sQ==",
       "license": "MIT",
       "bin": {
-        "uuid": "bin/uuid"
+        "uuid": "dist/bin/uuid"
       }
     },
     "node_modules/babel-jest": {
@@ -3442,9 +3440,9 @@
       "license": "MIT"
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-      "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+      "version": "1.1.13",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz",
+      "integrity": "sha512-S206H5nb5PxmkMgEiQJYH6f5MQRvKMSEFv3KMXcHcwcCFDVMWdNqPEcbq0RNbBiT9ZMIRCfpqBVG0tMLPV2Cg==",
       "dependencies": {
         "balanced-match": "^1.0.0",
         "concat-map": "0.0.1"
@@ -4483,9 +4481,9 @@
       }
     },
     "node_modules/filelist/node_modules/brace-expansion": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
+      "integrity": "sha512-RmZoSm1oZsbvxhfH9kMFqFP6HzJX3OvXHPQc9KBekNaGj9ETznEIZe7XR0EObxX3DVDv7Y5aFH0IKq38eDCIg==",
       "dev": true,
       "dependencies": {
         "balanced-match": "^1.0.0"
@@ -4553,9 +4551,9 @@
       "license": "ISC"
     },
     "node_modules/follow-redirects": {
-      "version": "1.15.9",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz",
-      "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
+      "integrity": "sha512-0exODfNSEjGMILfV3veLBLMBx0EuCBUXHOHgE9KxYSHBgLBGPOljxijkWRGOBHSCSBL7gMIy7cGS1RTZN8IYQ==",
       "funding": [
         {
           "type": "individual",
@@ -6814,9 +6812,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
-      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+      "integrity": "sha512-PLMr8/DURMfLtPPcNlFmqWPqbA2h/dcl2uqMoXqr9+4n3xFT5amP6FQxm0y0UkogeRFwsPC8HWUIQ0+ZS8Wtg==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/package.json b/package.json
index e2e57e10..95092e23 100644
--- a/package.json
+++ b/package.json
@@ -60,7 +60,10 @@
     "flatted": "^3.4.2",
     "lodash": "^4.18.0",
     "minimatch": "^3.1.2",
-    "underscore": "^1.13.8"
+    "underscore": "^1.13.8",
+    "picomatch": "^2.3.2",
+    "brace-expansion": "^2.0.3",
+    "uuid": "^9.0.0"
   },
   "publishConfig": {
     "registry": "https://npm.pkg.github.com"
diff --git a/src/tests/data/package-lock.json b/src/tests/data/package-lock.json
index 46e06bff..0e64e042 100644
--- a/src/tests/data/package-lock.json
+++ b/src/tests/data/package-lock.json
@@ -1886,9 +1886,9 @@
 			"license": "ISC"
 		},
 		"node_modules/brace-expansion": {
-			"version": "2.0.2",
-			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
-			"integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+			"version": "2.0.3",
+			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz",
+			"integrity": "sha512-RmZoSm1oZsbvxhfH9kMFqFP6HzJX3OvXHPQc9KBekNaGj9ETznEIZe7XR0EObxX3DVDv7Y5aFH0IKq38eDCIg==",
 			"license": "MIT",
 			"dependencies": {
 				"balanced-match": "^1.0.0"
@@ -5643,9 +5643,9 @@
 			"license": "ISC"
 		},
 		"node_modules/picomatch": {
-			"version": "2.3.1",
-			"resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
-			"integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+			"version": "2.3.2",
+			"resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+			"integrity": "sha512-PLMr8/DURMfLtPPcNlFmqWPqbA2h/dcl2uqMoXqr9+4n3xFT5amP6FQxm0y0UkogeRFwsPC8HWUIQ0+ZS8Wtg==",
 			"dev": true,
 			"license": "MIT",
 			"engines": {
diff --git a/src/tests/data/package.json b/src/tests/data/package.json
index b02354fe..71fd9bd1 100644
--- a/src/tests/data/package.json
+++ b/src/tests/data/package.json
@@ -772,7 +772,9 @@
 		"xml2js": "^0.6.0",
 		"semver": "^7.5.4",
 		"minimatch": "^9.0.0",
-		"undici": ">=6.21.3"
+		"undici": ">=6.21.3",
+		"picomatch": "^2.3.2",
+		"brace-expansion": "^2.0.3"
 	},
 	"displayName": "Checkmarx",
 	"engines": {