diff --git a/package-lock.json b/package-lock.json
index e0097452b..804efa11d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,7 +7,6 @@
     "": {
       "name": "@mapeo/core",
       "version": "9.0.0-alpha.16",
-      "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
         "@digidem/types": "^2.3.0",
@@ -90,8 +89,8 @@
         "nanobench": "^3.0.0",
         "npm-run-all": "^4.1.5",
         "prettier": "^2.8.8",
-        "random-access-file": "^4.0.4",
-        "random-access-memory": "^6.2.0",
+        "random-access-file": "^4.0.7",
+        "random-access-memory": "^6.2.1",
         "random-bytes-readable-stream": "^3.0.0",
         "rimraf": "^5.0.5",
         "tempy": "^3.1.0",
@@ -2368,6 +2367,41 @@
       "integrity": "sha512-qMKFd2qG/36aA4GwvKq8MxnPgCQAmBWmSyLWsJcbn8v03wvIPQ/hG1Ms8bPzndZxMDoHpxez5VOS+gC9Yi24/Q==",
       "optional": true
     },
+    "node_modules/bare-fs": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-2.3.1.tgz",
+      "integrity": "sha512-W/Hfxc/6VehXlsgFtbB5B4xFcsCl+pAh30cYhoFyXErf6oGrwjh8SwiPAdHgpmWonKuYpZgGywN0SXt7dgsADA==",
+      "optional": true,
+      "dependencies": {
+        "bare-events": "^2.0.0",
+        "bare-path": "^2.0.0",
+        "bare-stream": "^2.0.0"
+      }
+    },
+    "node_modules/bare-os": {
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-2.4.0.tgz",
+      "integrity": "sha512-v8DTT08AS/G0F9xrhyLtepoo9EJBJ85FRSMbu1pQUlAf6A8T0tEEQGMVObWeqpjhSPXsE0VGlluFBJu2fdoTNg==",
+      "optional": true
+    },
+    "node_modules/bare-path": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-2.1.3.tgz",
+      "integrity": "sha512-lh/eITfU8hrj9Ru5quUp0Io1kJWIk1bTjzo7JH1P5dWmQ2EL4hFUlfI8FonAhSlgIfhn63p84CDY/x+PisgcXA==",
+      "optional": true,
+      "dependencies": {
+        "bare-os": "^2.1.0"
+      }
+    },
+    "node_modules/bare-stream": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.1.3.tgz",
+      "integrity": "sha512-tiDAH9H/kP+tvNO5sczyn9ZAA7utrSMobyDchsnyyXBuUe2FSQWbxhtuHB8jwpHYYevVo2UJpcmvvjrbHboUUQ==",
+      "optional": true,
+      "dependencies": {
+        "streamx": "^2.18.0"
+      }
+    },
     "node_modules/base-x": {
       "version": "3.0.9",
       "license": "MIT",
@@ -7099,19 +7133,23 @@
       }
     },
     "node_modules/random-access-file": {
-      "version": "4.0.4",
-      "license": "MIT",
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/random-access-file/-/random-access-file-4.0.7.tgz",
+      "integrity": "sha512-SOLseGmpbJRLLrVEDOJY3rqX1AwUmQnN0IAMjRLvld3fexaL8hYgti6VFuyT72bDMWSwVyvQROHh6FcE+PefKQ==",
       "dependencies": {
         "random-access-storage": "^3.0.0"
       },
       "optionalDependencies": {
+        "bare-fs": "^2.1.1",
+        "bare-path": "^2.1.0",
         "fs-native-extensions": "^1.1.0"
       }
     },
     "node_modules/random-access-memory": {
-      "version": "6.2.0",
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/random-access-memory/-/random-access-memory-6.2.1.tgz",
+      "integrity": "sha512-hUeu1PbGLmWeyze9LwwSNaqloivNYjFsARIYxRdgUgn0wrdvMG+RszrfTG8814zfcXOgy4pFO2TpX/Cl3hRO4w==",
       "dev": true,
-      "license": "MIT",
       "dependencies": {
         "b4a": "^1.6.0",
         "is-options": "^1.0.2",
diff --git a/package.json b/package.json
index d2102be28..180300104 100644
--- a/package.json
+++ b/package.json
@@ -135,8 +135,8 @@
     "nanobench": "^3.0.0",
     "npm-run-all": "^4.1.5",
     "prettier": "^2.8.8",
-    "random-access-file": "^4.0.4",
-    "random-access-memory": "^6.2.0",
+    "random-access-file": "^4.0.7",
+    "random-access-memory": "^6.2.1",
     "random-bytes-readable-stream": "^3.0.0",
     "rimraf": "^5.0.5",
     "tempy": "^3.1.0",