diff --git a/index.js b/index.js
index c0e4822..ae21cfc 100644
--- a/index.js
+++ b/index.js
@@ -3,7 +3,7 @@ module.exports = licensee
 var Arborist = require('@npmcli/arborist')
 var blueOakList = require('@blueoak/list')
 var correctLicenseMetadata = require('correct-license-metadata')
-var has = require('has')
+var has = require('hasown')
 var npmLicenseCorrections = require('npm-license-corrections')
 var osi = require('spdx-osi')
 var parse = require('spdx-expression-parse')
diff --git a/licensee b/licensee
index 77de93b..b842558 100755
--- a/licensee
+++ b/licensee
@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 var docopt = require('docopt')
 var fs = require('fs')
-var has = require('has')
+var has = require('hasown')
 var path = require('path')
 var validSPDX = require('spdx-expression-validate')
 
diff --git a/package.json b/package.json
index 26ad7e2..6a5fd9d 100644
--- a/package.json
+++ b/package.json
@@ -10,12 +10,12 @@
   ],
   "dependencies": {
     "@blueoak/list": "^9.0.0",
-    "@npmcli/arborist": "^6.1.2",
+    "@npmcli/arborist": "^6.5.0",
     "correct-license-metadata": "^1.4.0",
     "docopt": "^0.6.2",
-    "has": "^1.0.3",
+    "hasown": "^2.0.0",
     "npm-license-corrections": "^1.6.2",
-    "semver": "^7.3.8",
+    "semver": "^7.6.0",
     "spdx-expression-parse": "^3.0.1",
     "spdx-expression-validate": "^2.0.0",
     "spdx-osi": "^3.0.0",