@coana-tech/cli 15.0.1 → 15.0.3

package/cli.mjs

@@ -12993,7 +12993,7 @@ var require_form_data = __commonJS({
     var util5 = __require("util");
     var path9 = __require("path");
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var parseUrl = __require("url").parse;
     var fs11 = __require("fs");
     var Stream2 = __require("stream").Stream;
@@ -13262,7 +13262,7 @@ var require_form_data = __commonJS({
       }
       options.headers = this.getHeaders(params.headers);
       if (options.protocol === "https:") {
-        request = https2.request(options);
+        request = https3.request(options);
       } else {
         request = http2.request(options);
       }
@@ -13387,7 +13387,7 @@ var require_ms = __commonJS({
       options = options || {};
       var type = typeof val2;
       if (type === "string" && val2.length > 0) {
-        return parse17(val2);
+        return parse16(val2);
       } else if (type === "number" && isFinite(val2)) {
         return options.long ? fmtLong(val2) : fmtShort(val2);
       }
@@ -13395,7 +13395,7 @@ var require_ms = __commonJS({
         "val is not a non-empty string or a valid number. val=" + JSON.stringify(val2)
       );
     };
-    function parse17(str) {
+    function parse16(str) {
       str = String(str);
       if (str.length > 100) {
         return;
@@ -14160,7 +14160,7 @@ var require_follow_redirects = __commonJS({
     var url2 = __require("url");
     var URL3 = url2.URL;
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var Writable = __require("stream").Writable;
     var assert17 = __require("assert");
     var debug = require_debug();
@@ -14645,7 +14645,7 @@ var require_follow_redirects = __commonJS({
     function isURL(value2) {
       return URL3 && value2 instanceof URL3;
     }
-    module2.exports = wrap2({ http: http2, https: https2 });
+    module2.exports = wrap2({ http: http2, https: https3 });
     module2.exports.wrap = wrap2;
   }
 });
@@ -15272,7 +15272,7 @@ var require_parse = __commonJS({
     var syntaxError = (type, char) => {
       return `Missing ${type}: "${char}" - use "\\\\${char}" to match literal characters`;
     };
-    var parse17 = (input, options) => {
+    var parse16 = (input, options) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected a string");
       }
@@ -15420,7 +15420,7 @@ var require_parse = __commonJS({
             output = token.close = `)$))${extglobStar}`;
           }
           if (token.inner.includes("*") && (rest = remaining()) && /^\.[^\\/.]+$/.test(rest)) {
-            const expression = parse17(rest, { ...options, fastpaths: false }).output;
+            const expression = parse16(rest, { ...options, fastpaths: false }).output;
             output = token.close = `)${expression})${extglobStar})`;
           }
           if (token.prev.type === "bos") {
@@ -15942,7 +15942,7 @@ var require_parse = __commonJS({
       }
       return state;
     };
-    parse17.fastpaths = (input, options) => {
+    parse16.fastpaths = (input, options) => {
       const opts = { ...options };
       const max = typeof opts.maxLength === "number" ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
       const len = input.length;
@@ -16007,7 +16007,7 @@ var require_parse = __commonJS({
       }
       return source;
     };
-    module2.exports = parse17;
+    module2.exports = parse16;
   }
 });
 
@@ -16016,7 +16016,7 @@ var require_picomatch = __commonJS({
   "../../node_modules/.pnpm/picomatch@4.0.3/node_modules/picomatch/lib/picomatch.js"(exports2, module2) {
     "use strict";
     var scan = require_scan();
-    var parse17 = require_parse();
+    var parse16 = require_parse();
     var utils = require_utils();
     var constants4 = require_constants();
     var isObject2 = (val2) => val2 && typeof val2 === "object" && !Array.isArray(val2);
@@ -16104,7 +16104,7 @@ var require_picomatch = __commonJS({
     picomatch11.isMatch = (str, patterns, options) => picomatch11(patterns, options)(str);
     picomatch11.parse = (pattern, options) => {
       if (Array.isArray(pattern)) return pattern.map((p3) => picomatch11.parse(p3, options));
-      return parse17(pattern, { ...options, fastpaths: false });
+      return parse16(pattern, { ...options, fastpaths: false });
     };
     picomatch11.scan = (input, options) => scan(input, options);
     picomatch11.compileRe = (state, options, returnOutput = false, returnState = false) => {
@@ -16130,10 +16130,10 @@ var require_picomatch = __commonJS({
       }
       let parsed = { negated: false, fastpaths: true };
       if (options.fastpaths !== false && (input[0] === "." || input[0] === "*")) {
-        parsed.output = parse17.fastpaths(input, options);
+        parsed.output = parse16.fastpaths(input, options);
       }
       if (!parsed.output) {
-        parsed = parse17(input, options);
+        parsed = parse16(input, options);
       }
       return picomatch11.compileRe(parsed, options, returnOutput, returnState);
     };
@@ -16168,9 +16168,9 @@ var require_picomatch2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/format.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/format.js
 var require_format = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/format.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/format.js"(exports2, module2) {
     "use strict";
     var InvalidFormatError = class _InvalidFormatError extends Error {
       constructor(formatFn) {
@@ -16976,9 +16976,9 @@ var require_triple_beam = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/colorize.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/colorize.js
 var require_colorize = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/colorize.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/colorize.js"(exports2, module2) {
     "use strict";
     var colors = require_safe();
     var { LEVEL, MESSAGE } = require_triple_beam();
@@ -17053,9 +17053,9 @@ var require_colorize = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/levels.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/levels.js
 var require_levels = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/levels.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/levels.js"(exports2, module2) {
     "use strict";
     var { Colorizer } = require_colorize();
     module2.exports = (config3) => {
@@ -17065,9 +17065,9 @@ var require_levels = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/align.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/align.js
 var require_align = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/align.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/align.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     module2.exports = format6((info) => {
@@ -17077,9 +17077,9 @@ var require_align = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/errors.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/errors.js
 var require_errors = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/errors.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/errors.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     var { LEVEL, MESSAGE } = require_triple_beam();
@@ -17107,9 +17107,9 @@ var require_errors = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/pad-levels.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/pad-levels.js
 var require_pad_levels = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/pad-levels.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/pad-levels.js"(exports2, module2) {
     "use strict";
     var { configs, LEVEL, MESSAGE } = require_triple_beam();
     var Padder = class _Padder {
@@ -17178,9 +17178,9 @@ var require_pad_levels = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/cli.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/cli.js
 var require_cli2 = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/cli.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/cli.js"(exports2, module2) {
     "use strict";
     var { Colorizer } = require_colorize();
     var { Padder } = require_pad_levels();
@@ -17215,9 +17215,9 @@ var require_cli2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/combine.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/combine.js
 var require_combine = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/combine.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/combine.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     function cascade(formats) {
@@ -17839,9 +17839,9 @@ ${originalIndentation}`;
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/json.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/json.js
 var require_json = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/json.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/json.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     var { MESSAGE } = require_triple_beam();
@@ -17859,9 +17859,9 @@ var require_json = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/label.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/label.js
 var require_label = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/label.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/label.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     module2.exports = format6((info, opts) => {
@@ -17875,9 +17875,9 @@ var require_label = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/logstash.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/logstash.js
 var require_logstash = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/logstash.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/logstash.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     var { MESSAGE } = require_triple_beam();
@@ -17899,9 +17899,9 @@ var require_logstash = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/metadata.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/metadata.js
 var require_metadata = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/metadata.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/metadata.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     function fillExcept(info, fillExceptKeys, metadataKey) {
@@ -17965,7 +17965,7 @@ var require_ms2 = __commonJS({
       options = options || {};
       var type = typeof val2;
       if (type === "string" && val2.length > 0) {
-        return parse17(val2);
+        return parse16(val2);
       } else if (type === "number" && isFinite(val2)) {
         return options.long ? fmtLong(val2) : fmtShort(val2);
       }
@@ -17973,7 +17973,7 @@ var require_ms2 = __commonJS({
         "val is not a non-empty string or a valid number. val=" + JSON.stringify(val2)
       );
     };
-    function parse17(str) {
+    function parse16(str) {
       str = String(str);
       if (str.length > 100) {
         return;
@@ -18068,9 +18068,9 @@ var require_ms2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/ms.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/ms.js
 var require_ms3 = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/ms.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/ms.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     var ms = require_ms2();
@@ -18084,9 +18084,9 @@ var require_ms3 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/pretty-print.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/pretty-print.js
 var require_pretty_print = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/pretty-print.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/pretty-print.js"(exports2, module2) {
     "use strict";
     var inspect = __require("util").inspect;
     var format6 = require_format();
@@ -18102,9 +18102,9 @@ var require_pretty_print = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/printf.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/printf.js
 var require_printf = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/printf.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/printf.js"(exports2, module2) {
     "use strict";
     var { MESSAGE } = require_triple_beam();
     var Printf = class {
@@ -18121,9 +18121,9 @@ var require_printf = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/simple.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/simple.js
 var require_simple = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/simple.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/simple.js"(exports2, module2) {
     "use strict";
     var format6 = require_format();
     var { MESSAGE } = require_triple_beam();
@@ -18145,9 +18145,9 @@ var require_simple = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/splat.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/splat.js
 var require_splat = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/splat.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/splat.js"(exports2, module2) {
     "use strict";
     var util5 = __require("util");
     var { SPLAT } = require_triple_beam();
@@ -18521,7 +18521,7 @@ var require_fecha_umd = __commonJS({
           return literals.shift();
         });
       };
-      function parse17(dateStr, format7, i18n) {
+      function parse16(dateStr, format7, i18n) {
         if (i18n === void 0) {
           i18n = {};
         }
@@ -18616,7 +18616,7 @@ var require_fecha_umd = __commonJS({
       }
       var fecha = {
         format: format6,
-        parse: parse17,
+        parse: parse16,
         defaultI18n,
         setGlobalDateI18n,
         setGlobalDateMasks
@@ -18624,7 +18624,7 @@ var require_fecha_umd = __commonJS({
       exports3.assign = assign;
       exports3.default = fecha;
       exports3.format = format6;
-      exports3.parse = parse17;
+      exports3.parse = parse16;
       exports3.defaultI18n = defaultI18n;
       exports3.setGlobalDateI18n = setGlobalDateI18n;
       exports3.setGlobalDateMasks = setGlobalDateMasks;
@@ -18633,9 +18633,9 @@ var require_fecha_umd = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/timestamp.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/timestamp.js
 var require_timestamp = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/timestamp.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/timestamp.js"(exports2, module2) {
     "use strict";
     var fecha = require_fecha_umd();
     var format6 = require_format();
@@ -18654,9 +18654,9 @@ var require_timestamp = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/uncolorize.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/uncolorize.js
 var require_uncolorize = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/uncolorize.js"(exports2, module2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/uncolorize.js"(exports2, module2) {
     "use strict";
     var colors = require_safe();
     var format6 = require_format();
@@ -18676,9 +18676,9 @@ var require_uncolorize = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/index.js
+// ../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/index.js
 var require_logform = __commonJS({
-  "../../node_modules/.pnpm/logform@2.6.0/node_modules/logform/index.js"(exports2) {
+  "../../node_modules/.pnpm/logform@2.7.0/node_modules/logform/index.js"(exports2) {
     "use strict";
     var format6 = exports2.format = require_format();
     exports2.levels = require_levels();
@@ -21363,9 +21363,9 @@ var require_stream_writable = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/winston-transport@4.7.0/node_modules/winston-transport/modern.js
+// ../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/modern.js
 var require_modern = __commonJS({
-  "../../node_modules/.pnpm/winston-transport@4.7.0/node_modules/winston-transport/modern.js"(exports2, module2) {
+  "../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/modern.js"(exports2, module2) {
     "use strict";
     var util5 = __require("util");
     var Writable = require_stream_writable();
@@ -21475,9 +21475,9 @@ var require_modern = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/winston-transport@4.7.0/node_modules/winston-transport/legacy.js
+// ../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/legacy.js
 var require_legacy = __commonJS({
-  "../../node_modules/.pnpm/winston-transport@4.7.0/node_modules/winston-transport/legacy.js"(exports2, module2) {
+  "../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/legacy.js"(exports2, module2) {
     "use strict";
     var util5 = __require("util");
     var { LEVEL } = require_triple_beam();
@@ -21541,9 +21541,9 @@ var require_legacy = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/winston-transport@4.7.0/node_modules/winston-transport/index.js
+// ../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/index.js
 var require_winston_transport = __commonJS({
-  "../../node_modules/.pnpm/winston-transport@4.7.0/node_modules/winston-transport/index.js"(exports2, module2) {
+  "../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/index.js"(exports2, module2) {
     "use strict";
     module2.exports = require_modern();
     module2.exports.LegacyTransportStream = require_legacy();
@@ -25169,7 +25169,7 @@ var require_http = __commonJS({
   "../../node_modules/.pnpm/winston@3.16.0/node_modules/winston/lib/winston/transports/http.js"(exports2, module2) {
     "use strict";
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var { Stream: Stream2 } = require_readable();
     var TransportStream = require_winston_transport();
     var { configure } = require_safe_stable_stringify();
@@ -25361,7 +25361,7 @@ var require_http = __commonJS({
         if (auth && auth.bearer) {
           headers.Authorization = `Bearer ${auth.bearer}`;
         }
-        const req = (this.ssl ? https2 : http2).request({
+        const req = (this.ssl ? https3 : http2).request({
           ...this.options,
           method: "POST",
           host: this.host,
@@ -27084,7 +27084,7 @@ var require_is_retry_allowed = __commonJS({
 var require_hpagent = __commonJS({
   "../../node_modules/.pnpm/hpagent@1.2.0/node_modules/hpagent/index.js"(exports2, module2) {
     "use strict";
-    var https2 = __require("https");
+    var https3 = __require("https");
     var http2 = __require("http");
     var { URL: URL3 } = __require("url");
     var HttpProxyAgent2 = class extends http2.Agent {
@@ -27113,7 +27113,7 @@ var require_hpagent = __commonJS({
         if (this.proxy.protocol === "https:") {
           requestOptions.servername = this.proxy.hostname;
         }
-        const request = (this.proxy.protocol === "http:" ? http2 : https2).request(requestOptions);
+        const request = (this.proxy.protocol === "http:" ? http2 : https3).request(requestOptions);
         request.once("connect", (response, socket, head) => {
           request.removeAllListeners();
           socket.removeAllListeners();
@@ -27134,7 +27134,7 @@ var require_hpagent = __commonJS({
         request.end();
       }
     };
-    var HttpsProxyAgent2 = class extends https2.Agent {
+    var HttpsProxyAgent2 = class extends https3.Agent {
       constructor(options) {
         const { proxy, proxyRequestOptions, ...opts } = options;
         super(opts);
@@ -27160,7 +27160,7 @@ var require_hpagent = __commonJS({
         if (this.proxy.protocol === "https:") {
           requestOptions.servername = this.proxy.hostname;
         }
-        const request = (this.proxy.protocol === "http:" ? http2 : https2).request(requestOptions);
+        const request = (this.proxy.protocol === "http:" ? http2 : https3).request(requestOptions);
         request.once("connect", (response, socket, head) => {
           request.removeAllListeners();
           socket.removeAllListeners();
@@ -37910,7 +37910,7 @@ var require_parse2 = __commonJS({
       CHAR_NO_BREAK_SPACE,
       CHAR_ZERO_WIDTH_NOBREAK_SPACE
     } = require_constants2();
-    var parse17 = (input, options = {}) => {
+    var parse16 = (input, options = {}) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected a string");
       }
@@ -38112,7 +38112,7 @@ var require_parse2 = __commonJS({
       push2({ type: "eos" });
       return ast;
     };
-    module2.exports = parse17;
+    module2.exports = parse16;
   }
 });
 
@@ -38123,7 +38123,7 @@ var require_braces = __commonJS({
     var stringify3 = require_stringify();
     var compile4 = require_compile();
     var expand2 = require_expand();
-    var parse17 = require_parse2();
+    var parse16 = require_parse2();
     var braces = (input, options = {}) => {
       let output = [];
       if (Array.isArray(input)) {
@@ -38143,7 +38143,7 @@ var require_braces = __commonJS({
       }
       return output;
     };
-    braces.parse = (input, options = {}) => parse17(input, options);
+    braces.parse = (input, options = {}) => parse16(input, options);
     braces.stringify = (input, options = {}) => {
       if (typeof input === "string") {
         return stringify3(braces.parse(input, options), options);
@@ -38796,7 +38796,7 @@ var require_parse3 = __commonJS({
     var syntaxError = (type, char) => {
       return `Missing ${type}: "${char}" - use "\\\\${char}" to match literal characters`;
     };
-    var parse17 = (input, options) => {
+    var parse16 = (input, options) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected a string");
       }
@@ -38945,7 +38945,7 @@ var require_parse3 = __commonJS({
             output = token.close = `)$))${extglobStar}`;
           }
           if (token.inner.includes("*") && (rest = remaining()) && /^\.[^\\/.]+$/.test(rest)) {
-            const expression = parse17(rest, { ...options, fastpaths: false }).output;
+            const expression = parse16(rest, { ...options, fastpaths: false }).output;
             output = token.close = `)${expression})${extglobStar})`;
           }
           if (token.prev.type === "bos") {
@@ -39470,7 +39470,7 @@ var require_parse3 = __commonJS({
       }
       return state;
     };
-    parse17.fastpaths = (input, options) => {
+    parse16.fastpaths = (input, options) => {
       const opts = { ...options };
       const max = typeof opts.maxLength === "number" ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
       const len = input.length;
@@ -39536,7 +39536,7 @@ var require_parse3 = __commonJS({
       }
       return source;
     };
-    module2.exports = parse17;
+    module2.exports = parse16;
   }
 });
 
@@ -39546,7 +39546,7 @@ var require_picomatch3 = __commonJS({
     "use strict";
     var path9 = __require("path");
     var scan = require_scan2();
-    var parse17 = require_parse3();
+    var parse16 = require_parse3();
     var utils = require_utils3();
     var constants4 = require_constants3();
     var isObject2 = (val2) => val2 && typeof val2 === "object" && !Array.isArray(val2);
@@ -39634,7 +39634,7 @@ var require_picomatch3 = __commonJS({
     picomatch11.isMatch = (str, patterns, options) => picomatch11(patterns, options)(str);
     picomatch11.parse = (pattern, options) => {
       if (Array.isArray(pattern)) return pattern.map((p3) => picomatch11.parse(p3, options));
-      return parse17(pattern, { ...options, fastpaths: false });
+      return parse16(pattern, { ...options, fastpaths: false });
     };
     picomatch11.scan = (input, options) => scan(input, options);
     picomatch11.compileRe = (state, options, returnOutput = false, returnState = false) => {
@@ -39660,10 +39660,10 @@ var require_picomatch3 = __commonJS({
       }
       let parsed = { negated: false, fastpaths: true };
       if (options.fastpaths !== false && (input[0] === "." || input[0] === "*")) {
-        parsed.output = parse17.fastpaths(input, options);
+        parsed.output = parse16.fastpaths(input, options);
       }
       if (!parsed.output) {
-        parsed = parse17(input, options);
+        parsed = parse16(input, options);
       }
       return picomatch11.compileRe(parsed, options, returnOutput, returnState);
     };
@@ -40282,7 +40282,7 @@ var require_parse4 = __commonJS({
   "../../node_modules/.pnpm/semver@7.7.2/node_modules/semver/functions/parse.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var parse17 = (version4, options, throwErrors = false) => {
+    var parse16 = (version4, options, throwErrors = false) => {
       if (version4 instanceof SemVer) {
         return version4;
       }
@@ -40295,7 +40295,7 @@ var require_parse4 = __commonJS({
         throw er;
       }
     };
-    module2.exports = parse17;
+    module2.exports = parse16;
   }
 });
 
@@ -40303,9 +40303,9 @@ var require_parse4 = __commonJS({
 var require_valid = __commonJS({
   "../../node_modules/.pnpm/semver@7.7.2/node_modules/semver/functions/valid.js"(exports2, module2) {
     "use strict";
-    var parse17 = require_parse4();
+    var parse16 = require_parse4();
     var valid = (version4, options) => {
-      const v = parse17(version4, options);
+      const v = parse16(version4, options);
       return v ? v.version : null;
     };
     module2.exports = valid;
@@ -40316,9 +40316,9 @@ var require_valid = __commonJS({
 var require_clean = __commonJS({
   "../../node_modules/.pnpm/semver@7.7.2/node_modules/semver/functions/clean.js"(exports2, module2) {
     "use strict";
-    var parse17 = require_parse4();
+    var parse16 = require_parse4();
     var clean = (version4, options) => {
-      const s6 = parse17(version4.trim().replace(/^[=v]+/, ""), options);
+      const s6 = parse16(version4.trim().replace(/^[=v]+/, ""), options);
       return s6 ? s6.version : null;
     };
     module2.exports = clean;
@@ -40353,10 +40353,10 @@ var require_inc = __commonJS({
 var require_diff = __commonJS({
   "../../node_modules/.pnpm/semver@7.7.2/node_modules/semver/functions/diff.js"(exports2, module2) {
     "use strict";
-    var parse17 = require_parse4();
+    var parse16 = require_parse4();
     var diff = (version1, version22) => {
-      const v12 = parse17(version1, null, true);
-      const v2 = parse17(version22, null, true);
+      const v12 = parse16(version1, null, true);
+      const v2 = parse16(version22, null, true);
       const comparison = v12.compare(v2);
       if (comparison === 0) {
         return null;
@@ -40427,9 +40427,9 @@ var require_patch = __commonJS({
 var require_prerelease = __commonJS({
   "../../node_modules/.pnpm/semver@7.7.2/node_modules/semver/functions/prerelease.js"(exports2, module2) {
     "use strict";
-    var parse17 = require_parse4();
+    var parse16 = require_parse4();
     var prerelease = (version4, options) => {
-      const parsed = parse17(version4, options);
+      const parsed = parse16(version4, options);
       return parsed && parsed.prerelease.length ? parsed.prerelease : null;
     };
     module2.exports = prerelease;
@@ -40615,7 +40615,7 @@ var require_coerce = __commonJS({
   "../../node_modules/.pnpm/semver@7.7.2/node_modules/semver/functions/coerce.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var parse17 = require_parse4();
+    var parse16 = require_parse4();
     var { safeRe: re, t: t4 } = require_re();
     var coerce = (version4, options) => {
       if (version4 instanceof SemVer) {
@@ -40650,7 +40650,7 @@ var require_coerce = __commonJS({
       const patch = match2[4] || "0";
       const prerelease = options.includePrerelease && match2[5] ? `-${match2[5]}` : "";
       const build = options.includePrerelease && match2[6] ? `+${match2[6]}` : "";
-      return parse17(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+      return parse16(`${major}.${minor}.${patch}${prerelease}${build}`, options);
     };
     module2.exports = coerce;
   }
@@ -41666,7 +41666,7 @@ var require_semver2 = __commonJS({
     var constants4 = require_constants4();
     var SemVer = require_semver();
     var identifiers = require_identifiers();
-    var parse17 = require_parse4();
+    var parse16 = require_parse4();
     var valid = require_valid();
     var clean = require_clean();
     var inc = require_inc();
@@ -41704,7 +41704,7 @@ var require_semver2 = __commonJS({
     var simplifyRange = require_simplify();
     var subset = require_subset();
     module2.exports = {
-      parse: parse17,
+      parse: parse16,
       valid,
       clean,
       inc,
@@ -56593,7 +56593,7 @@ var require_parse5 = __commonJS({
       }
       return parsed;
     }
-    function parse17(command, args2, options) {
+    function parse16(command, args2, options) {
       if (args2 && !Array.isArray(args2)) {
         options = args2;
         args2 = null;
@@ -56612,7 +56612,7 @@ var require_parse5 = __commonJS({
       };
       return options.shell ? parsed : parseNonShell(parsed);
     }
-    module2.exports = parse17;
+    module2.exports = parse16;
   }
 });
 
@@ -56671,16 +56671,16 @@ var require_cross_spawn = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/index.js"(exports2, module2) {
     "use strict";
     var cp5 = __require("child_process");
-    var parse17 = require_parse5();
+    var parse16 = require_parse5();
     var enoent = require_enoent();
     function spawn(command, args2, options) {
-      const parsed = parse17(command, args2, options);
+      const parsed = parse16(command, args2, options);
       const spawned = cp5.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
     function spawnSync(command, args2, options) {
-      const parsed = parse17(command, args2, options);
+      const parsed = parse16(command, args2, options);
       const result = cp5.spawnSync(parsed.command, parsed.args, parsed.options);
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
@@ -56688,7 +56688,7 @@ var require_cross_spawn = __commonJS({
     module2.exports = spawn;
     module2.exports.spawn = spawn;
     module2.exports.sync = spawnSync;
-    module2.exports._parse = parse17;
+    module2.exports._parse = parse16;
     module2.exports._enoent = enoent;
   }
 });
@@ -58053,7 +58053,7 @@ var require_rfc4648 = __commonJS({
   "../../node_modules/.pnpm/rfc4648@1.5.3/node_modules/rfc4648/lib/cjs/rfc4648.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    function parse17(string, encoding, opts) {
+    function parse16(string, encoding, opts) {
       var _opts$out;
       if (opts === void 0) {
         opts = {};
@@ -58144,7 +58144,7 @@ var require_rfc4648 = __commonJS({
     };
     var base16 = {
       parse: function parse$1(string, opts) {
-        return parse17(string.toUpperCase(), base16Encoding, opts);
+        return parse16(string.toUpperCase(), base16Encoding, opts);
       },
       stringify: function stringify$1(data2, opts) {
         return stringify3(data2, base16Encoding, opts);
@@ -58155,7 +58155,7 @@ var require_rfc4648 = __commonJS({
         if (opts === void 0) {
           opts = {};
         }
-        return parse17(opts.loose ? string.toUpperCase().replace(/0/g, "O").replace(/1/g, "L").replace(/8/g, "B") : string, base32Encoding, opts);
+        return parse16(opts.loose ? string.toUpperCase().replace(/0/g, "O").replace(/1/g, "L").replace(/8/g, "B") : string, base32Encoding, opts);
       },
       stringify: function stringify$1(data2, opts) {
         return stringify3(data2, base32Encoding, opts);
@@ -58163,7 +58163,7 @@ var require_rfc4648 = __commonJS({
     };
     var base32hex = {
       parse: function parse$1(string, opts) {
-        return parse17(string, base32HexEncoding, opts);
+        return parse16(string, base32HexEncoding, opts);
       },
       stringify: function stringify$1(data2, opts) {
         return stringify3(data2, base32HexEncoding, opts);
@@ -58171,7 +58171,7 @@ var require_rfc4648 = __commonJS({
     };
     var base64 = {
       parse: function parse$1(string, opts) {
-        return parse17(string, base64Encoding, opts);
+        return parse16(string, base64Encoding, opts);
       },
       stringify: function stringify$1(data2, opts) {
         return stringify3(data2, base64Encoding, opts);
@@ -58179,14 +58179,14 @@ var require_rfc4648 = __commonJS({
     };
     var base64url = {
       parse: function parse$1(string, opts) {
-        return parse17(string, base64UrlEncoding, opts);
+        return parse16(string, base64UrlEncoding, opts);
       },
       stringify: function stringify$1(data2, opts) {
         return stringify3(data2, base64UrlEncoding, opts);
       }
     };
     var codec = {
-      parse: parse17,
+      parse: parse16,
       stringify: stringify3
     };
     exports2.base16 = base16;
@@ -58335,7 +58335,7 @@ var require_lib17 = __commonJS({
       return `${pkgName}@${reference}`;
     }
     exports2.refToRelative = refToRelative;
-    function parse17(dependencyPath) {
+    function parse16(dependencyPath) {
       if (typeof dependencyPath !== "string") {
         throw new TypeError(`Expected \`dependencyPath\` to be of type \`string\`, got \`${// eslint-disable-next-line: strict-type-predicates
         dependencyPath === null ? "null" : typeof dependencyPath}\``);
@@ -58380,7 +58380,7 @@ var require_lib17 = __commonJS({
       }
       return {};
     }
-    exports2.parse = parse17;
+    exports2.parse = parse16;
     function depPathToFilename(depPath, maxLengthWithoutHash) {
       let filename = depPathToFilenameUnescaped(depPath).replace(/[\\/:*?"<>|]/g, "+");
       if (filename.includes("(")) {
@@ -59319,7 +59319,7 @@ var require_dist3 = __commonJS({
     "use strict";
     exports2 = module2.exports = fetch2;
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var zlib2 = __require("zlib");
     var Stream2 = __require("stream");
     var dataUriToBuffer = require_src2();
@@ -60074,7 +60074,7 @@ var require_dist3 = __commonJS({
           resolve45(response2);
           return;
         }
-        const send = (options.protocol === "https:" ? https2 : http2).request;
+        const send = (options.protocol === "https:" ? https3 : http2).request;
         const { signal } = request;
         let response = null;
         const abort = () => {
@@ -66148,7 +66148,7 @@ var require_agent5 = __commonJS({
     function getNonProxyAgent(uri, opts) {
       const parsedUri = new url_1.URL(uri);
       const isHttps2 = parsedUri.protocol === "https:";
-      const { ca, cert, key: certKey } = {
+      const { ca: ca2, cert, key: certKey } = {
         ...opts,
         ...(0, network_config_1.pickSettingByUrl)(opts.clientCertificates, uri)
       };
@@ -66156,7 +66156,7 @@ var require_agent5 = __commonJS({
         `https:${isHttps2.toString()}`,
         `local-address:${opts.localAddress ?? ">no-local-address<"}`,
         `strict-ssl:${isHttps2 ? Boolean(opts.strictSsl).toString() : ">no-strict-ssl<"}`,
-        `ca:${isHttps2 && ca?.toString() || ">no-ca<"}`,
+        `ca:${isHttps2 && ca2?.toString() || ">no-ca<"}`,
         `cert:${isHttps2 && cert?.toString() || ">no-cert<"}`,
         `key:${isHttps2 && certKey?.toString() || ">no-key<"}`
       ].join(":");
@@ -66165,7 +66165,7 @@ var require_agent5 = __commonJS({
       }
       const agentTimeout = typeof opts.timeout !== "number" || opts.timeout === 0 ? 0 : opts.timeout + 1;
       const agent = isHttps2 ? new HttpsAgent({
-        ca,
+        ca: ca2,
         cert,
         key: certKey,
         localAddress: opts.localAddress,
@@ -71258,13 +71258,13 @@ var require_lockfile = __commonJS({
           }
           concat(integrity, opts) {
             const other = typeof integrity === "string" ? integrity : stringify3(integrity, opts);
-            return parse17(`${this.toString(opts)} ${other}`, opts);
+            return parse16(`${this.toString(opts)} ${other}`, opts);
           }
           hexDigest() {
-            return parse17(this, { single: true }).hexDigest();
+            return parse16(this, { single: true }).hexDigest();
           }
           match(integrity, opts) {
-            const other = parse17(integrity, opts);
+            const other = parse16(integrity, opts);
             const algo = other.pickAlgorithm(opts);
             return this[algo] && other[algo] && this[algo].find(
               (hash) => other[algo].find(
@@ -71283,8 +71283,8 @@ var require_lockfile = __commonJS({
             });
           }
         }
-        module3.exports.parse = parse17;
-        function parse17(sri, opts) {
+        module3.exports.parse = parse16;
+        function parse16(sri, opts) {
           opts = opts || {};
           if (typeof sri === "string") {
             return _parse(sri, opts);
@@ -71317,7 +71317,7 @@ var require_lockfile = __commonJS({
           if (obj.algorithm && obj.digest) {
             return Hash.prototype.toString.call(obj, opts);
           } else if (typeof obj === "string") {
-            return stringify3(parse17(obj, opts), opts);
+            return stringify3(parse16(obj, opts), opts);
           } else {
             return Integrity.prototype.toString.call(obj, opts);
           }
@@ -71325,7 +71325,7 @@ var require_lockfile = __commonJS({
         module3.exports.fromHex = fromHex;
         function fromHex(hexDigest, algorithm, opts) {
           const optString = opts && opts.options && opts.options.length ? `?${opts.options.join("?")}` : "";
-          return parse17(
+          return parse16(
             `${algorithm}-${Buffer3.from(hexDigest, "hex").toString("base64")}${optString}`,
             opts
           );
@@ -71372,7 +71372,7 @@ var require_lockfile = __commonJS({
         module3.exports.checkData = checkData;
         function checkData(data2, sri, opts) {
           opts = opts || {};
-          sri = parse17(sri, opts);
+          sri = parse16(sri, opts);
           if (!Object.keys(sri).length) {
             if (opts.error) {
               throw Object.assign(
@@ -71387,7 +71387,7 @@ var require_lockfile = __commonJS({
           }
           const algorithm = sri.pickAlgorithm(opts);
           const digest = crypto7.createHash(algorithm).update(data2).digest("base64");
-          const newSri = parse17({ algorithm, digest });
+          const newSri = parse16({ algorithm, digest });
           const match2 = newSri.match(sri, opts);
           if (match2 || !opts.error) {
             return match2;
@@ -71433,7 +71433,7 @@ var require_lockfile = __commonJS({
         module3.exports.integrityStream = integrityStream;
         function integrityStream(opts) {
           opts = opts || {};
-          const sri = opts.integrity && parse17(opts.integrity, opts);
+          const sri = opts.integrity && parse16(opts.integrity, opts);
           const goodSri = sri && Object.keys(sri).length;
           const algorithm = goodSri && sri.pickAlgorithm(opts);
           const digests = goodSri && sri[algorithm];
@@ -71452,7 +71452,7 @@ var require_lockfile = __commonJS({
             }
           }).on("end", () => {
             const optString = opts.options && opts.options.length ? `?${opts.options.join("?")}` : "";
-            const newSri = parse17(hashes.map((h, i7) => {
+            const newSri = parse16(hashes.map((h, i7) => {
               return `${algorithms[i7]}-${h.digest("base64")}${optString}`;
             }).join(" "), opts);
             const match2 = goodSri && newSri.match(sri, opts);
@@ -71704,9 +71704,9 @@ var require_lockfile = __commonJS({
           }
           return expand2(pattern);
         }
-        Minimatch2.prototype.parse = parse17;
+        Minimatch2.prototype.parse = parse16;
         var SUBPARSE = {};
-        function parse17(pattern, isSub) {
+        function parse16(pattern, isSub) {
           if (pattern.length > 1024 * 64) {
             throw new TypeError("pattern is too long");
           }
@@ -72806,7 +72806,7 @@ var require_lockfile = __commonJS({
         });
         exports3.default = function(str, fileLoc = "lockfile") {
           str = (0, (_stripBom || _load_stripBom()).default)(str);
-          return hasMergeConflicts(str) ? parseWithConflict(str, fileLoc) : { type: "success", object: parse17(str, fileLoc) };
+          return hasMergeConflicts(str) ? parseWithConflict(str, fileLoc) : { type: "success", object: parse16(str, fileLoc) };
         };
         var _util;
         function _load_util() {
@@ -73135,7 +73135,7 @@ var require_lockfile = __commonJS({
         function hasMergeConflicts(str) {
           return str.includes(MERGE_CONFLICT_START) && str.includes(MERGE_CONFLICT_SEP) && str.includes(MERGE_CONFLICT_END);
         }
-        function parse17(str, fileLoc) {
+        function parse16(str, fileLoc) {
           const parser2 = new Parser5(str, fileLoc);
           parser2.next();
           return parser2.parse();
@@ -73143,7 +73143,7 @@ var require_lockfile = __commonJS({
         function parseWithConflict(str, fileLoc) {
           const variants = extractConflictVariants(str);
           try {
-            return { type: "merge", object: Object.assign({}, parse17(variants[0], fileLoc), parse17(variants[1], fileLoc)) };
+            return { type: "merge", object: Object.assign({}, parse16(variants[0], fileLoc), parse16(variants[1], fileLoc)) };
           } catch (err) {
             if (err instanceof SyntaxError) {
               return { type: "conflict", object: {} };
@@ -76517,7 +76517,7 @@ ${indent3}`);
           options = options || {};
           var type = typeof val2;
           if (type === "string" && val2.length > 0) {
-            return parse17(val2);
+            return parse16(val2);
           } else if (type === "number" && isNaN(val2) === false) {
             return options.long ? fmtLong(val2) : fmtShort(val2);
           }
@@ -76525,7 +76525,7 @@ ${indent3}`);
             "val is not a non-empty string or a valid number. val=" + JSON.stringify(val2)
           );
         };
-        function parse17(str) {
+        function parse16(str) {
           str = String(str);
           if (str.length > 100) {
             return;
@@ -86033,7 +86033,7 @@ var require_identity = __commonJS({
     var isMap = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === MAP;
     var isPair = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === PAIR;
     var isScalar = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SCALAR;
-    var isSeq = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SEQ;
+    var isSeq2 = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SEQ;
     function isCollection(node) {
       if (node && typeof node === "object")
         switch (node[NODE_TYPE]) {
@@ -86070,7 +86070,7 @@ var require_identity = __commonJS({
     exports2.isNode = isNode2;
     exports2.isPair = isPair;
     exports2.isScalar = isScalar;
-    exports2.isSeq = isSeq;
+    exports2.isSeq = isSeq2;
   }
 });
 
@@ -93089,7 +93089,7 @@ var require_public_api = __commonJS({
         return docs;
       return Object.assign([], { empty: true }, composer$1.streamInfo());
     }
-    function parseDocument2(source, options = {}) {
+    function parseDocument3(source, options = {}) {
       const { lineCounter: lineCounter2, prettyErrors } = parseOptions(options);
       const parser$1 = new parser2.Parser(lineCounter2?.addNewLine);
       const composer$1 = new composer.Composer(options);
@@ -93108,14 +93108,14 @@ var require_public_api = __commonJS({
       }
       return doc;
     }
-    function parse17(src, reviver, options) {
+    function parse16(src, reviver, options) {
       let _reviver = void 0;
       if (typeof reviver === "function") {
         _reviver = reviver;
       } else if (options === void 0 && reviver && typeof reviver === "object") {
         options = reviver;
       }
-      const doc = parseDocument2(src, options);
+      const doc = parseDocument3(src, options);
       if (!doc)
         return null;
       doc.warnings.forEach((warning) => log2.warn(doc.options.logLevel, warning));
@@ -93147,9 +93147,9 @@ var require_public_api = __commonJS({
       }
       return new Document2.Document(value2, _replacer, options).toString(options);
     }
-    exports2.parse = parse17;
+    exports2.parse = parse16;
     exports2.parseAllDocuments = parseAllDocuments;
-    exports2.parseDocument = parseDocument2;
+    exports2.parseDocument = parseDocument3;
     exports2.stringify = stringify3;
   }
 });
@@ -100367,7 +100367,7 @@ var require_tunnel = __commonJS({
     var net = __require("net");
     var tls = __require("tls");
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var events = __require("events");
     var assert17 = __require("assert");
     var util5 = __require("util");
@@ -100389,12 +100389,12 @@ var require_tunnel = __commonJS({
     }
     function httpOverHttps(options) {
       var agent = new TunnelingAgent(options);
-      agent.request = https2.request;
+      agent.request = https3.request;
       return agent;
     }
     function httpsOverHttps(options) {
       var agent = new TunnelingAgent(options);
-      agent.request = https2.request;
+      agent.request = https3.request;
       agent.createSocket = createSecureSocket;
       agent.defaultPort = 443;
       return agent;
@@ -117417,7 +117417,7 @@ var require_lib28 = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.HttpClient = exports2.isHttps = exports2.HttpClientResponse = exports2.HttpClientError = exports2.getProxyUrl = exports2.MediaTypes = exports2.Headers = exports2.HttpCodes = void 0;
     var http2 = __importStar(__require("http"));
-    var https2 = __importStar(__require("https"));
+    var https3 = __importStar(__require("https"));
     var pm = __importStar(require_proxy());
     var tunnel = __importStar(require_tunnel2());
     var undici_1 = require_undici();
@@ -117808,7 +117808,7 @@ var require_lib28 = __commonJS({
         const info = {};
         info.parsedUrl = requestUrl;
         const usingSsl = info.parsedUrl.protocol === "https:";
-        info.httpModule = usingSsl ? https2 : http2;
+        info.httpModule = usingSsl ? https3 : http2;
         const defaultPort = usingSsl ? 443 : 80;
         info.options = {};
         info.options.host = info.parsedUrl.hostname;
@@ -117878,7 +117878,7 @@ var require_lib28 = __commonJS({
         }
         if (!agent) {
           const options = { keepAlive: this._keepAlive, maxSockets };
-          agent = usingSsl ? new https2.Agent(options) : new http2.Agent(options);
+          agent = usingSsl ? new https3.Agent(options) : new http2.Agent(options);
           this._agent = agent;
         }
         if (usingSsl && this._ignoreSslError) {
@@ -119483,9 +119483,9 @@ var require_minimatch = __commonJS({
         throw new TypeError("pattern is too long");
       }
     };
-    Minimatch2.prototype.parse = parse17;
+    Minimatch2.prototype.parse = parse16;
     var SUBPARSE = {};
-    function parse17(pattern, isSub) {
+    function parse16(pattern, isSub) {
       assertValidPattern2(pattern);
       var options = this.options;
       if (pattern === "**") {
@@ -142332,7 +142332,7 @@ var require_dist_node2 = __commonJS({
         return template.replace(/\/$/, "");
       }
     }
-    function parse17(options) {
+    function parse16(options) {
       let method = options.method.toUpperCase();
       let url2 = (options.url || "/").replace(/:([a-z]\w+)/g, "{$1}");
       let headers = Object.assign({}, options.headers);
@@ -142396,7 +142396,7 @@ var require_dist_node2 = __commonJS({
       );
     }
     function endpointWithDefaults(defaults3, route, options) {
-      return parse17(merge5(defaults3, route, options));
+      return parse16(merge5(defaults3, route, options));
     }
     function withDefaults(oldDefaults, newDefaults) {
       const DEFAULTS2 = merge5(oldDefaults, newDefaults);
@@ -142405,7 +142405,7 @@ var require_dist_node2 = __commonJS({
         DEFAULTS: DEFAULTS2,
         defaults: withDefaults.bind(null, DEFAULTS2),
         merge: merge5.bind(null, DEFAULTS2),
-        parse: parse17
+        parse: parse16
       });
     }
     var endpoint = withDefaults(null, DEFAULTS);
@@ -147258,7 +147258,7 @@ var require_parse8 = __commonJS({
       CHAR_NO_BREAK_SPACE,
       CHAR_ZERO_WIDTH_NOBREAK_SPACE
     } = require_constants18();
-    var parse17 = (input, options = {}) => {
+    var parse16 = (input, options = {}) => {
       if (typeof input !== "string") {
         throw new TypeError("Expected a string");
       }
@@ -147458,7 +147458,7 @@ var require_parse8 = __commonJS({
       push2({ type: "eos" });
       return ast;
     };
-    module2.exports = parse17;
+    module2.exports = parse16;
   }
 });
 
@@ -147469,7 +147469,7 @@ var require_braces2 = __commonJS({
     var stringify3 = require_stringify4();
     var compile4 = require_compile2();
     var expand2 = require_expand2();
-    var parse17 = require_parse8();
+    var parse16 = require_parse8();
     var braces = (input, options = {}) => {
       let output = [];
       if (Array.isArray(input)) {
@@ -147489,7 +147489,7 @@ var require_braces2 = __commonJS({
       }
       return output;
     };
-    braces.parse = (input, options = {}) => parse17(input, options);
+    braces.parse = (input, options = {}) => parse16(input, options);
     braces.stringify = (input, options = {}) => {
       if (typeof input === "string") {
         return stringify3(braces.parse(input, options), options);
@@ -147686,193 +147686,6 @@ var require_micromatch2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/modern.js
-var require_modern2 = __commonJS({
-  "../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/modern.js"(exports2, module2) {
-    "use strict";
-    var util5 = __require("util");
-    var Writable = require_stream_writable();
-    var { LEVEL } = require_triple_beam();
-    var TransportStream = module2.exports = function TransportStream2(options = {}) {
-      Writable.call(this, { objectMode: true, highWaterMark: options.highWaterMark });
-      this.format = options.format;
-      this.level = options.level;
-      this.handleExceptions = options.handleExceptions;
-      this.handleRejections = options.handleRejections;
-      this.silent = options.silent;
-      if (options.log) this.log = options.log;
-      if (options.logv) this.logv = options.logv;
-      if (options.close) this.close = options.close;
-      this.once("pipe", (logger4) => {
-        this.levels = logger4.levels;
-        this.parent = logger4;
-      });
-      this.once("unpipe", (src) => {
-        if (src === this.parent) {
-          this.parent = null;
-          if (this.close) {
-            this.close();
-          }
-        }
-      });
-    };
-    util5.inherits(TransportStream, Writable);
-    TransportStream.prototype._write = function _write2(info, enc, callback) {
-      if (this.silent || info.exception === true && !this.handleExceptions) {
-        return callback(null);
-      }
-      const level = this.level || this.parent && this.parent.level;
-      if (!level || this.levels[level] >= this.levels[info[LEVEL]]) {
-        if (info && !this.format) {
-          return this.log(info, callback);
-        }
-        let errState;
-        let transformed;
-        try {
-          transformed = this.format.transform(Object.assign({}, info), this.format.options);
-        } catch (err) {
-          errState = err;
-        }
-        if (errState || !transformed) {
-          callback();
-          if (errState) throw errState;
-          return;
-        }
-        return this.log(transformed, callback);
-      }
-      this._writableState.sync = false;
-      return callback(null);
-    };
-    TransportStream.prototype._writev = function _writev(chunks, callback) {
-      if (this.logv) {
-        const infos = chunks.filter(this._accept, this);
-        if (!infos.length) {
-          return callback(null);
-        }
-        return this.logv(infos, callback);
-      }
-      for (let i7 = 0; i7 < chunks.length; i7++) {
-        if (!this._accept(chunks[i7])) continue;
-        if (chunks[i7].chunk && !this.format) {
-          this.log(chunks[i7].chunk, chunks[i7].callback);
-          continue;
-        }
-        let errState;
-        let transformed;
-        try {
-          transformed = this.format.transform(
-            Object.assign({}, chunks[i7].chunk),
-            this.format.options
-          );
-        } catch (err) {
-          errState = err;
-        }
-        if (errState || !transformed) {
-          chunks[i7].callback();
-          if (errState) {
-            callback(null);
-            throw errState;
-          }
-        } else {
-          this.log(transformed, chunks[i7].callback);
-        }
-      }
-      return callback(null);
-    };
-    TransportStream.prototype._accept = function _accept(write) {
-      const info = write.chunk;
-      if (this.silent) {
-        return false;
-      }
-      const level = this.level || this.parent && this.parent.level;
-      if (info.exception === true || !level || this.levels[level] >= this.levels[info[LEVEL]]) {
-        if (this.handleExceptions || info.exception !== true) {
-          return true;
-        }
-      }
-      return false;
-    };
-    TransportStream.prototype._nop = function _nop() {
-      return void 0;
-    };
-  }
-});
-
-// ../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/legacy.js
-var require_legacy2 = __commonJS({
-  "../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/legacy.js"(exports2, module2) {
-    "use strict";
-    var util5 = __require("util");
-    var { LEVEL } = require_triple_beam();
-    var TransportStream = require_modern2();
-    var LegacyTransportStream = module2.exports = function LegacyTransportStream2(options = {}) {
-      TransportStream.call(this, options);
-      if (!options.transport || typeof options.transport.log !== "function") {
-        throw new Error("Invalid transport, must be an object with a log method.");
-      }
-      this.transport = options.transport;
-      this.level = this.level || options.transport.level;
-      this.handleExceptions = this.handleExceptions || options.transport.handleExceptions;
-      this._deprecated();
-      function transportError(err) {
-        this.emit("error", err, this.transport);
-      }
-      if (!this.transport.__winstonError) {
-        this.transport.__winstonError = transportError.bind(this);
-        this.transport.on("error", this.transport.__winstonError);
-      }
-    };
-    util5.inherits(LegacyTransportStream, TransportStream);
-    LegacyTransportStream.prototype._write = function _write2(info, enc, callback) {
-      if (this.silent || info.exception === true && !this.handleExceptions) {
-        return callback(null);
-      }
-      if (!this.level || this.levels[this.level] >= this.levels[info[LEVEL]]) {
-        this.transport.log(info[LEVEL], info.message, info, this._nop);
-      }
-      callback(null);
-    };
-    LegacyTransportStream.prototype._writev = function _writev(chunks, callback) {
-      for (let i7 = 0; i7 < chunks.length; i7++) {
-        if (this._accept(chunks[i7])) {
-          this.transport.log(
-            chunks[i7].chunk[LEVEL],
-            chunks[i7].chunk.message,
-            chunks[i7].chunk,
-            this._nop
-          );
-          chunks[i7].callback();
-        }
-      }
-      return callback(null);
-    };
-    LegacyTransportStream.prototype._deprecated = function _deprecated() {
-      console.error([
-        `${this.transport.name} is a legacy winston transport. Consider upgrading: `,
-        "- Upgrade docs: https://github.com/winstonjs/winston/blob/master/UPGRADE-3.0.md"
-      ].join("\n"));
-    };
-    LegacyTransportStream.prototype.close = function close() {
-      if (this.transport.close) {
-        this.transport.close();
-      }
-      if (this.transport.__winstonError) {
-        this.transport.removeListener("error", this.transport.__winstonError);
-        this.transport.__winstonError = null;
-      }
-    };
-  }
-});
-
-// ../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/index.js
-var require_winston_transport2 = __commonJS({
-  "../../node_modules/.pnpm/winston-transport@4.9.0/node_modules/winston-transport/index.js"(exports2, module2) {
-    "use strict";
-    module2.exports = require_modern2();
-    module2.exports.LegacyTransportStream = require_legacy2();
-  }
-});
-
 // ../../node_modules/.pnpm/yaml@2.2.2/node_modules/yaml/dist/nodes/Node.js
 var require_Node2 = __commonJS({
   "../../node_modules/.pnpm/yaml@2.2.2/node_modules/yaml/dist/nodes/Node.js"(exports2) {
@@ -147889,7 +147702,7 @@ var require_Node2 = __commonJS({
     var isMap = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === MAP;
     var isPair = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === PAIR;
     var isScalar = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SCALAR;
-    var isSeq = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SEQ;
+    var isSeq2 = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SEQ;
     function isCollection(node) {
       if (node && typeof node === "object")
         switch (node[NODE_TYPE]) {
@@ -147939,7 +147752,7 @@ var require_Node2 = __commonJS({
     exports2.isNode = isNode2;
     exports2.isPair = isPair;
     exports2.isScalar = isScalar;
-    exports2.isSeq = isSeq;
+    exports2.isSeq = isSeq2;
   }
 });
 
@@ -154834,7 +154647,7 @@ var require_public_api2 = __commonJS({
         return docs;
       return Object.assign([], { empty: true }, composer$1.streamInfo());
     }
-    function parseDocument2(source, options = {}) {
+    function parseDocument3(source, options = {}) {
       const { lineCounter: lineCounter2, prettyErrors } = parseOptions(options);
       const parser$1 = new parser2.Parser(lineCounter2?.addNewLine);
       const composer$1 = new composer.Composer(options);
@@ -154853,14 +154666,14 @@ var require_public_api2 = __commonJS({
       }
       return doc;
     }
-    function parse17(src, reviver, options) {
+    function parse16(src, reviver, options) {
       let _reviver = void 0;
       if (typeof reviver === "function") {
         _reviver = reviver;
       } else if (options === void 0 && reviver && typeof reviver === "object") {
         options = reviver;
       }
-      const doc = parseDocument2(src, options);
+      const doc = parseDocument3(src, options);
       if (!doc)
         return null;
       doc.warnings.forEach((warning) => log2.warn(doc.options.logLevel, warning));
@@ -154892,9 +154705,9 @@ var require_public_api2 = __commonJS({
       }
       return new Document2.Document(value2, _replacer, options).toString(options);
     }
-    exports2.parse = parse17;
+    exports2.parse = parse16;
     exports2.parseAllDocuments = parseAllDocuments;
-    exports2.parseDocument = parseDocument2;
+    exports2.parseDocument = parseDocument3;
     exports2.stringify = stringify3;
   }
 });
@@ -162223,7 +162036,7 @@ var require_bson = __commonJS({
         throw new BSONError("_bsontype must be a string, but was: " + typeof bsontype);
       }
     }
-    function parse17(text3, options) {
+    function parse16(text3, options) {
       const ejsonOptions = {
         useBigInt64: options?.useBigInt64 ?? false,
         relaxed: options?.relaxed ?? true,
@@ -162258,10 +162071,10 @@ var require_bson = __commonJS({
     }
     function EJSONdeserialize(ejson, options) {
       options = options || {};
-      return parse17(JSON.stringify(ejson), options);
+      return parse16(JSON.stringify(ejson), options);
     }
     var EJSON = /* @__PURE__ */ Object.create(null);
-    EJSON.parse = parse17;
+    EJSON.parse = parse16;
     EJSON.stringify = stringify3;
     EJSON.serialize = EJSONserialize;
     EJSON.deserialize = EJSONdeserialize;
@@ -184487,7 +184300,7 @@ var require_parse9 = __commonJS({
     function isWhitespace3(c3) {
       return c3 === 32 || c3 === 9 || c3 === 10 || c3 === 12 || c3 === 13;
     }
-    function parse17(selector) {
+    function parse16(selector) {
       var subselects2 = [];
       var endIndex = parseSelector(subselects2, "".concat(selector), 0);
       if (endIndex < selector.length) {
@@ -184495,7 +184308,7 @@ var require_parse9 = __commonJS({
       }
       return subselects2;
     }
-    exports2.parse = parse17;
+    exports2.parse = parse16;
     function parseSelector(subselects2, selector, selectorIndex) {
       var tokens = [];
       function getName2(offset) {
@@ -188544,16 +188357,16 @@ var require_timespan = __commonJS({
 // ../../node_modules/.pnpm/jsonwebtoken@9.0.2/node_modules/jsonwebtoken/lib/asymmetricKeyDetailsSupported.js
 var require_asymmetricKeyDetailsSupported = __commonJS({
   "../../node_modules/.pnpm/jsonwebtoken@9.0.2/node_modules/jsonwebtoken/lib/asymmetricKeyDetailsSupported.js"(exports2, module2) {
-    var semver2 = require_semver2();
-    module2.exports = semver2.satisfies(process.version, ">=15.7.0");
+    var semver3 = require_semver2();
+    module2.exports = semver3.satisfies(process.version, ">=15.7.0");
   }
 });
 
 // ../../node_modules/.pnpm/jsonwebtoken@9.0.2/node_modules/jsonwebtoken/lib/rsaPssKeyDetailsSupported.js
 var require_rsaPssKeyDetailsSupported = __commonJS({
   "../../node_modules/.pnpm/jsonwebtoken@9.0.2/node_modules/jsonwebtoken/lib/rsaPssKeyDetailsSupported.js"(exports2, module2) {
-    var semver2 = require_semver2();
-    module2.exports = semver2.satisfies(process.version, ">=16.9.0");
+    var semver3 = require_semver2();
+    module2.exports = semver3.satisfies(process.version, ">=16.9.0");
   }
 });
 
@@ -188613,8 +188426,8 @@ var require_validateAsymmetricKey = __commonJS({
 // ../../node_modules/.pnpm/jsonwebtoken@9.0.2/node_modules/jsonwebtoken/lib/psSupported.js
 var require_psSupported = __commonJS({
   "../../node_modules/.pnpm/jsonwebtoken@9.0.2/node_modules/jsonwebtoken/lib/psSupported.js"(exports2, module2) {
-    var semver2 = require_semver2();
-    module2.exports = semver2.satisfies(process.version, "^6.12.0 || >=8.0.0");
+    var semver3 = require_semver2();
+    module2.exports = semver3.satisfies(process.version, "^6.12.0 || >=8.0.0");
   }
 });
 
@@ -194135,7 +193948,7 @@ var require_axios = __commonJS({
     var url2 = __require("url");
     var proxyFromEnv2 = require_proxy_from_env();
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var util5 = __require("util");
     var followRedirects2 = require_follow_redirects();
     var zlib2 = __require("zlib");
@@ -194149,7 +193962,7 @@ var require_axios = __commonJS({
     var url__default = /* @__PURE__ */ _interopDefaultLegacy(url2);
     var proxyFromEnv__default = /* @__PURE__ */ _interopDefaultLegacy(proxyFromEnv2);
     var http__default = /* @__PURE__ */ _interopDefaultLegacy(http2);
-    var https__default = /* @__PURE__ */ _interopDefaultLegacy(https2);
+    var https__default = /* @__PURE__ */ _interopDefaultLegacy(https3);
     var util__default = /* @__PURE__ */ _interopDefaultLegacy(util5);
     var followRedirects__default = /* @__PURE__ */ _interopDefaultLegacy(followRedirects2);
     var zlib__default = /* @__PURE__ */ _interopDefaultLegacy(zlib2);
@@ -197467,7 +197280,7 @@ var require_form_data2 = __commonJS({
     var util5 = __require("util");
     var path9 = __require("path");
     var http2 = __require("http");
-    var https2 = __require("https");
+    var https3 = __require("https");
     var parseUrl = __require("url").parse;
     var fs11 = __require("fs");
     var mime = require_mime_types();
@@ -197733,7 +197546,7 @@ var require_form_data2 = __commonJS({
       }
       options.headers = this.getHeaders(params.headers);
       if (options.protocol == "https:") {
-        request = https2.request(options);
+        request = https3.request(options);
       } else {
         request = http2.request(options);
       }
@@ -203574,6 +203387,7 @@ var CLILogger = class {
         import_winston.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss.SSS" }),
         utilFormatter(),
         import_winston.format.colorize(),
+        // eslint-disable-next-line @typescript-eslint/no-base-to-string
         import_winston.format.printf(({ level, message: message2, label, timestamp }) => `${timestamp} ${label || "-"} ${level}: ${message2}`)
       ),
       transports
@@ -203607,6 +203421,7 @@ var CLILogger = class {
         import_winston.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss.SSS" }),
         utilFormatter(),
         import_winston.format.colorize(),
+        // eslint-disable-next-line @typescript-eslint/no-base-to-string
         import_winston.format.printf(({ level, message: message2, label, timestamp }) => `${timestamp} ${label || "-"} ${level}: ${message2}`)
       ),
       transports: [new import_winston.transports.Console(), socketTransport]
@@ -204007,6 +203822,8 @@ function getPurlType(ecosystem) {
       return "cargo" /* CARGO */;
     case "RUBYGEMS":
       return "gem" /* GEM */;
+    case "COMPOSER":
+      return "composer" /* COMPOSER */;
     default:
       throw Error(`Unsupported ecosystem: ${ecosystem}`);
   }
@@ -204027,6 +203844,8 @@ function getAdvisoryEcosystemFromPurlType(purlType) {
       return "RUST";
     case "gem" /* GEM */:
       return "RUBYGEMS";
+    case "composer" /* COMPOSER */:
+      return "COMPOSER";
     default:
       return void 0;
   }
@@ -204077,6 +203896,8 @@ function getNameFromNamespaceAndName(purlType, namespace2, name2) {
       return name2;
     case "golang" /* GOLANG */:
       return namespace2 ? `${namespace2}/${name2}` : name2;
+    case "composer" /* COMPOSER */:
+      return namespace2 ? `${namespace2}/${name2}` : name2;
     default:
       return name2;
   }
@@ -204264,6 +204085,11 @@ axiosRetry.exponentialDelay = exponentialDelay;
 axiosRetry.isRetryableError = isRetryableError;
 var esm_default = axiosRetry;
 
+// ../utils/src/dashboard-api/axios-aux.ts
+import https2 from "node:https";
+import { readFileSync } from "node:fs";
+import { rootCertificates } from "node:tls";
+
 // ../../node_modules/.pnpm/hpagent@1.2.0/node_modules/hpagent/index.mjs
 var import_index2 = __toESM(require_hpagent(), 1);
 var HttpProxyAgent = import_index2.default.HttpProxyAgent;
@@ -204273,7 +204099,20 @@ var HttpsProxyAgent = import_index2.default.HttpsProxyAgent;
 var import_lodash = __toESM(require_lodash(), 1);
 var { pickBy } = import_lodash.default;
 function getProxyUrl() {
-  return process.env.SOCKET_CLI_API_PROXY;
+  return process.env.SOCKET_CLI_API_PROXY ?? process.env.HTTPS_PROXY ?? process.env.https_proxy ?? process.env.HTTP_PROXY ?? process.env.http_proxy;
+}
+function getExtraCaCerts() {
+  if (process.env.NODE_EXTRA_CA_CERTS) {
+    return void 0;
+  }
+  const certPath = process.env.SSL_CERT_FILE;
+  if (!certPath) return void 0;
+  try {
+    const extraCerts = readFileSync(certPath, "utf-8");
+    return [...rootCertificates, extraCerts];
+  } catch {
+    return void 0;
+  }
 }
 function handleError(error, errorMessage, throwErr = true) {
   if (error instanceof AxiosError2) {
@@ -204286,9 +204125,15 @@ function handleError(error, errorMessage, throwErr = true) {
   }
 }
 var proxyUrl = getProxyUrl();
+var ca = getExtraCaCerts();
 var axiosClient = axios_default.create({
-  httpsAgent: proxyUrl ? new HttpsProxyAgent({ proxy: proxyUrl }) : void 0,
-  httpAgent: proxyUrl ? new HttpProxyAgent({ proxy: proxyUrl }) : void 0
+  httpsAgent: proxyUrl ? new HttpsProxyAgent({ proxy: proxyUrl, ...ca ? { ca, proxyConnectOptions: { ca } } : {} }) : ca ? new https2.Agent({ ca }) : void 0,
+  httpAgent: proxyUrl ? new HttpProxyAgent({ proxy: proxyUrl }) : void 0,
+  // Disable axios's built-in proxy detection from HTTPS_PROXY/HTTP_PROXY env vars.
+  // When hpagent is configured, axios's own proxy handling would conflict with it.
+  // When no proxy is configured, we don't want axios silently routing through an env proxy
+  // without proper TLS/CA handling.
+  proxy: false
 });
 esm_default(axiosClient, {
   retries: 7,
@@ -204870,7 +204715,7 @@ function getSocketAPI() {
 
 // ../utils/src/tool-extractor.ts
 import { createHash } from "node:crypto";
-import { createReadStream, createWriteStream as createWriteStream3, readFileSync, statSync as statSync2 } from "node:fs";
+import { createReadStream, createWriteStream as createWriteStream3, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
 import { copyFile, cp as cp2, mkdir as mkdir4, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
 import { basename as basename3, dirname as dirname5, join as join5 } from "node:path";
@@ -209064,12 +208909,12 @@ var listFileSync = (opt) => {
   }
 };
 var listFile = (opt, _files) => {
-  const parse17 = new Parser(opt);
+  const parse16 = new Parser(opt);
   const readSize = opt.maxReadSize || 16 * 1024 * 1024;
   const file = opt.file;
   const p3 = new Promise((resolve45, reject) => {
-    parse17.on("error", reject);
-    parse17.on("end", resolve45);
+    parse16.on("error", reject);
+    parse16.on("end", resolve45);
     fs2.stat(file, (er, stat5) => {
       if (er) {
         reject(er);
@@ -209079,7 +208924,7 @@ var listFile = (opt, _files) => {
           size: stat5.size
         });
         stream5.on("error", reject);
-        stream5.pipe(parse17);
+        stream5.pipe(parse16);
       }
     });
   });
@@ -211862,7 +211707,7 @@ function getCliVersion() {
   if (cliVersion) return cliVersion;
   try {
     const packageJsonPath = isNexeMode() ? join5(NEXE_VIRTUAL_FS_ROOT, "package.json") : join5(dirname5(dirname5(dirname5(dirname5(__filename)))), "npm-package-cli", "package.json");
-    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    const packageJson = JSON.parse(readFileSync2(packageJsonPath, "utf-8"));
     if (process.env.ALWAYS_REEXTRACT_TOOLS === "true") {
       logger.info("ALWAYS_REEXTRACT_TOOLS is set to true, re-extracting tools");
       const randomVersion = Math.random().toString().slice(2, 8);
@@ -211891,7 +211736,7 @@ function loadChecksums() {
       throw new Error("Tool extraction is only supported in nexe mode");
     }
     const checksumsPath = join5(NEXE_VIRTUAL_FS_ROOT, "checksums.json");
-    return JSON.parse(readFileSync(checksumsPath, "utf-8"));
+    return JSON.parse(readFileSync2(checksumsPath, "utf-8"));
   } catch (error) {
     logger.warn("Failed to load checksums.json:", error);
     throw new Error(
@@ -212278,7 +212123,7 @@ var ecosystemToSupport = {
     }
   },
   COMPOSER: {
-    supportStatus: "no-support",
+    supportStatus: "reachability-analysis-support",
     fixesComputation: false,
     packageManagers: {
       COMPOSER: {
@@ -219001,7 +218846,7 @@ ${indent(1, indentationSize)}`)}
 };
 
 // ../fixing-management/src/fixing-management/npm/npm-socket-upgrade-manager.ts
-import { existsSync as existsSync15 } from "fs";
+import { existsSync as existsSync17 } from "fs";
 import { readFile as readFile20 } from "fs/promises";
 import assert10 from "node:assert";
 import { dirname as dirname14, join as join14, relative as relative10, resolve as resolve24 } from "path";
@@ -225163,7 +225008,7 @@ async function runCommandResolveStdOut4(cmd, dir, options) {
 
 // ../utils/dist/package-utils.js
 import { parse as parse5, join as join11, resolve as resolve17, normalize as normalize2, dirname as dirname12, basename as basename5, relative as relative5 } from "path";
-import { existsSync as existsSync11, readFileSync as readFileSync2, readdirSync as readdirSync2, statSync as statSync3, writeFileSync } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync3, writeFileSync } from "fs";
 function getPackageJsonObject(workspaceRoot) {
   const packageJSONContent = getPackageJsonContent(workspaceRoot);
   if (!packageJSONContent)
@@ -225173,7 +225018,7 @@ function getPackageJsonObject(workspaceRoot) {
 function getPackageJsonContent(workspaceRoot) {
   const packageJsonPath = getPackageJSONPath(workspaceRoot);
   if (existsSync11(packageJsonPath))
-    return readFileSync2(packageJsonPath, "utf8");
+    return readFileSync3(packageJsonPath, "utf8");
   return void 0;
 }
 function getPackageJSONPath(workspaceRoot) {
@@ -225298,6 +225143,7 @@ async function getYarnType(projectDir) {
 }
 
 // ../fixing-management/src/fixing-management/npm/npm-fixing-manager.ts
+import { existsSync as existsSync13 } from "fs";
 import { readFile as readFile17, writeFile as writeFile6 } from "fs/promises";
 import { relative as relative6, resolve as resolve20 } from "path";
 
@@ -225359,6 +225205,7 @@ var NpmFixingManager = class extends NpmEcosystemFixingManager {
     }
   }
   async applySecurityFixesSpecificPackageManager(fixes) {
+    await checkForNpmOverrides(resolve20(this.rootDir, this.subprojectPath, "package.json"), fixes);
     const pkgLockLocation = resolve20(this.rootDir, this.subprojectPath, "package-lock.json");
     const packageLockContent = await readFile17(pkgLockLocation, "utf-8");
     const getPackageName = (pkgPath) => {
@@ -225396,13 +225243,39 @@ var NpmFixingManager = class extends NpmEcosystemFixingManager {
     );
   }
 };
+async function checkForNpmOverrides(packageJsonPath, fixes) {
+  if (!existsSync13(packageJsonPath)) return;
+  const content = await readFile17(packageJsonPath, "utf-8");
+  const packageJson = JSON.parse(content);
+  const overrides = packageJson.overrides;
+  if (!overrides) return;
+  for (const fix of fixes) {
+    for (const [key, value2] of Object.entries(overrides)) {
+      if (key === fix.dependencyName && typeof value2 === "string") {
+        throw new Error(
+          `Package "${fix.dependencyName}" is pinned via npm "overrides" in package.json to version "${value2}". Automatic updating of npm overrides is not yet supported. Please manually update the override to version ${fix.fixedVersion} in your package.json "overrides" field.`
+        );
+      }
+      if (typeof value2 === "object" && value2 !== null) {
+        for (const [nestedKey, nestedValue] of Object.entries(value2)) {
+          if (nestedKey === fix.dependencyName && typeof nestedValue === "string") {
+            throw new Error(
+              `Package "${fix.dependencyName}" is pinned via npm "overrides" in package.json (under "overrides.${key}") to version "${nestedValue}". Automatic updating of npm overrides is not yet supported. Please manually update the override to version ${fix.fixedVersion} in your package.json "overrides" field.`
+            );
+          }
+        }
+      }
+    }
+  }
+}
 
 // ../fixing-management/src/fixing-management/npm/pnpm-fixing-manager.ts
+var import_semver3 = __toESM(require_semver2(), 1);
 import { readFile as readFile18, writeFile as writeFile7 } from "fs/promises";
 import { relative as relative7, resolve as resolve21 } from "path";
 var import_yaml = __toESM(require_dist10(), 1);
 var import_lockfile_file2 = __toESM(require_lib25(), 1);
-import { existsSync as existsSync13 } from "fs";
+import { existsSync as existsSync14 } from "fs";
 var PnpmFixingManager = class extends NpmEcosystemFixingManager {
   pnpmMajorVersion;
   async getPnpmMajorVersion() {
@@ -225493,7 +225366,9 @@ var PnpmFixingManager = class extends NpmEcosystemFixingManager {
         );
         lockFileYaml.packages = newPackages;
       }
-      if (lockFileYaml.catalogs) {
+      const hasCatalogFixes = !!lockFileYaml.catalogs;
+      let catalogFixes = {};
+      if (hasCatalogFixes) {
         const getFixCatalog = (catalogName, catalog) => {
           const fixList = [];
           for (const [packageName, catalogVersion] of Object.entries(catalog)) {
@@ -225508,22 +225383,41 @@ var PnpmFixingManager = class extends NpmEcosystemFixingManager {
           }
           return fixList;
         };
-        const catalogFixes = Object.fromEntries(
+        catalogFixes = Object.fromEntries(
           Object.entries(lockFileYaml.catalogs).map(([catalogName, catalog]) => [
             catalogName,
             Object.fromEntries(getFixCatalog(catalogName, catalog))
           ])
         );
-        const pnpmWorkspaceYamlFile = resolve21(this.rootDir, this.subprojectPath, "pnpm-workspace.yaml");
-        if (!existsSync13(pnpmWorkspaceYamlFile)) {
+      }
+      const pnpmWorkspaceYamlFile = resolve21(this.rootDir, this.subprojectPath, "pnpm-workspace.yaml");
+      if (hasCatalogFixes || existsSync14(pnpmWorkspaceYamlFile)) {
+        if (hasCatalogFixes && !existsSync14(pnpmWorkspaceYamlFile)) {
           throw new Error(
             `pnpm-workspace.yaml could not be found in ${pnpmWorkspaceYamlFile}. The lockfile indicates that pnpm catalogs are used and they must be updated, which is not possible without a pnpm-workspace.yaml file`
           );
         }
-        const yamlAST = await readYamlFile(pnpmWorkspaceYamlFile);
-        fixCatalogVersions(yamlAST, catalogFixes);
-        await writeYamlFile(yamlAST, pnpmWorkspaceYamlFile);
+        if (existsSync14(pnpmWorkspaceYamlFile)) {
+          const yamlAST = await readYamlFile(pnpmWorkspaceYamlFile);
+          let modified = false;
+          if (hasCatalogFixes) {
+            fixCatalogVersions(yamlAST, catalogFixes);
+            modified = true;
+          }
+          const overrideResult = fixWorkspaceYamlOverrides(yamlAST, fixes);
+          if (overrideResult.modified) modified = true;
+          if (overrideResult.nestedOverrides.length > 0) {
+            const nested = overrideResult.nestedOverrides[0];
+            throw new Error(
+              `Package "${nested.packageName}" is pinned via a nested pnpm override in pnpm-workspace.yaml (under "overrides"). Automatic updating of nested overrides is not yet supported. Please manually update the override to version ${nested.fixedVersion}.`
+            );
+          }
+          if (modified) {
+            await writeYamlFile(yamlAST, pnpmWorkspaceYamlFile);
+          }
+        }
       }
+      await fixPackageJsonPnpmOverrides(resolve21(this.rootDir, this.subprojectPath, "package.json"), fixes);
       await (0, import_lockfile_file2.writeWantedLockfile)(resolve21(this.rootDir, this.subprojectPath), lockFileYaml);
     } catch (e) {
       if (e.message) throw e;
@@ -225585,14 +225479,156 @@ function updateCatalog(update3, map2) {
     }
   }
 }
+function getOverrideTargetPackageName(key) {
+  const lastSeparatorIndex = key.lastIndexOf(">");
+  return lastSeparatorIndex >= 0 ? key.substring(lastSeparatorIndex + 1) : key;
+}
+function computeOverrideUpdate(overrideValue, fix) {
+  if (overrideValue.startsWith("workspace:") || overrideValue.startsWith("link:") || overrideValue.startsWith("file:") || overrideValue.startsWith("http:") || overrideValue.startsWith("https:") || overrideValue.startsWith("git:") || overrideValue.startsWith("git+")) {
+    return null;
+  }
+  if (overrideValue.startsWith("npm:")) {
+    const afterNpm = overrideValue.substring(4);
+    const atIndex = afterNpm.lastIndexOf("@");
+    if (atIndex === -1) return null;
+    const prefix = "npm:" + afterNpm.substring(0, atIndex + 1);
+    const versionPart = afterNpm.substring(atIndex + 1);
+    const result = computeOverrideVersionUpdate(versionPart, fix);
+    return result !== null ? `${prefix}${result}` : null;
+  }
+  return computeOverrideVersionUpdate(overrideValue, fix);
+}
+function computeOverrideVersionUpdate(versionValue, fix) {
+  if (versionValue === fix.currentVersion) {
+    return fix.fixedVersion;
+  }
+  if (import_semver3.default.validRange(versionValue) && import_semver3.default.valid(fix.currentVersion) && import_semver3.default.valid(fix.fixedVersion)) {
+    if (import_semver3.default.satisfies(fix.currentVersion, versionValue)) {
+      if (!import_semver3.default.satisfies(fix.fixedVersion, versionValue)) {
+        return fix.fixedVersion;
+      }
+      logger.info(
+        `Override for ${fix.dependencyName} uses range "${versionValue}" which already allows the fixed version ${fix.fixedVersion} \u2014 no update needed`
+      );
+    }
+  }
+  return null;
+}
+function fixWorkspaceYamlOverrides(yamlAST, fixes) {
+  let modified = false;
+  const nestedOverrides = [];
+  import_yaml.CST.visit(yamlAST, (item, _path2) => {
+    if (import_yaml.CST.isCollection(item.value) && item.value.type === "block-map") {
+      if (import_yaml.CST.isScalar(item.key)) {
+        const key = import_yaml.CST.resolveAsScalar(item.key).value;
+        if (key === "overrides") {
+          if (updateOverridesMap(item.value, fixes, nestedOverrides)) {
+            modified = true;
+          }
+        }
+      }
+    }
+  });
+  return { modified, nestedOverrides };
+}
+function updateOverridesMap(map2, fixes, nestedOverrides) {
+  const fixesByName = /* @__PURE__ */ new Map();
+  for (const fix of fixes) {
+    const existing = fixesByName.get(fix.dependencyName) ?? [];
+    existing.push(fix);
+    fixesByName.set(fix.dependencyName, existing);
+  }
+  let wasModified = false;
+  for (const overrideEntry of map2.items) {
+    if (!overrideEntry.key || !overrideEntry.value) continue;
+    if (import_yaml.CST.isCollection(overrideEntry.value)) {
+      const overrideKey2 = import_yaml.CST.resolveAsScalar(overrideEntry.key)?.value;
+      if (overrideKey2) {
+        const target = getOverrideTargetPackageName(String(overrideKey2));
+        const matchingFixes2 = fixesByName.get(target);
+        if (matchingFixes2) {
+          for (const fix of matchingFixes2) {
+            nestedOverrides.push({ packageName: fix.dependencyName, fixedVersion: fix.fixedVersion });
+          }
+        }
+      }
+      continue;
+    }
+    if (!import_yaml.CST.isScalar(overrideEntry.value)) continue;
+    const overrideKey = import_yaml.CST.resolveAsScalar(overrideEntry.key)?.value;
+    const overrideValue = import_yaml.CST.resolveAsScalar(overrideEntry.value)?.value;
+    if (!overrideKey || !overrideValue) continue;
+    const targetPackageName = getOverrideTargetPackageName(String(overrideKey));
+    const matchingFixes = fixesByName.get(targetPackageName);
+    if (!matchingFixes) continue;
+    for (const fix of matchingFixes) {
+      const newValue = computeOverrideUpdate(String(overrideValue), fix);
+      if (newValue !== null) {
+        logger.info(
+          `Applying fix to ${fix.dependencyName} (${fix.dependencyIdentifier}) defined in pnpm-workspace.yaml overrides`
+        );
+        import_yaml.CST.setScalarValue(overrideEntry.value, newValue);
+        wasModified = true;
+      }
+    }
+  }
+  return wasModified;
+}
+async function fixPackageJsonPnpmOverrides(packageJsonPath, fixes) {
+  if (!existsSync14(packageJsonPath)) return;
+  const content = await readFile18(packageJsonPath, "utf-8");
+  const packageJson = JSON.parse(content);
+  const overrides = packageJson.pnpm?.overrides;
+  if (!overrides) return;
+  const fixesByName = /* @__PURE__ */ new Map();
+  for (const fix of fixes) {
+    const existing = fixesByName.get(fix.dependencyName) ?? [];
+    existing.push(fix);
+    fixesByName.set(fix.dependencyName, existing);
+  }
+  let modified = false;
+  for (const [key, value2] of Object.entries(overrides)) {
+    if (typeof value2 === "object" && value2 !== null) {
+      for (const [nestedKey, nestedValue] of Object.entries(value2)) {
+        const nestedTarget = getOverrideTargetPackageName(nestedKey);
+        const matchingFixes2 = fixesByName.get(nestedTarget);
+        if (matchingFixes2 && typeof nestedValue === "string") {
+          const fix = matchingFixes2[0];
+          throw new Error(
+            `Package "${fix.dependencyName}" is pinned via a nested pnpm override in package.json (under "pnpm.overrides.${key}"). Automatic updating of nested overrides is not yet supported. Please manually update the override to version ${fix.fixedVersion}.`
+          );
+        }
+      }
+      continue;
+    }
+    if (typeof value2 !== "string") continue;
+    const targetPackageName = getOverrideTargetPackageName(key);
+    const matchingFixes = fixesByName.get(targetPackageName);
+    if (!matchingFixes) continue;
+    for (const fix of matchingFixes) {
+      const newValue = computeOverrideUpdate(value2, fix);
+      if (newValue !== null) {
+        logger.info(
+          `Applying fix to ${fix.dependencyName} (${fix.dependencyIdentifier}) defined in package.json pnpm.overrides`
+        );
+        overrides[key] = newValue;
+        modified = true;
+      }
+    }
+  }
+  if (modified) {
+    await writeFile7(packageJsonPath, JSON.stringify(packageJson, null, 2) + "\n");
+  }
+}
 
 // ../fixing-management/src/fixing-management/npm/yarn-fixing-manager.ts
+import { existsSync as existsSync16 } from "fs";
 import { readFile as readFile19, writeFile as writeFile8 } from "fs/promises";
 import { relative as relative9, resolve as resolve23 } from "path";
 
 // ../utils/src/package-utils.ts
 import { parse as parse7, join as join13, resolve as resolve22, normalize as normalize3, dirname as dirname13, basename as basename6, relative as relative8 } from "path";
-import { existsSync as existsSync14, readFileSync as readFileSync3, readdirSync as readdirSync3, statSync as statSync4, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync4, writeFileSync as writeFileSync2 } from "fs";
 function setFieldInPackageJson(workspaceRoot, field, value2) {
   const packageJSONContentObj = getPackageJsonObject2(workspaceRoot);
   if (!packageJSONContentObj) return void 0;
@@ -225609,7 +225645,7 @@ function writePackageJsonContent(workspaceRoot, packageJsonContent) {
 }
 function getPackageJsonContent2(workspaceRoot) {
   const packageJsonPath = getPackageJSONPath2(workspaceRoot);
-  if (existsSync14(packageJsonPath)) return readFileSync3(packageJsonPath, "utf8");
+  if (existsSync15(packageJsonPath)) return readFileSync4(packageJsonPath, "utf8");
   return void 0;
 }
 function getPackageJSONPath2(workspaceRoot) {
@@ -225776,6 +225812,7 @@ var YarnFixingManager = class extends NpmEcosystemFixingManager {
     await this.writeYarnObj(yarnLock, yarnLockLocation);
   }
   async applySecurityFixesSpecificPackageManager(fixes) {
+    await checkForYarnResolutions(resolve23(this.rootDir, this.subprojectPath, "package.json"), fixes);
     const yarnLockLocation = resolve23(this.rootDir, this.subprojectPath, "yarn.lock");
     const yarnType = await this.getYarnType();
     try {
@@ -225815,6 +225852,24 @@ var YarnFixingManager = class extends NpmEcosystemFixingManager {
     }
   }
 };
+async function checkForYarnResolutions(packageJsonPath, fixes) {
+  if (!existsSync16(packageJsonPath)) return;
+  const content = await readFile19(packageJsonPath, "utf-8");
+  const packageJson = JSON.parse(content);
+  const resolutions = packageJson.resolutions;
+  if (!resolutions) return;
+  for (const fix of fixes) {
+    for (const [key, value2] of Object.entries(resolutions)) {
+      const parts = key.split("/");
+      const targetPackage = parts[parts.length - 1];
+      if (targetPackage === fix.dependencyName && typeof value2 === "string") {
+        throw new Error(
+          `Package "${fix.dependencyName}" is pinned via yarn "resolutions" in package.json to version "${value2}". Automatic updating of yarn resolutions is not yet supported. Please manually update the resolution to version ${fix.fixedVersion} in your package.json "resolutions" field.`
+        );
+      }
+    }
+  }
+}
 
 // ../fixing-management/src/fixing-management/npm/npm-socket-upgrade-manager.ts
 import { basename as basename7 } from "node:path";
@@ -225987,11 +226042,11 @@ var NpmSocketUpgradeManager = class {
   }
   getPackageManagerForDirectory(directory) {
     const fullPath = resolve24(this.rootDir, directory);
-    if (existsSync15(join14(fullPath, "pnpm-lock.yaml")) || existsSync15(join14(fullPath, "pnpm-lock.yml"))) {
+    if (existsSync17(join14(fullPath, "pnpm-lock.yaml")) || existsSync17(join14(fullPath, "pnpm-lock.yml"))) {
       return "PNPM";
-    } else if (existsSync15(join14(fullPath, "yarn.lock"))) {
+    } else if (existsSync17(join14(fullPath, "yarn.lock"))) {
       return "YARN";
-    } else if (existsSync15(join14(fullPath, "package-lock.json"))) {
+    } else if (existsSync17(join14(fullPath, "package-lock.json"))) {
       return "NPM";
     }
     throw new Error(
@@ -226000,10 +226055,10 @@ var NpmSocketUpgradeManager = class {
   }
   getLockfileName(directory) {
     const fullPath = resolve24(this.rootDir, directory);
-    if (existsSync15(join14(fullPath, "pnpm-lock.yaml"))) return "pnpm-lock.yaml";
-    if (existsSync15(join14(fullPath, "pnpm-lock.yml"))) return "pnpm-lock.yml";
-    if (existsSync15(join14(fullPath, "yarn.lock"))) return "yarn.lock";
-    if (existsSync15(join14(fullPath, "package-lock.json"))) return "package-lock.json";
+    if (existsSync17(join14(fullPath, "pnpm-lock.yaml"))) return "pnpm-lock.yaml";
+    if (existsSync17(join14(fullPath, "pnpm-lock.yml"))) return "pnpm-lock.yml";
+    if (existsSync17(join14(fullPath, "yarn.lock"))) return "yarn.lock";
+    if (existsSync17(join14(fullPath, "package-lock.json"))) return "package-lock.json";
     throw new Error(`No lockfile found in ${fullPath}`);
   }
   async createDirectDependencyPatches(mf, idx, upgradeVersion, ctxt) {
@@ -226388,10 +226443,10 @@ import { dirname as dirname16, relative as relative12, resolve as resolve26 } fr
 var import_parse_xml3 = __toESM(require_dist(), 1);
 import { readFile as readFile22 } from "node:fs/promises";
 import { dirname as dirname15, join as join17, relative as relative11, resolve as resolve25, basename as basename8, extname } from "node:path";
-import { existsSync as existsSync16 } from "node:fs";
+import { existsSync as existsSync18 } from "node:fs";
 
 // ../utils/dist/version-comparison/version-satisfies.js
-var import_semver3 = __toESM(require_semver2(), 1);
+var import_semver4 = __toESM(require_semver2(), 1);
 
 // ../utils/dist/version-comparison/maven/comparable-version.js
 var IntItem2 = class _IntItem {
@@ -227787,10 +227842,10 @@ function versionSatisfiesSpecifier2(ecosystem, version4, specifier) {
 }
 var ecosystemMap2 = {
   NPM: {
-    sortVersions: import_semver3.sort,
+    sortVersions: import_semver4.sort,
     isPrerelease: semverIsPrerelease2,
     versionSatisfiesSpecifier: semverSatisfiesSpecifier2,
-    versionSatisfiesRelation: import_semver3.cmp,
+    versionSatisfiesRelation: import_semver4.cmp,
     versionSatisfiesRange: semverSatisfiesRange2
   },
   MAVEN: {
@@ -227813,17 +227868,17 @@ var ecosystemMap2 = {
     versionSatisfiesRange: versionSatisfiesWithVersionComparisonFunction2(pipCompareVersions2)
   },
   GO: {
-    sortVersions: import_semver3.sort,
+    sortVersions: import_semver4.sort,
     isPrerelease: semverIsPrerelease2,
     versionSatisfiesSpecifier: semverSatisfiesSpecifier2,
-    versionSatisfiesRelation: import_semver3.cmp,
+    versionSatisfiesRelation: import_semver4.cmp,
     versionSatisfiesRange: semverSatisfiesRange2
   },
   RUST: {
-    sortVersions: import_semver3.sort,
+    sortVersions: import_semver4.sort,
     isPrerelease: semverIsPrerelease2,
     versionSatisfiesSpecifier: (version4, specifier) => specifier.split(",").map((part) => part.trim()).every((trimmed) => semverSatisfiesSpecifier2(version4, /^\d/.test(trimmed) ? `^${trimmed}` : trimmed)),
-    versionSatisfiesRelation: import_semver3.cmp,
+    versionSatisfiesRelation: import_semver4.cmp,
     versionSatisfiesRange: semverSatisfiesRange2
   },
   NUGET: {
@@ -227867,16 +227922,16 @@ function buildUnsupportedEcosystem2(ecosystem) {
   };
 }
 function semverSatisfiesSpecifier2(version4, specifier) {
-  return (0, import_semver3.satisfies)(version4, specifier);
+  return (0, import_semver4.satisfies)(version4, specifier);
 }
 function semverSatisfiesRange2(version4, range2) {
-  if ((0, import_semver3.satisfies)(version4, range2))
+  if ((0, import_semver4.satisfies)(version4, range2))
     return true;
-  const versionWithoutPrerelease = (0, import_semver3.coerce)(version4)?.version;
-  return versionWithoutPrerelease ? (0, import_semver3.satisfies)(versionWithoutPrerelease, range2) : false;
+  const versionWithoutPrerelease = (0, import_semver4.coerce)(version4)?.version;
+  return versionWithoutPrerelease ? (0, import_semver4.satisfies)(versionWithoutPrerelease, range2) : false;
 }
 function semverIsPrerelease2(version4) {
-  return (0, import_semver3.coerce)(version4)?.version !== version4;
+  return (0, import_semver4.coerce)(version4)?.version !== version4;
 }
 var operators2 = {
   lt: "<",
@@ -227941,7 +227996,7 @@ async function loadNuGetProject(rootDir, projectFile, validateFile) {
 }
 async function loadNuGetProjectOrTarget(rootDir, projectFile, mainProject, visited, validateFile) {
   const validatedProjectPath = validateFile ? validateFile(resolve25(rootDir, projectFile)) : resolve25(rootDir, projectFile);
-  if (!validatedProjectPath || !existsSync16(validatedProjectPath)) return void 0;
+  if (!validatedProjectPath || !existsSync18(validatedProjectPath)) return void 0;
   if (visited.has(validatedProjectPath)) return void 0;
   visited.set(validatedProjectPath);
   const sourceText = await readFile22(validatedProjectPath, "utf-8");
@@ -228016,7 +228071,7 @@ async function loadNuGetProjectOrTarget(rootDir, projectFile, mainProject, visit
 }
 async function loadPackagesConfig(rootDir, file, validateFile) {
   const validatedConfigPath = validateFile(resolve25(rootDir, file));
-  if (!validatedConfigPath || !existsSync16(validatedConfigPath)) return void 0;
+  if (!validatedConfigPath || !existsSync18(validatedConfigPath)) return void 0;
   const sourceText = await readFile22(validatedConfigPath, "utf-8");
   const configXml = (0, import_parse_xml3.parseXml)(sourceText, { includeOffsets: true });
   const packages = extractPackagesFromXml(configXml, sourceText);
@@ -228146,7 +228201,7 @@ async function handleImportElement(currentProject, importElement, mainProject, v
   if (!importPath) return;
   const resolvedPath = resolve25(dirname15(currentProject.validatedProjectPath), normalizeMSBuildPath(importPath));
   const validatedPath = validateFile ? validateFile(resolvedPath) : resolvedPath;
-  if (!validatedPath || !existsSync16(validatedPath)) return;
+  if (!validatedPath || !existsSync18(validatedPath)) return;
   const importedProject = await loadNuGetProjectOrTarget(
     currentProject.rootDir,
     resolvedPath,
@@ -228839,7 +228894,7 @@ var NuGetSocketUpgradeManager = class {
 // ../fixing-management/src/fixing-management/rust/cargo-socket-upgrade-manager.ts
 import { dirname as dirname18, relative as relative13, resolve as resolve28 } from "node:path";
 var import_picomatch6 = __toESM(require_picomatch2(), 1);
-var import_semver4 = __toESM(require_semver2(), 1);
+var import_semver5 = __toESM(require_semver2(), 1);
 import assert12 from "node:assert";
 import { readFile as readFile24, writeFile as writeFile10 } from "node:fs/promises";
 
@@ -229103,7 +229158,7 @@ var CargoSocketUpgradeManager = class {
    * This handles Cargo's implicit caret behavior and uses semver for proper version range matching
    */
   versionMatches(tomlVersion, resolvedVersion) {
-    return import_semver4.default.satisfies(resolvedVersion, /^\d/.test(tomlVersion) ? `^${tomlVersion}` : tomlVersion);
+    return import_semver5.default.satisfies(resolvedVersion, /^\d/.test(tomlVersion) ? `^${tomlVersion}` : tomlVersion);
   }
   /**
    * Add a new dependency to a Cargo.toml file
@@ -229550,14 +229605,14 @@ function createPep508VersionPatches(file, idx, requirement, oldVersion, upgradeV
 }
 
 // ../utils/src/pip-utils.ts
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 import { readFile as readFile26 } from "node:fs/promises";
 import { dirname as dirname19, resolve as resolve30 } from "node:path";
 import util4 from "node:util";
 
 // ../utils/src/python-versions-manager.ts
 var import_lodash6 = __toESM(require_lodash(), 1);
-var import_semver5 = __toESM(require_semver2(), 1);
+var import_semver6 = __toESM(require_semver2(), 1);
 import { execFileSync } from "child_process";
 import { constants as constants3 } from "fs";
 import { access as access3, readFile as readFile25 } from "fs/promises";
@@ -230401,7 +230456,7 @@ import assert14 from "node:assert";
 var import_good_enough_parser4 = __toESM(require_cjs(), 1);
 init_ruby_lang();
 import { resolve as resolve32, dirname as dirname21, relative as relative14 } from "node:path";
-import { existsSync as existsSync18, readFileSync as readFileSync4, readdirSync as readdirSync4 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync5, readdirSync as readdirSync4 } from "node:fs";
 init_gemspec_utils();
 var booleanQuery2 = import_good_enough_parser4.query.alt(
   import_good_enough_parser4.query.sym(/^true|false$/, (ctx, { value: value2, offset }) => {
@@ -230516,8 +230571,8 @@ var evalGemfileQuery = import_good_enough_parser4.query.sym("eval_gemfile").join
   if (pathEvaluated === void 0) return ctx;
   const rootDir = ctx.gemfile.rootDir;
   const file = relative14(rootDir, resolve32(rootDir, dirname21(ctx.gemfile.file), pathEvaluated));
-  if (!existsSync18(resolve32(rootDir, file))) return ctx;
-  const sourceText = readFileSync4(resolve32(rootDir, file), "utf-8");
+  if (!existsSync20(resolve32(rootDir, file))) return ctx;
+  const sourceText = readFileSync5(resolve32(rootDir, file), "utf-8");
   const parser2 = import_good_enough_parser4.lang.createLang(lang3);
   const cursor = parser2.parse(sourceText);
   const otherCtx = parser2.query(cursor, treeQuery4, {
@@ -230591,7 +230646,7 @@ var gemspecQuery = import_good_enough_parser4.query.sym("gemspec").opt(
     ctx.currentGem = void 0;
   }
   const searchDir = gemspecPath ? resolve32(rootDir, gemfileDir, gemspecPath) : resolve32(rootDir, gemfileDir);
-  if (!existsSync18(searchDir)) return ctx;
+  if (!existsSync20(searchDir)) return ctx;
   let gemspecFiles = [];
   try {
     const entries = readdirSync4(searchDir);
@@ -230609,7 +230664,7 @@ var gemspecQuery = import_good_enough_parser4.query.sym("gemspec").opt(
   const gemspecFullPath = resolve32(searchDir, gemspecFile);
   const gemspecRelativePath = relative14(rootDir, gemspecFullPath);
   try {
-    const sourceText = readFileSync4(gemspecFullPath, "utf-8");
+    const sourceText = readFileSync5(gemspecFullPath, "utf-8");
     const gemspec = parseGemspec(rootDir, gemspecRelativePath, sourceText);
     ctx.gemspecs.push(gemspec);
     ctx.gems.push(...gemspec.dependencies);
@@ -231315,7 +231370,7 @@ async function applySocketUpgrades(ecosystem, rootDir, ctxt) {
 
 // dist/cli-apply-fix.js
 var import_lodash13 = __toESM(require_lodash(), 1);
-import { existsSync as existsSync22 } from "fs";
+import { existsSync as existsSync24 } from "fs";
 
 // ../other-modules-communicator/src/other-modules-communicator.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -231332,7 +231387,7 @@ import { fileURLToPath as fileURLToPath3 } from "node:url";
 // ../utils/dist/file-utils.js
 var import_lodash7 = __toESM(require_lodash(), 1);
 var import_micromatch2 = __toESM(require_micromatch(), 1);
-import { existsSync as existsSync19 } from "fs";
+import { existsSync as existsSync21 } from "fs";
 import { access as access4, cp as cp3, readdir as readdir4, stat as stat4 } from "fs/promises";
 import { basename as basename9, join as join20, relative as relative16, resolve as resolve34 } from "path";
 var { uniq: uniq2 } = import_lodash7.default;
@@ -231562,7 +231617,13 @@ var CLILogger2 = class {
     this.logger = (0, import_winston2.createLogger)({
       level: debug ? "debug" : "info",
       levels: customLevels,
-      format: import_winston2.format.combine(import_winston2.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss.SSS" }), utilFormatter2(), import_winston2.format.colorize(), import_winston2.format.printf(({ level, message: message2, label, timestamp }) => `${timestamp} ${label || "-"} ${level}: ${message2}`)),
+      format: import_winston2.format.combine(
+        import_winston2.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss.SSS" }),
+        utilFormatter2(),
+        import_winston2.format.colorize(),
+        // eslint-disable-next-line @typescript-eslint/no-base-to-string
+        import_winston2.format.printf(({ level, message: message2, label, timestamp }) => `${timestamp} ${label || "-"} ${level}: ${message2}`)
+      ),
       transports
     });
   }
@@ -231590,7 +231651,13 @@ var CLILogger2 = class {
     this.logger = (0, import_winston2.createLogger)({
       level: options.debug ? "debug" : "info",
       levels: customLevels,
-      format: import_winston2.format.combine(import_winston2.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss.SSS" }), utilFormatter2(), import_winston2.format.colorize(), import_winston2.format.printf(({ level, message: message2, label, timestamp }) => `${timestamp} ${label || "-"} ${level}: ${message2}`)),
+      format: import_winston2.format.combine(
+        import_winston2.format.timestamp({ format: "YYYY-MM-DD HH:mm:ss.SSS" }),
+        utilFormatter2(),
+        import_winston2.format.colorize(),
+        // eslint-disable-next-line @typescript-eslint/no-base-to-string
+        import_winston2.format.printf(({ level, message: message2, label, timestamp }) => `${timestamp} ${label || "-"} ${level}: ${message2}`)
+      ),
       transports: [new import_winston2.transports.Console(), socketTransport]
     });
   }
@@ -231760,7 +231827,7 @@ async function detectVariantMaven(projectDir) {
 }
 
 // ../docker-management/src/maven/gradle-version-detector.ts
-import { existsSync as existsSync20 } from "fs";
+import { existsSync as existsSync22 } from "fs";
 import { join as join23 } from "path";
 import { readFile as readFile30 } from "fs/promises";
 async function detectVariantGradle(projectDir) {
@@ -231768,7 +231835,7 @@ async function detectVariantGradle(projectDir) {
 }
 async function detect(projectDir) {
   const gradleWrapperPropertiesPath = join23(projectDir, "gradle", "wrapper", "gradle-wrapper.properties");
-  const gradleWrapperProperties = existsSync20(gradleWrapperPropertiesPath) ? (await readFile30(gradleWrapperPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
+  const gradleWrapperProperties = existsSync22(gradleWrapperPropertiesPath) ? (await readFile30(gradleWrapperPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
   if (!gradleWrapperProperties) return void 0;
   const distributionUrlRegex = /.*gradle-(\d+(\.\d+(\.\d+)?)?)/;
   for (const prop2 of gradleWrapperProperties) {
@@ -231782,7 +231849,7 @@ async function detect(projectDir) {
 }
 
 // ../docker-management/src/maven/sbt-version-detector.ts
-import { existsSync as existsSync21 } from "fs";
+import { existsSync as existsSync23 } from "fs";
 import { join as join24 } from "path";
 import { readFile as readFile31 } from "fs/promises";
 async function detectVariantSbt(projectDir) {
@@ -231790,7 +231857,7 @@ async function detectVariantSbt(projectDir) {
 }
 async function detect2(projectDir) {
   const sbtBuildPropertiesPath = join24(projectDir, "project", "build.properties");
-  const sbtBuildProperties = existsSync21(sbtBuildPropertiesPath) ? (await readFile31(sbtBuildPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
+  const sbtBuildProperties = existsSync23(sbtBuildPropertiesPath) ? (await readFile31(sbtBuildPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
   if (!sbtBuildProperties) return void 0;
   for (const prop2 of sbtBuildProperties) {
     const [key, value2] = prop2.split("=");
@@ -232119,7 +232186,7 @@ var ecosystemToSupport2 = {
     }
   },
   COMPOSER: {
-    supportStatus: "no-support",
+    supportStatus: "reachability-analysis-support",
     fixesComputation: false,
     packageManagers: {
       COMPOSER: {
@@ -232271,6 +232338,8 @@ async function extractAllToolsForNexeMode() {
     getUvExecutable(),
     // Extract Jelly (JavaScript/TypeScript analysis)
     extractTool("jelly-private", "repos/coana-tech/jelly-private"),
+    // Extract SPAR (Experimental JS/TS analysis)
+    extractTool("spar", "repos/coana-tech/spar"),
     // Extract Mambalade (Python analysis)
     extractTool("mambalade", "repos/coana-tech/mambalade"),
     // Extract Goana (Go analysis) - platform/arch-specific binary
@@ -233094,7 +233163,7 @@ async function verifyFixes(fixes, otherModulesCommunicator, rootPath) {
   if (pathsForEachFixIdData.length !== new Set(pathsForEachFixIdData).size) {
     throw new Error("Multiple fix IDs found for the same subproject, workspace and ecosystem");
   }
-  const subprojectsNotFound = uniq3(fixes.filter(({ vulnerabilityInstance: v }) => !existsSync22(resolve37(rootPath, v.subprojectPath))).map(({ vulnerabilityInstance: v }) => `${v.subprojectPath}:${v.ecosystem}`));
+  const subprojectsNotFound = uniq3(fixes.filter(({ vulnerabilityInstance: v }) => !existsSync24(resolve37(rootPath, v.subprojectPath))).map(({ vulnerabilityInstance: v }) => `${v.subprojectPath}:${v.ecosystem}`));
   if (subprojectsNotFound.length > 0) {
     throw new Error(`Cannot find the following subprojects: ${subprojectsNotFound.join(", ")}`);
   }
@@ -233526,7 +233595,7 @@ function getVulnReachability(c3) {
 }
 
 // ../web-compat-utils/src/report-utils.ts
-var import_semver6 = __toESM(require_semver2(), 1);
+var import_semver7 = __toESM(require_semver2(), 1);
 function generateUrlToRepoSourceLocation(sourceLocation, repoUrl, commit, subprojectWorkspacePath) {
   if (!repoUrl || !commit || !subprojectWorkspacePath) return void 0;
   const isGithub = repoUrl.toLowerCase().includes("github");
@@ -233920,7 +233989,7 @@ import { readdir as readdir6 } from "fs/promises";
 import { join as join29, relative as relative19, resolve as resolve38 } from "path";
 
 // ../project-management/src/project-management/ecosystem-management/ecosystem-specs.ts
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { readdir as readdir5, readFile as readFile33 } from "fs/promises";
 import { join as join28, sep as sep4 } from "path";
 var specs = {
@@ -233997,7 +234066,7 @@ function getEcosystemSpecs(ecosystems) {
 }
 function packageManagerIfPackageJSONExistsAndValid(packageManager) {
   return async (projectDir) => {
-    if (!existsSync23(join28(projectDir, "package.json"))) return void 0;
+    if (!existsSync25(join28(projectDir, "package.json"))) return void 0;
     const packageJSONPath = join28(projectDir, "package.json");
     try {
       JSON.parse(await readFile33(packageJSONPath, "utf-8"));
@@ -234892,7 +234961,7 @@ function prettyApplyFixesTo(applyFixesToOption) {
 
 // dist/cli-core.js
 import assert16 from "node:assert";
-import { existsSync as existsSync28, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync30, writeFileSync as writeFileSync3 } from "fs";
 import { mkdir as mkdir6, rm as rm3, writeFile as writeFile15 } from "fs/promises";
 var import_lodash15 = __toESM(require_lodash(), 1);
 import os2 from "os";
@@ -235145,7 +235214,7 @@ var BatchedHttpLogStreamer = class {
 // ../utils/src/logging/socket-log-server.ts
 import { createServer } from "net";
 import { once as once8 } from "events";
-import { createWriteStream as createWriteStream6, existsSync as existsSync24 } from "fs";
+import { createWriteStream as createWriteStream6, existsSync as existsSync26 } from "fs";
 import { unlink as unlink3 } from "fs/promises";
 var SocketLogServer = class {
   server;
@@ -235166,7 +235235,7 @@ var SocketLogServer = class {
     this.server = createServer((socket) => this.handleConnection(socket));
   }
   async start() {
-    if (existsSync24(this.socketPath)) {
+    if (existsSync26(this.socketPath)) {
       await unlink3(this.socketPath);
     }
     this.server.listen(this.socketPath);
@@ -235288,7 +235357,7 @@ var SocketLogServer = class {
     return new Promise((resolve45, reject) => {
       this.server.close((serverError) => {
         this.writeStream.end(() => {
-          if (existsSync24(this.socketPath)) {
+          if (existsSync26(this.socketPath)) {
             unlink3(this.socketPath).then(() => {
               if (serverError) reject(serverError);
               else resolve45();
@@ -235304,7 +235373,7 @@ var SocketLogServer = class {
 };
 
 // ../utils/src/logging/main-process-transport.ts
-var import_winston_transport = __toESM(require_winston_transport2(), 1);
+var import_winston_transport = __toESM(require_winston_transport(), 1);
 var MainProcessTransport = class extends import_winston_transport.default {
   socketLogServer;
   context;
@@ -235647,30 +235716,32 @@ Alternatively, you can reduce the --memory-limit option to require fewer mapping
 var DEFAULT_REPORT_FILENAME_BASE = "coana-report";
 
 // dist/internal/exclude-dirs-from-configuration-files.js
-import { existsSync as existsSync25 } from "fs";
+import { existsSync as existsSync27 } from "fs";
 import { readFile as readFile35 } from "fs/promises";
 import { basename as basename11, resolve as resolve41 } from "path";
 var import_yaml2 = __toESM(require_dist11(), 1);
 async function inferExcludeDirsFromConfigurationFiles(rootWorkingDir) {
   const socketYmlConfigFile = resolve41(rootWorkingDir, "socket.yml");
-  if (existsSync25(socketYmlConfigFile))
+  if (existsSync27(socketYmlConfigFile))
     return inferExcludeDirsFromSocketConfig(socketYmlConfigFile);
   const socketYamlConfigFile = resolve41(rootWorkingDir, "socket.yaml");
-  if (existsSync25(socketYamlConfigFile))
+  if (existsSync27(socketYamlConfigFile))
     return inferExcludeDirsFromSocketConfig(socketYamlConfigFile);
   return void 0;
 }
 async function inferExcludeDirsFromSocketConfig(socketConfigFile) {
   try {
-    const config3 = (0, import_yaml2.parse)(await readFile35(socketConfigFile, "utf8"));
-    const version4 = config3.version;
-    const ignorePaths = config3[version4 === 1 ? "ignore" : "projectIgnorePaths"];
-    if (!ignorePaths)
+    const doc = (0, import_yaml2.parseDocument)(await readFile35(socketConfigFile, "utf8"));
+    const version4 = doc.get("version");
+    const key = version4 === 1 ? "ignore" : "projectIgnorePaths";
+    const ignorePathsNode = doc.get(key, true);
+    if (!ignorePathsNode || !(0, import_yaml2.isSeq)(ignorePathsNode))
       return void 0;
+    const ignorePaths = ignorePathsNode.items.map((item) => String(item));
     if (ignorePaths.some((ignorePath) => ignorePath.includes("!")))
       return void 0;
     logger.info(`Inferring paths to exclude based on Socket config file: ${basename11(socketConfigFile)}`);
-    return config3.projectIgnorePaths;
+    return ignorePaths;
   } catch (e) {
     return void 0;
   }
@@ -239457,7 +239528,7 @@ var import_css_what2 = __toESM(require_commonjs(), 1);
 var whitespace = /* @__PURE__ */ new Set([9, 10, 12, 13, 32]);
 var ZERO = "0".charCodeAt(0);
 var NINE = "9".charCodeAt(0);
-function parse10(formula) {
+function parse9(formula) {
   formula = formula.trim().toLowerCase();
   if (formula === "even") {
     return [2, 0];
@@ -239530,7 +239601,7 @@ function compile(parsed) {
 
 // ../../node_modules/.pnpm/nth-check@2.1.1/node_modules/nth-check/lib/esm/index.js
 function nthCheck(formula) {
-  return compile(parse10(formula));
+  return compile(parse9(formula));
 }
 
 // ../../node_modules/.pnpm/css-select@5.1.0/node_modules/css-select/lib/esm/pseudo-selectors/filters.js
@@ -240652,7 +240723,7 @@ __export(manipulation_exports, {
 
 // ../../node_modules/.pnpm/cheerio@1.0.0-rc.12/node_modules/cheerio/lib/esm/parse.js
 function getParse(parser2) {
-  return function parse17(content, options, isDocument2, context2) {
+  return function parse16(content, options, isDocument2, context2) {
     if (typeof Buffer !== "undefined" && Buffer.isBuffer(content)) {
       content = content.toString();
     }
@@ -241032,7 +241103,7 @@ function setCss(el, prop2, value2, idx) {
 function getCss(el, prop2) {
   if (!el || !isTag2(el))
     return;
-  const styles = parse14(el.attribs["style"]);
+  const styles = parse13(el.attribs["style"]);
   if (typeof prop2 === "string") {
     return styles[prop2];
   }
@@ -241050,7 +241121,7 @@ function getCss(el, prop2) {
 function stringify2(obj) {
   return Object.keys(obj).reduce((str, prop2) => `${str}${str ? " " : ""}${prop2}: ${obj[prop2]};`, "");
 }
-function parse14(styles) {
+function parse13(styles) {
   styles = (styles || "").trim();
   if (!styles)
     return {};
@@ -241143,13 +241214,13 @@ Cheerio.prototype[Symbol.iterator] = Array.prototype[Symbol.iterator];
 Object.assign(Cheerio.prototype, attributes_exports, traversing_exports, manipulation_exports, css_exports, forms_exports);
 
 // ../../node_modules/.pnpm/cheerio@1.0.0-rc.12/node_modules/cheerio/lib/esm/load.js
-function getLoad(parse17, render3) {
+function getLoad(parse16, render3) {
   return function load2(content, options, isDocument2 = true) {
     if (content == null) {
       throw new Error("cheerio.load() expects a string");
     }
     const internalOpts = { ...options_default, ...flatten(options) };
-    const initialRoot = parse17(content, internalOpts, isDocument2, null);
+    const initialRoot = parse16(content, internalOpts, isDocument2, null);
     class LoadedCheerio extends Cheerio {
       _make(selector, context2) {
         const cheerio = initialize(selector, context2);
@@ -241157,7 +241228,7 @@ function getLoad(parse17, render3) {
         return cheerio;
       }
       _parse(content2, options2, isDocument3, context2) {
-        return parse17(content2, options2, isDocument3, context2);
+        return parse16(content2, options2, isDocument3, context2);
       }
       _render(dom) {
         return render3(dom, this.options);
@@ -241170,7 +241241,7 @@ function getLoad(parse17, render3) {
         ...internalOpts,
         ...flatten(opts)
       };
-      const r3 = typeof root3 === "string" ? [parse17(root3, options2, false, null)] : "length" in root3 ? root3 : [root3];
+      const r3 = typeof root3 === "string" ? [parse16(root3, options2, false, null)] : "length" in root3 ? root3 : [root3];
       const rootInstance = isCheerio(r3) ? r3 : new LoadedCheerio(r3, null, options2);
       rootInstance._root = rootInstance;
       if (!selector) {
@@ -241178,7 +241249,7 @@ function getLoad(parse17, render3) {
       }
       const elements = typeof selector === "string" && isHtml(selector) ? (
         // $(<html>)
-        parse17(selector, options2, false, null).children
+        parse16(selector, options2, false, null).children
       ) : isNode(selector) ? (
         // $(dom)
         [selector]
@@ -241199,7 +241270,7 @@ function getLoad(parse17, render3) {
         rootInstance
       ) : typeof context2 === "string" ? isHtml(context2) ? (
         // $('li', '<ul>...</ul>')
-        new LoadedCheerio([parse17(context2, options2, false, null)], rootInstance, options2)
+        new LoadedCheerio([parse16(context2, options2, false, null)], rootInstance, options2)
       ) : (
         // $('li', 'ul')
         (search = `${context2} ${search}`, rootInstance)
@@ -248877,7 +248948,7 @@ function serializeDocumentTypeNode(node, { treeAdapter }) {
 }
 
 // ../../node_modules/.pnpm/parse5@7.1.2/node_modules/parse5/dist/index.js
-function parse15(html3, options) {
+function parse14(html3, options) {
   return Parser3.parse(html3, options);
 }
 function parseFragment(fragmentContext, html3, options) {
@@ -249106,7 +249177,7 @@ function parseWithParse5(content, options, isDocument2, context2) {
     treeAdapter: adapter2,
     sourceCodeLocationInfo: options.sourceCodeLocationInfo
   };
-  return isDocument2 ? parse15(content, opts) : parseFragment(context2, content, opts);
+  return isDocument2 ? parse14(content, opts) : parseFragment(context2, content, opts);
 }
 var renderOpts = { treeAdapter: adapter2 };
 function renderWithParse5(dom) {
@@ -250362,15 +250433,15 @@ var Parser4 = class {
 };
 
 // ../../node_modules/.pnpm/htmlparser2@8.0.2/node_modules/htmlparser2/lib/esm/index.js
-function parseDocument(data2, options) {
+function parseDocument2(data2, options) {
   const handler = new DomHandler(void 0, options);
   new Parser4(handler, options).end(data2);
   return handler.root;
 }
 
 // ../../node_modules/.pnpm/cheerio@1.0.0-rc.12/node_modules/cheerio/lib/esm/index.js
-var parse16 = getParse((content, options, isDocument2, context2) => options.xmlMode || options._useHtmlParser2 ? parseDocument(content, options) : parseWithParse5(content, options, isDocument2, context2));
-var load = getLoad(parse16, (dom, options) => options.xmlMode || options._useHtmlParser2 ? esm_default2(dom, options) : renderWithParse5(dom));
+var parse15 = getParse((content, options, isDocument2, context2) => options.xmlMode || options._useHtmlParser2 ? parseDocument2(content, options) : parseWithParse5(content, options, isDocument2, context2));
+var load = getLoad(parse15, (dom, options) => options.xmlMode || options._useHtmlParser2 ? esm_default2(dom, options) : renderWithParse5(dom));
 var esm_default3 = load([]);
 var { contains: contains2 } = static_exports;
 var { merge: merge4 } = static_exports;
@@ -250379,11 +250450,11 @@ var { root: root2 } = static_exports;
 
 // ../utils/src/maven-utils.ts
 var import_lodash14 = __toESM(require_lodash(), 1);
-import { existsSync as existsSync27, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
+import { existsSync as existsSync29, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
 import { join as join33 } from "path";
 
 // ../utils/src/download-utils.ts
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { writeFile as writeFile14 } from "fs/promises";
 
 // ../utils/src/maven-utils.ts
@@ -251751,7 +251822,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "15.0.1";
+var version3 = "15.0.3";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
@@ -251870,6 +251941,33 @@ var CliCore = class {
       throw new Error("The --manifests-tar-hash option is only supported when using --socket-mode");
     }
   }
+  /**
+   * Returns the ecosystems derived from purlTypes, or undefined if no purlTypes were specified.
+   * When both ecosystems and purlTypes are specified, purlTypes takes precedence for filtering.
+   */
+  getEffectiveEcosystems() {
+    if (this.options.purlTypes) {
+      const fromPurlTypes = this.options.purlTypes.map((pt) => getAdvisoryEcosystemFromPurlType(pt)).filter((e) => e !== void 0);
+      if (fromPurlTypes.length === 0) {
+        return void 0;
+      }
+      if (this.options.ecosystems) {
+        const intersection = fromPurlTypes.filter((e) => this.options.ecosystems.includes(e));
+        return intersection.length > 0 ? intersection : void 0;
+      }
+      return fromPurlTypes;
+    }
+    return this.options.ecosystems;
+  }
+  /**
+   * Filters an array of ecosystems by purlTypes if specified.
+   */
+  filterEcosystemsByPurlTypes(ecosystems) {
+    if (!this.options.purlTypes)
+      return ecosystems;
+    const allowedEcosystems = new Set(this.options.purlTypes.map((pt) => getAdvisoryEcosystemFromPurlType(pt)).filter((e) => e !== void 0));
+    return ecosystems.filter((e) => allowedEcosystems.has(e));
+  }
   async main() {
     const tmpDir = await createTmpDirectory("coana-cli-");
     this.coanaLogPath = join34(tmpDir, "coana-log.txt");
@@ -251962,7 +252060,7 @@ var CliCore = class {
     logger.info("Fetching artifacts from Socket backend");
     if (!this.options.disableExternalToolChecks) {
       const manifestFiles = await fetchManifestFilesFromManifestsTarHash(this.options.manifestsTarHash);
-      const ecosystems = getEcosystemsFromManifestFileNames(manifestFiles);
+      const ecosystems = this.filterEcosystemsByPurlTypes(getEcosystemsFromManifestFileNames(manifestFiles));
       await validateExternalDependencies(ecosystems, "run", manifestFiles);
     }
     this.sendProgress("SCAN_FOR_VULNERABILITIES", true, ".", ".");
@@ -252028,7 +252126,16 @@ var CliCore = class {
           otherModulesCommunicator,
           this.rootWorkingDirectory,
           ecosystem,
-          ["NPM", "PIP", "GO", "MAVEN", "NUGET", "RUST", "RUBYGEMS"].includes(ecosystem) && isEcosystemToAnalyze,
+          [
+            "NPM",
+            "PIP",
+            "GO",
+            "MAVEN",
+            "NUGET",
+            "RUST",
+            "RUBYGEMS",
+            ...process.env.COANA_ENABLE_PHP_ANALYSIS ? ["COMPOSER"] : []
+          ].includes(ecosystem) && isEcosystemToAnalyze,
           (workspaceName, workspaceNumber, totalWorkspacesForCurrentEcosystem) => {
             currentOverallWorkspace++;
             logger.info(bold(`Analyzing ecosystem ${ecosystem} for project ${workspaceName} (${workspaceNumber}/${totalWorkspacesForCurrentEcosystem}) - Overall progress: Project ${currentOverallWorkspace}/${totalWorkspaces}, ecosystem ${ecosystemIndex + 1}/${totalEcosystems}`));
@@ -252139,7 +252246,7 @@ var CliCore = class {
   async computeReport(otherModulesCommunicator) {
     const startTime = (/* @__PURE__ */ new Date()).toISOString();
     this.sendProgress("CREATE_PROJECT_MANAGER", true);
-    const manager = await ProjectManager.create(this.rootWorkingDirectory, otherModulesCommunicator, this.options.ecosystems, this.options.includeDirs, this.options.excludeDirs, this.options.changedFiles);
+    const manager = await ProjectManager.create(this.rootWorkingDirectory, otherModulesCommunicator, this.getEffectiveEcosystems(), this.options.includeDirs, this.options.excludeDirs, this.options.changedFiles);
     this.sendProgress("CREATE_PROJECT_MANAGER", false);
     const { reachabilitySupport, traditionalScaSupport, noSupport } = manager.getSubprojectsWithWorkspacePaths();
     await this.dashboardAPI.registerSubprojects([...reachabilitySupport, ...traditionalScaSupport, ...noSupport].map((sp) => ({
@@ -252332,7 +252439,7 @@ Subproject: ${subproject}`);
     const concurrency = Number(this.options.concurrency);
     const shouldIncludeWorkspaceInLogs = concurrency > 1;
     let npmProjectDirPool;
-    const nodeModulesExists = existsSync28(resolve42(subprojectPath, "node_modules"));
+    const nodeModulesExists = existsSync30(resolve42(subprojectPath, "node_modules"));
     if (ecosystem === "NPM" && concurrency > 1 && !nodeModulesExists) {
       const numCopies = Math.min(concurrency, workspaces.length) - 1;
       if (numCopies > 0) {
@@ -252391,7 +252498,7 @@ Subproject: ${subproject}`);
               [effectiveSubprojectPath, releaseDir] = await npmProjectDirPool.acquire();
             }
             try {
-              const perProjectEcosystems = ["PIP", "RUBYGEMS"];
+              const perProjectEcosystems = ["PIP", "RUBYGEMS", "COMPOSER"];
               const effectivePreinstallDir = preinstallDir && perProjectEcosystems.includes(ecosystem) ? join34(preinstallDir, workspacePath.replace(/\//g, "_")) : preinstallDir;
               const resAndDiagnostics = await this.runReachabilityAnalysis(
                 otherModulesCommunicator,
@@ -252520,7 +252627,7 @@ Subproject: ${subproject}`);
       const ecosystemDir = join34(preinstallDir, ecosystem);
       await mkdir6(ecosystemDir, { recursive: true });
       for (const [workspace, analysisData] of Object.entries(workspaceToAnalysisData)) {
-        const perProjectEcosystems = ["PIP", "RUBYGEMS"];
+        const perProjectEcosystems = ["PIP", "RUBYGEMS", "COMPOSER"];
         const installDir = perProjectEcosystems.includes(ecosystem) ? join34(ecosystemDir, workspace.replace(/\//g, "_")) : ecosystemDir;
         if (installDir !== ecosystemDir) {
           await mkdir6(installDir, { recursive: true });
@@ -253007,6 +253114,18 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
   logger.initWinstonLogger(options.debug, logFile);
   try {
     await initializeComputeFixesAndUpgradePurls(path9, options);
+    if (!options.exclude) {
+      const ignorePaths = await inferExcludeDirsFromConfigurationFiles(path9);
+      if (ignorePaths) {
+        options.exclude = ignorePaths.flatMap((p3) => {
+          const firstSlash = p3.indexOf("/");
+          const prefix = firstSlash === -1 || firstSlash === p3.length - 1 ? "**/" : "";
+          const normalized = p3.startsWith("/") ? p3.slice(1) : p3;
+          const pattern = `${prefix}${normalized}`;
+          return [pattern, `${pattern}/**`];
+        });
+      }
+    }
     const optionsToUse = {
       ...y(options, ["minimumReleaseAge"]),
       minimumReleaseAgeInMinutes: options.minimumReleaseAge ? parseMinimumReleaseAgeToMinutes(options.minimumReleaseAge) : void 0