diff --git a/deps/npm/node_modules/qs/.snyk b/deps/npm/node_modules/qs/.snyk
new file mode 100644
index 00000000000000..8eb7cd0889d6be
--- /dev/null
+++ b/deps/npm/node_modules/qs/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:lodash:20180130':
+    - evalmd > acorn-umd > lodash:
+        patched: '2023-04-28T02:45:00.579Z'
diff --git a/deps/npm/node_modules/qs/package.json b/deps/npm/node_modules/qs/package.json
index 2c6549003c47e2..ea0da7a784a8e0 100644
--- a/deps/npm/node_modules/qs/package.json
+++ b/deps/npm/node_modules/qs/package.json
@@ -1,52 +1,56 @@
 {
-    "name": "qs",
-    "description": "A querystring parser that supports nesting and arrays, with a depth limit",
-    "homepage": "https://github.com/ljharb/qs",
-    "version": "6.5.2",
-    "repository": {
-        "type": "git",
-        "url": "https://github.com/ljharb/qs.git"
-    },
-    "main": "lib/index.js",
-    "contributors": [
-        {
-            "name": "Jordan Harband",
-            "email": "ljharb@gmail.com",
-            "url": "http://ljharb.codes"
-        }
-    ],
-    "keywords": [
-        "querystring",
-        "qs"
-    ],
-    "engines": {
-        "node": ">=0.6"
-    },
-    "dependencies": {},
-    "devDependencies": {
-        "@ljharb/eslint-config": "^12.2.1",
-        "browserify": "^16.2.0",
-        "covert": "^1.1.0",
-        "editorconfig-tools": "^0.1.1",
-        "eslint": "^4.19.1",
-        "evalmd": "^0.0.17",
-        "iconv-lite": "^0.4.21",
-        "mkdirp": "^0.5.1",
-        "qs-iconv": "^1.0.4",
-        "safe-publish-latest": "^1.1.1",
-        "safer-buffer": "^2.1.2",
-        "tape": "^4.9.0"
-    },
-    "scripts": {
-        "prepublish": "safe-publish-latest && npm run dist",
-        "pretest": "npm run --silent readme && npm run --silent lint",
-        "test": "npm run --silent coverage",
-        "tests-only": "node test",
-        "readme": "evalmd README.md",
-        "prelint": "editorconfig-tools check * lib/* test/*",
-        "lint": "eslint lib/*.js test/*.js",
-        "coverage": "covert test",
-        "dist": "mkdirp dist && browserify --standalone Qs lib/index.js > dist/qs.js"
-    },
-    "license": "BSD-3-Clause"
+  "name": "qs",
+  "description": "A querystring parser that supports nesting and arrays, with a depth limit",
+  "homepage": "https://github.com/ljharb/qs",
+  "version": "6.5.2",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ljharb/qs.git"
+  },
+  "main": "lib/index.js",
+  "contributors": [
+    {
+      "name": "Jordan Harband",
+      "email": "ljharb@gmail.com",
+      "url": "http://ljharb.codes"
+    }
+  ],
+  "keywords": [
+    "querystring",
+    "qs"
+  ],
+  "engines": {
+    "node": ">=0.6"
+  },
+  "dependencies": {
+    "@snyk/protect": "latest"
+  },
+  "devDependencies": {
+    "@ljharb/eslint-config": "^12.2.1",
+    "browserify": "^16.2.0",
+    "covert": "^1.1.0",
+    "editorconfig-tools": "^0.1.1",
+    "eslint": "^5.0.0",
+    "evalmd": "^0.0.18",
+    "iconv-lite": "^0.4.21",
+    "mkdirp": "^0.5.1",
+    "qs-iconv": "^1.0.4",
+    "safe-publish-latest": "^2.0.0",
+    "safer-buffer": "^2.1.2",
+    "tape": "^4.9.0"
+  },
+  "scripts": {
+    "prepublish": "npm run snyk-protect && safe-publish-latest && npm run dist",
+    "pretest": "npm run --silent readme && npm run --silent lint",
+    "test": "npm run --silent coverage",
+    "tests-only": "node test",
+    "readme": "evalmd README.md",
+    "prelint": "editorconfig-tools check * lib/* test/*",
+    "lint": "eslint lib/*.js test/*.js",
+    "coverage": "covert test",
+    "dist": "mkdirp dist && browserify --standalone Qs lib/index.js > dist/qs.js",
+    "snyk-protect": "snyk-protect"
+  },
+  "license": "BSD-3-Clause",
+  "snyk": true
 }