Run npm install so have clear baseline

node_modules/picomatch/package.json

@@ -1,30 +1,45 @@
 {
-  "name": "picomatch",
-  "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
-  "version": "2.2.2",
-  "homepage": "https://github.com/micromatch/picomatch",
-  "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
-  "funding": "https://github.com/sponsors/jonschlinkert",
-  "repository": "micromatch/picomatch",
+  "_args": [
+    [
+      "picomatch@2.2.2",
+      "/Users/sam/code/codeql-action"
+    ]
+  ],
+  "_development": true,
+  "_from": "picomatch@2.2.2",
+  "_id": "picomatch@2.2.2",
+  "_inBundle": false,
+  "_integrity": "sha512-q0M/9eZHzmr0AulXyPwNfZjtwZ/RBZlbN3K3CErVrk50T2ASYI7Bye0EvekFY3IP1Nt2DHu0re+V2ZHIpMkuWg==",
+  "_location": "/picomatch",
+  "_phantomChildren": {},
+  "_requested": {
+    "type": "version",
+    "registry": true,
+    "raw": "picomatch@2.2.2",
+    "name": "picomatch",
+    "escapedName": "picomatch",
+    "rawSpec": "2.2.2",
+    "saveSpec": null,
+    "fetchSpec": "2.2.2"
+  },
+  "_requiredBy": [
+    "/ava",
+    "/chokidar/anymatch",
+    "/fast-glob",
+    "/micromatch",
+    "/readdirp"
+  ],
+  "_resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz",
+  "_spec": "2.2.2",
+  "_where": "/Users/sam/code/codeql-action",
+  "author": {
+    "name": "Jon Schlinkert",
+    "url": "https://github.com/jonschlinkert"
+  },
   "bugs": {
     "url": "https://github.com/micromatch/picomatch/issues"
   },
-  "license": "MIT",
-  "files": [
-    "index.js",
-    "lib"
-  ],
-  "main": "index.js",
-  "engines": {
-    "node": ">=8.6"
-  },
-  "scripts": {
-    "lint": "eslint --cache --cache-location node_modules/.cache/.eslintcache --report-unused-disable-directives --ignore-path .gitignore .",
-    "mocha": "mocha --reporter dot",
-    "test": "npm run lint && npm run mocha",
-    "test:ci": "npm run test:cover",
-    "test:cover": "nyc npm run mocha"
-  },
+  "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
   "devDependencies": {
     "eslint": "^6.8.0",
     "fill-range": "^7.0.1",
@@ -33,11 +48,23 @@
     "nyc": "^15.0.0",
     "time-require": "github:jonschlinkert/time-require"
   },
+  "engines": {
+    "node": ">=8.6"
+  },
+  "files": [
+    "index.js",
+    "lib"
+  ],
+  "funding": "https://github.com/sponsors/jonschlinkert",
+  "homepage": "https://github.com/micromatch/picomatch",
   "keywords": [
     "glob",
     "match",
     "picomatch"
   ],
+  "license": "MIT",
+  "main": "index.js",
+  "name": "picomatch",
   "nyc": {
     "reporter": [
       "html",
@@ -45,6 +72,17 @@
       "text-summary"
     ]
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/micromatch/picomatch.git"
+  },
+  "scripts": {
+    "lint": "eslint --cache --cache-location node_modules/.cache/.eslintcache --report-unused-disable-directives --ignore-path .gitignore .",
+    "mocha": "mocha --reporter dot",
+    "test": "npm run lint && npm run mocha",
+    "test:ci": "npm run test:cover",
+    "test:cover": "nyc npm run mocha"
+  },
   "verb": {
     "toc": {
       "render": true,
@@ -77,5 +115,6 @@
       "nanomatch",
       "picomatch"
     ]
-  }
-}
+  },
+  "version": "2.2.2"
+}