v6.2.3

Changed

• deps — update vendored @socketregistry/packageurl-js to 1.4.6

Fixed

• packages — lazy-require npm-package-arg in specs
• externals — collapse below-floor vendored engine gates at bundle time