diff --git a/deps/npm/node_modules/pacote/package.json b/deps/npm/node_modules/pacote/package.json
index 422be5f5452d..10f187810c1b 100644
--- a/deps/npm/node_modules/pacote/package.json
+++ b/deps/npm/node_modules/pacote/package.json
@@ -62,7 +62,7 @@
     "promise-retry": "^2.0.1",
     "sigstore": "^3.0.0",
     "ssri": "^12.0.0",
-    "tar": "^6.1.11"
+    "tar": "^7.5.7"
   },
   "engines": {
     "node": "^20.17.0 || >=22.9.0"
diff --git a/tools/lint-md/package-lock.json b/tools/lint-md/package-lock.json
index 75355b8c78c6..9a8348ff057c 100644
--- a/tools/lint-md/package-lock.json
+++ b/tools/lint-md/package-lock.json
@@ -14,8 +14,7 @@
         "to-vfile": "^8.0.0",
         "unified": "^11.0.5",
         "vfile-reporter": "^8.1.1"
-      }
-    },
+
     "node_modules/@types/debug": {
       "version": "4.1.12",
       "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.12.tgz",
@@ -2224,6 +2223,7 @@
         "url": "https://opencollective.com/unified"
       }
     },
+
     "node_modules/semver": {
       "version": "7.6.3",
       "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz",
diff --git a/tools/lint-md/package.json b/tools/lint-md/package.json
index f7272f493d67..515afa61f1ca 100644
--- a/tools/lint-md/package.json
+++ b/tools/lint-md/package.json
@@ -9,5 +9,11 @@
     "to-vfile": "^8.0.0",
     "unified": "^11.0.5",
     "vfile-reporter": "^8.1.1"
+  },
+  "devDependencies": {
+    "@rollup/plugin-commonjs": "^26.0.1",
+    "@rollup/plugin-node-resolve": "^15.2.3",
+    "rollup": "^4.22.4",
+    "rollup-plugin-cleanup": "^3.2.1"
   }
 }