@form8ion/socket-security 1.0.0-beta.1

package/LICENSE

@@ -0,0 +1,27 @@
+MIT License
+
+Copyright (c) 2026 Matt Travi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of 
+this software and
+associated documentation files (the "Software"), to deal in the Software without 
+restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, 
+sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished 
+to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice shall be included in all 
+copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 
+IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE 
+AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR 
+OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN 
+CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,109 @@
+# socket-security
+
+form8ion plugin for projects protected by Socket security
+
+<!--status-badges start -->
+
+[![Node CI Workflow Status][github-actions-ci-badge]][github-actions-ci-link]
+[![Codecov][coverage-badge]][coverage-link]
+![SLSA Level 2][slsa-badge]
+
+<!--status-badges end -->
+
+## Table of Contents
+
+* [Usage](#usage)
+  * [Installation](#installation)
+  * [Example](#example)
+    * [Import](#import)
+    * [Execute](#execute)
+* [Contributing](#contributing)
+  * [Dependencies](#dependencies)
+  * [Verification](#verification)
+
+## Usage
+
+<!--consumer-badges start -->
+
+<!--consumer-badges end -->
+
+### Installation
+
+```sh
+$ npm install @form8ion/socket-security
+```
+
+### Example
+
+#### Import
+
+```javascript
+import {scaffold, lift} from '@form8ion/socket-security';
+```
+
+#### Execute
+
+```javascript
+(async () => {
+  const projectRoot = process.cwd();
+
+  await scaffold({projectRoot});
+
+  await lift({projectRoot});
+})();
+```
+
+## Contributing
+
+<!--contribution-badges start -->
+
+[![Commitizen friendly][commitizen-badge]][commitizen-link]
+[![Conventional Commits][commit-convention-badge]][commit-convention-link]
+[![Renovate][renovate-badge]][renovate-link]
+[![PRs Welcome][PRs-badge]][PRs-link]
+[![semantic-release: angular][semantic-release-badge]][semantic-release-link]
+
+<!--contribution-badges end -->
+
+### Dependencies
+
+```sh
+$ nvm install
+$ npm install
+```
+
+### Verification
+
+```sh
+$ npm test
+```
+
+[github-actions-ci-link]: https://github.com/form8ion/socket-security/actions?query=workflow%3A%22Node.js+CI%22+branch%3Amaster
+
+[github-actions-ci-badge]: https://img.shields.io/github/actions/workflow/status/form8ion/socket-security/node-ci.yml.svg?branch=master&logo=github
+
+[coverage-link]: https://codecov.io/github/form8ion/socket-security
+
+[coverage-badge]: https://img.shields.io/codecov/c/github/form8ion/socket-security/master?logo=codecov
+
+[slsa-badge]: https://slsa.dev/images/gh-badge-level2.svg
+
+[commitizen-link]: http://commitizen.github.io/cz-cli/
+
+[commitizen-badge]: https://img.shields.io/badge/commitizen-friendly-brightgreen.svg
+
+[commit-convention-link]: https://conventionalcommits.org
+
+[commit-convention-badge]: https://img.shields.io/badge/Conventional%20Commits-1.0.0-yellow.svg
+
+[renovate-link]: https://renovatebot.com
+
+[renovate-badge]: https://img.shields.io/badge/renovate-enabled-brightgreen.svg?logo=renovate
+
+[PRs-link]: https://makeapullrequest.com
+
+[PRs-badge]: https://img.shields.io/badge/PRs-welcome-brightgreen.svg
+
+[semantic-release-link]: https://github.com/semantic-release/semantic-release
+
+[semantic-release-badge]: https://img.shields.io/badge/semantic--release-angular-e10079?logo=semantic-release

package/example.js

@@ -0,0 +1,17 @@
+// #### Import
+// remark-usage-ignore-next
+import stubbedFs from 'mock-fs';
+import {scaffold, lift} from './lib/index.js';
+
+// remark-usage-ignore-next
+stubbedFs({'package.json': JSON.stringify({name: 'example-package'})});
+
+// #### Execute
+
+(async () => {
+  const projectRoot = process.cwd();
+
+  await scaffold({projectRoot});
+
+  await lift({projectRoot});
+})();

package/lib/index.js

@@ -0,0 +1,25 @@
+import { loadPackageJson } from '@form8ion/javascript-core';
+
+/* eslint-disable-next-line no-empty-pattern */
+function scaffold({}) {
+  return undefined;
+}
+
+async function lift({projectRoot}) {
+  const {name: packageName} = await loadPackageJson({projectRoot});
+
+  return {
+    badges: {
+      status: {
+        socket: {
+          img: `https://badge.socket.dev/npm/package/${packageName}/latest`,
+          link: `https://socket.dev/npm/package/${packageName}/overview`,
+          text: 'Socket'
+        }
+      }
+    }
+  };
+}
+
+export { lift, scaffold };
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/scaffolder.js","../src/lifter.js"],"sourcesContent":["/* eslint-disable-next-line no-empty-pattern */\nexport default function scaffold({}) {\n  return undefined;\n}\n","import {loadPackageJson} from '@form8ion/javascript-core';\n\nexport default async function lift({projectRoot}) {\n  const {name: packageName} = await loadPackageJson({projectRoot});\n\n  return {\n    badges: {\n      status: {\n        socket: {\n          img: `https://badge.socket.dev/npm/package/${packageName}/latest`,\n          link: `https://socket.dev/npm/package/${packageName}/overview`,\n          text: 'Socket'\n        }\n      }\n    }\n  };\n}\n"],"names":[],"mappings":";;AAAA;AACe,SAAS,QAAQ,CAAC,EAAE,EAAE;AACrC,EAAE,OAAO,SAAS;AAClB;;ACDe,eAAe,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE;AAClD,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC;;AAElE,EAAE,OAAO;AACT,IAAI,MAAM,EAAE;AACZ,MAAM,MAAM,EAAE;AACd,QAAQ,MAAM,EAAE;AAChB,UAAU,GAAG,EAAE,CAAC,qCAAqC,EAAE,WAAW,CAAC,OAAO,CAAC;AAC3E,UAAU,IAAI,EAAE,CAAC,+BAA+B,EAAE,WAAW,CAAC,SAAS,CAAC;AACxE,UAAU,IAAI,EAAE;AAChB;AACA;AACA;AACA,GAAG;AACH;;;;"}

package/package.json

@@ -0,0 +1,85 @@
+{
+  "name": "@form8ion/socket-security",
+  "description": "form8ion plugin for projects protected by Socket security",
+  "license": "MIT",
+  "version": "1.0.0-beta.1",
+  "type": "module",
+  "author": "Matt Travi <npm@travi.org> (https://matt.travi.org)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/form8ion/socket-security.git"
+  },
+  "bugs": "https://github.com/form8ion/socket-security/issues",
+  "homepage": "https://www.npmjs.com/package/@form8ion/socket-security",
+  "exports": "./lib/index.js",
+  "main": "./lib/index.js",
+  "sideEffects": false,
+  "scripts": {
+    "pretest": "run-s build",
+    "test": "npm-run-all --print-label --parallel lint:* --parallel test:*",
+    "lint:gherkin": "gplint --config .gplintrc.json",
+    "lint:js": "eslint . --cache",
+    "lint:js:fix": "run-s 'lint:js -- --fix'",
+    "lint:lockfile": "lockfile-lint",
+    "lint:md": "remark . --frail",
+    "lint:peer": "npm ls >/dev/null",
+    "lint:publish": "publint --strict",
+    "test:unit": "run-s 'test:unit:base -- --coverage'",
+    "test:unit:base": "NODE_ENV=test DEBUG=any vitest run src/",
+    "test:integration": "run-s 'test:integration:base -- --profile noWip'",
+    "pretest:integration:base": "run-s build",
+    "test:integration:base": "NODE_OPTIONS=--enable-source-maps DEBUG=any cucumber-js test/integration",
+    "test:integration:debug": "DEBUG=test run-s test:integration",
+    "test:integration:focus": "run-s 'test:integration:base -- --profile focus'",
+    "test:integration:wip": "run-s 'test:integration:base -- --profile wip'",
+    "test:integration:wip:debug": "DEBUG=test run-s 'test:integration:wip'",
+    "prebuild": "run-s clean",
+    "build": "npm-run-all --print-label --parallel build:*",
+    "build:js": "rollup --config",
+    "clean": "rimraf ./lib",
+    "pregenerate:md": "run-s build",
+    "generate:md": "remark . --output",
+    "prepack": "run-s build",
+    "prepare": "husky",
+    "watch": "run-s 'build:js -- --watch'"
+  },
+  "files": [
+    "example.js",
+    "lib/",
+    "src/"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "packageManager": "npm@11.16.0",
+  "devDependencies": {
+    "@cucumber/cucumber": "13.0.0",
+    "@form8ion/commitlint-config": "2.0.18",
+    "@form8ion/core": "4.11.2",
+    "@form8ion/eslint-config": "7.0.18",
+    "@form8ion/eslint-config-cucumber": "1.4.1",
+    "@form8ion/eslint-config-vitest": "1.1.0",
+    "@form8ion/remark-lint-preset": "6.0.7",
+    "@travi/any": "3.3.0",
+    "@vitest/coverage-v8": "4.1.9",
+    "cz-conventional-changelog": "3.3.0",
+    "gplint": "2.5.2",
+    "husky": "9.1.7",
+    "lockfile-lint": "5.0.0",
+    "mock-fs": "5.5.0",
+    "npm-run-all2": "9.0.2",
+    "publint": "0.3.21",
+    "remark-cli": "12.0.1",
+    "remark-toc": "9.0.0",
+    "remark-usage": "11.0.1",
+    "rimraf": "6.1.3",
+    "rollup": "4.62.2",
+    "rollup-plugin-auto-external": "2.0.0",
+    "vitest": "4.1.9",
+    "vitest-when": "0.10.0"
+  },
+  "dependencies": {
+    "@form8ion/javascript-core": "^13.0.0"
+  }
+}

package/src/canary.test.js

@@ -0,0 +1,7 @@
+import {assert, describe, it} from 'vitest';
+
+describe('canary', () => {
+  it('should pass', () => {
+    assert.isTrue(true);
+  });
+});

package/src/index.js

@@ -0,0 +1,2 @@
+export {default as scaffold} from './scaffolder.js';
+export {default as lift} from './lifter.js';

package/src/lifter.js

@@ -0,0 +1,17 @@
+import {loadPackageJson} from '@form8ion/javascript-core';
+
+export default async function lift({projectRoot}) {
+  const {name: packageName} = await loadPackageJson({projectRoot});
+
+  return {
+    badges: {
+      status: {
+        socket: {
+          img: `https://badge.socket.dev/npm/package/${packageName}/latest`,
+          link: `https://socket.dev/npm/package/${packageName}/overview`,
+          text: 'Socket'
+        }
+      }
+    }
+  };
+}

package/src/lifter.test.js

@@ -0,0 +1,31 @@
+import {loadPackageJson} from '@form8ion/javascript-core';
+
+import {describe, it, expect, vi} from 'vitest';
+import {when} from 'vitest-when';
+import any from '@travi/any';
+
+import lift from './lifter.js';
+
+vi.mock('@form8ion/javascript-core');
+
+describe('lifter', () => {
+  it('should define the badge based on the npm package name', async () => {
+    const projectRoot = any.string();
+    const packageName = any.word();
+    when(loadPackageJson).calledWith({projectRoot}).thenResolve({name: packageName});
+
+    const result = await lift({projectRoot});
+
+    expect(result).toEqual({
+      badges: {
+        status: {
+          socket: {
+            img: `https://badge.socket.dev/npm/package/${packageName}/latest`,
+            link: `https://socket.dev/npm/package/${packageName}/overview`,
+            text: 'Socket'
+          }
+        }
+      }
+    });
+  });
+});

package/src/scaffolder.js

@@ -0,0 +1,4 @@
+/* eslint-disable-next-line no-empty-pattern */
+export default function scaffold({}) {
+  return undefined;
+}