@socketsecurity/cli-with-sentry 0.14.44 → 0.14.46

package/dist/constants.d.ts

@@ -25,15 +25,15 @@ type IPC = Readonly<{
     SOCKET_CLI_SAFE_WRAPPER?: boolean;
 }>;
 declare const constants: {
+    readonly CI: "CI";
     readonly [kInternalsSymbol]: registryConstants.Internals;
     readonly NODE_MODULES: "node_modules";
     readonly PACKAGE_JSON: "package.json";
-    readonly TAP: "TAP";
     readonly kInternalsSymbol: unique symbol;
-    readonly CI: "CI";
     readonly NODE_AUTH_TOKEN: "NODE_AUTH_TOKEN";
     readonly NODE_ENV: "NODE_ENV";
     readonly PRE_COMMIT: "PRE_COMMIT";
+    readonly TAP: "TAP";
     readonly VITEST: "VITEST";
     readonly AT_LATEST: "@latest";
     readonly BIOME_JSON: "biome.json";

package/dist/constants.js

@@ -1,8 +1,197 @@
 'use strict';
-var constants = require('./constants2.js');
 
+var fs = require('node:fs');
+var path = require('node:path');
+var process = require('node:process');
+var registryConstants = require('@socketsecurity/registry/lib/constants');
+var env = require('@socketsecurity/registry/lib/env');
 
+const {
+  NODE_MODULES,
+  PACKAGE_JSON,
+  kInternalsSymbol,
+  [kInternalsSymbol]: {
+    createConstantsObject
+  }
+} = registryConstants;
+const ALERT_TYPE_CRITICAL_CVE = 'criticalCVE';
+const ALERT_TYPE_CVE = 'cve';
+const ALERT_TYPE_MEDIUM_CVE = 'mediumCVE';
+const ALERT_TYPE_MILD_CVE = 'mildCVE';
+const ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE = 'socketUpgradeAvailable';
+const API_V0_URL = 'https://api.socket.dev/v0';
+const BABEL_RUNTIME = '@babel/runtime';
+const BINARY_LOCK_EXT = '.lockb';
+const BUN = 'bun';
+const CLI = 'cli';
+const CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER = 'firstPatchedVersionIdentifier';
+const CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE = 'vulnerableVersionRange';
+const LOCK_EXT = '.lock';
+const MODULE_SYNC = 'module-sync';
+const NPM_INJECTION = 'npm-injection';
+const NPM_REGISTRY_URL = 'https://registry.npmjs.org';
+const NPX = 'npx';
+const PNPM = 'pnpm';
+const REQUIRE = 'require';
+const SHADOW_BIN = 'shadow-bin';
+const SOCKET = 'socket';
+const SOCKET_CLI_DEBUG = 'SOCKET_CLI_DEBUG';
+const SOCKET_CLI_FIX = 'SOCKET_CLI_FIX';
+const SOCKET_CLI_ISSUES_URL = 'https://github.com/SocketDev/socket-cli/issues';
+const SOCKET_CLI_LEGACY_BUILD = 'SOCKET_CLI_LEGACY_BUILD';
+const SOCKET_CLI_OPTIMIZE = 'SOCKET_CLI_OPTIMIZE';
+const SOCKET_CLI_PUBLISHED_BUILD = 'SOCKET_CLI_PUBLISHED_BUILD';
+const SOCKET_CLI_SAFE_WRAPPER = 'SOCKET_CLI_SAFE_WRAPPER';
+const SOCKET_CLI_SENTRY_BUILD = 'SOCKET_CLI_SENTRY_BUILD';
+const SOCKET_CLI_VERSION_HASH = 'SOCKET_CLI_VERSION_HASH';
+const VLT = 'vlt';
+const YARN = 'yarn';
+const YARN_BERRY = `${YARN}/berry`;
+const YARN_CLASSIC = `${YARN}/classic`;
+let _Sentry;
+const LAZY_BATCH_PURL_ENDPOINT = () => {
+  const query = new URLSearchParams();
+  query.append('alerts', 'true');
+  query.append('compact', 'true');
+  return `${API_V0_URL}/purl?${query}`;
+};
+const LAZY_DIST_TYPE = () => registryConstants.SUPPORTS_NODE_REQUIRE_MODULE ? MODULE_SYNC : REQUIRE;
+const LAZY_ENV = () => Object.freeze({
+  // Lazily access registryConstants.ENV.
+  ...registryConstants.ENV,
+  // Flag set to help debug Socket CLI.
+  [SOCKET_CLI_DEBUG]: env.envAsBoolean(process.env[SOCKET_CLI_DEBUG]),
+  // Inline the following environment values so that they CANNOT be influenced
+  // by user provided environment variables.
+  //
+  // Flag set to determine if this is the Legacy build.
+  // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_LEGACY_BUILD]".
+  [SOCKET_CLI_LEGACY_BUILD]: false,
+  // Flag set to determine if this is a published build.
+  // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_PUBLISHED_BUILD]".
+  [SOCKET_CLI_PUBLISHED_BUILD]: true,
+  // Flag set to determine if this is the Sentry build.
+  // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_SENTRY_BUILD]".
+  [SOCKET_CLI_SENTRY_BUILD]: true,
+  // Flag set to determine the version hash of the build.
+  // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_VERSION_HASH]".
+  [SOCKET_CLI_VERSION_HASH]: "0.14.46:bbb426c:2ebaf778:pub"
+});
+const lazyCdxgenBinPath = () =>
+// Lazily access constants.nmBinPath.
+path.join(constants.nmBinPath, 'cdxgen');
+const lazyDistPath = () =>
+// Lazily access constants.rootDistPath and constants.DIST_TYPE.
+path.join(constants.rootDistPath, constants.DIST_TYPE);
+const lazyInstrumentWithSentryPath = () =>
+// Lazily access constants.rootDistPath.
+path.join(constants.rootDistPath, 'instrument-with-sentry.js');
+const lazyNmBinPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, `${NODE_MODULES}/.bin`);
+const lazyNpmInjectionPath = () =>
+// Lazily access constants.distPath.
+path.join(constants.distPath, `${NPM_INJECTION}.js`);
+const lazyRootBinPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, 'bin');
+const lazyRootDistPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, 'dist');
+const lazyRootPath = () =>
+// The '@rollup/plugin-replace' will replace "process.env.['TAP']".
+path.resolve(fs.realpathSync.native(__dirname), '..');
+const lazyRootPkgJsonPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, PACKAGE_JSON);
+const lazyShadowBinPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, SHADOW_BIN);
+const lazySynpBinPath = () =>
+// Lazily access constants.nmBinPath.
+path.join(constants.nmBinPath, 'synp');
+const constants = createConstantsObject({
+  ALERT_TYPE_CRITICAL_CVE,
+  ALERT_TYPE_CVE,
+  ALERT_TYPE_MEDIUM_CVE,
+  ALERT_TYPE_MILD_CVE,
+  ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE,
+  API_V0_URL,
+  BABEL_RUNTIME,
+  // Lazily defined values are initialized as `undefined` to keep their key order.
+  BATCH_PURL_ENDPOINT: undefined,
+  BINARY_LOCK_EXT,
+  BUN,
+  CLI,
+  CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER,
+  CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE,
+  DIST_TYPE: undefined,
+  ENV: undefined,
+  LOCK_EXT,
+  MODULE_SYNC,
+  NPM_INJECTION,
+  NPM_REGISTRY_URL,
+  NPX,
+  PNPM,
+  REQUIRE,
+  SHADOW_BIN,
+  SOCKET,
+  SOCKET_CLI_DEBUG,
+  SOCKET_CLI_FIX,
+  SOCKET_CLI_ISSUES_URL,
+  SOCKET_CLI_LEGACY_BUILD,
+  SOCKET_CLI_OPTIMIZE,
+  SOCKET_CLI_PUBLISHED_BUILD,
+  SOCKET_CLI_SAFE_WRAPPER,
+  SOCKET_CLI_SENTRY_BUILD,
+  SOCKET_CLI_VERSION_HASH,
+  VLT,
+  YARN,
+  YARN_BERRY,
+  YARN_CLASSIC,
+  cdxgenBinPath: undefined,
+  distPath: undefined,
+  instrumentWithSentryPath: undefined,
+  nmBinPath: undefined,
+  npmInjectionPath: undefined,
+  rootBinPath: undefined,
+  rootDistPath: undefined,
+  rootPath: undefined,
+  rootPkgJsonPath: undefined,
+  shadowBinPath: undefined,
+  synpBinPath: undefined
+}, {
+  getters: {
+    BATCH_PURL_ENDPOINT: LAZY_BATCH_PURL_ENDPOINT,
+    DIST_TYPE: LAZY_DIST_TYPE,
+    ENV: LAZY_ENV,
+    distPath: lazyDistPath,
+    cdxgenBinPath: lazyCdxgenBinPath,
+    instrumentWithSentryPath: lazyInstrumentWithSentryPath,
+    nmBinPath: lazyNmBinPath,
+    npmInjectionPath: lazyNpmInjectionPath,
+    rootBinPath: lazyRootBinPath,
+    rootDistPath: lazyRootDistPath,
+    rootPath: lazyRootPath,
+    rootPkgJsonPath: lazyRootPkgJsonPath,
+    shadowBinPath: lazyShadowBinPath,
+    synpBinPath: lazySynpBinPath
+  },
+  internals: {
+    getSentry() {
+      return _Sentry;
+    },
+    setSentry(Sentry) {
+      if (_Sentry === undefined) {
+        _Sentry = Sentry;
+        return true;
+      }
+      return false;
+    }
+  },
+  mixin: registryConstants
+});
 
-module.exports = constants.constants;
-//# debugId=415faf35-61fa-4973-8b4c-040eacb52c54
+module.exports = constants;
+//# debugId=f78c9185-0736-4c65-8fa7-88f4d179ae89
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;","debugId":"415faf35-61fa-4973-8b4c-040eacb52c54"}
+{"version":3,"file":"constants.js","sources":["../../src/constants.ts"],"sourcesContent":["import { realpathSync } from 'node:fs'\nimport path from 'node:path'\nimport process from 'node:process'\n\nimport registryConstants from '@socketsecurity/registry/lib/constants'\nimport { envAsBoolean } from '@socketsecurity/registry/lib/env'\n\nimport type { Remap } from '@socketsecurity/registry/lib/objects'\n\nconst {\n  NODE_MODULES,\n  PACKAGE_JSON,\n  kInternalsSymbol,\n  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: {\n    createConstantsObject\n  }\n} = registryConstants\n\ntype RegistryEnv = typeof registryConstants.ENV\n\ntype RegistryInternals = (typeof registryConstants)['Symbol(kInternalsSymbol)']\n\ntype Sentry = any\n\ntype Internals = Remap<\n  Omit<RegistryInternals, 'getIPC'> &\n    Readonly<{\n      getIPC: {\n        (): Promise<IPC>\n        <K extends keyof IPC | undefined>(\n          key?: K\n        ): Promise<K extends keyof IPC ? IPC[K] : IPC>\n      }\n      getSentry: () => Sentry\n      setSentry(Sentry: Sentry): boolean\n    }>\n>\n\ntype ENV = Remap<\n  RegistryEnv &\n    Readonly<{\n      SOCKET_CLI_DEBUG: boolean\n      SOCKET_CLI_LEGACY_BUILD: boolean\n      SOCKET_CLI_PUBLISHED_BUILD: boolean\n      SOCKET_CLI_SENTRY_BUILD: boolean\n      SOCKET_CLI_VERSION_HASH: string\n    }>\n>\n\ntype IPC = Readonly<{\n  SOCKET_CLI_FIX?: string\n  SOCKET_CLI_OPTIMIZE?: boolean\n  SOCKET_CLI_SAFE_WRAPPER?: boolean\n}>\n\ntype Constants = Remap<\n  Omit<typeof registryConstants, 'Symbol(kInternalsSymbol)' | 'ENV' | 'IPC'> & {\n    readonly 'Symbol(kInternalsSymbol)': Internals\n    readonly ALERT_TYPE_CRITICAL_CVE: 'criticalCVE'\n    readonly ALERT_TYPE_CVE: 'cve'\n    readonly ALERT_TYPE_MEDIUM_CVE: 'mediumCVE'\n    readonly ALERT_TYPE_MILD_CVE: 'mildCVE'\n    readonly ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE: 'socketUpgradeAvailable'\n    readonly API_V0_URL: 'https://api.socket.dev/v0'\n    readonly BABEL_RUNTIME: '@babel/runtime'\n    readonly BATCH_PURL_ENDPOINT: 'https://api.socket.dev/v0/purl?alerts=true&compact=true'\n    readonly BINARY_LOCK_EXT: '.lockb'\n    readonly BUN: 'bun'\n    readonly CLI: 'cli'\n    readonly CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER: 'firstPatchedVersionIdentifier'\n    readonly CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE: 'vulnerableVersionRange'\n    readonly ENV: ENV\n    readonly DIST_TYPE: 'module-sync' | 'require'\n    readonly IPC: IPC\n    readonly LOCK_EXT: '.lock'\n    readonly MODULE_SYNC: 'module-sync'\n    readonly NPM_INJECTION: 'npm-injection'\n    readonly NPM_REGISTRY_URL: 'https://registry.npmjs.org'\n    readonly NPX: 'npx'\n    readonly PNPM: 'pnpm'\n    readonly REQUIRE: 'require'\n    readonly SHADOW_BIN: 'shadow-bin'\n    readonly SOCKET: 'socket'\n    readonly SOCKET_CLI_DEBUG: 'SOCKET_CLI_DEBUG'\n    readonly SOCKET_CLI_FIX: 'SOCKET_CLI_FIX'\n    readonly SOCKET_CLI_ISSUES_URL: 'https://github.com/SocketDev/socket-cli/issues'\n    readonly SOCKET_CLI_LEGACY_BUILD: 'SOCKET_CLI_LEGACY_BUILD'\n    readonly SOCKET_CLI_OPTIMIZE: 'SOCKET_CLI_OPTIMIZE'\n    readonly SOCKET_CLI_PUBLISHED_BUILD: 'SOCKET_CLI_PUBLISHED_BUILD'\n    readonly SOCKET_CLI_SAFE_WRAPPER: 'SOCKET_CLI_SAFE_WRAPPER'\n    readonly SOCKET_CLI_SENTRY_BUILD: 'SOCKET_CLI_SENTRY_BUILD'\n    readonly SOCKET_CLI_VERSION_HASH: 'SOCKET_CLI_VERSION_HASH'\n    readonly VLT: 'vlt'\n    readonly YARN: 'yarn'\n    readonly YARN_BERRY: 'yarn/berry'\n    readonly YARN_CLASSIC: 'yarn/classic'\n    readonly cdxgenBinPath: string\n    readonly distPath: string\n    readonly instrumentWithSentryPath: string\n    readonly nmBinPath: string\n    readonly npmInjectionPath: string\n    readonly rootBinPath: string\n    readonly rootDistPath: string\n    readonly rootPath: string\n    readonly rootPkgJsonPath: string\n    readonly shadowBinPath: string\n    readonly synpBinPath: string\n  }\n>\n\nconst ALERT_TYPE_CRITICAL_CVE = 'criticalCVE'\nconst ALERT_TYPE_CVE = 'cve'\nconst ALERT_TYPE_MEDIUM_CVE = 'mediumCVE'\nconst ALERT_TYPE_MILD_CVE = 'mildCVE'\nconst ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE = 'socketUpgradeAvailable'\nconst API_V0_URL = 'https://api.socket.dev/v0'\nconst BABEL_RUNTIME = '@babel/runtime'\nconst BINARY_LOCK_EXT = '.lockb'\nconst BUN = 'bun'\nconst CLI = 'cli'\nconst CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER =\n  'firstPatchedVersionIdentifier'\nconst CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE = 'vulnerableVersionRange'\nconst LOCK_EXT = '.lock'\nconst MODULE_SYNC = 'module-sync'\nconst NPM_INJECTION = 'npm-injection'\nconst NPM_REGISTRY_URL = 'https://registry.npmjs.org'\nconst NPX = 'npx'\nconst PNPM = 'pnpm'\nconst REQUIRE = 'require'\nconst SHADOW_BIN = 'shadow-bin'\nconst SOCKET = 'socket'\nconst SOCKET_CLI_DEBUG = 'SOCKET_CLI_DEBUG'\nconst SOCKET_CLI_FIX = 'SOCKET_CLI_FIX'\nconst SOCKET_CLI_ISSUES_URL = 'https://github.com/SocketDev/socket-cli/issues'\nconst SOCKET_CLI_LEGACY_BUILD = 'SOCKET_CLI_LEGACY_BUILD'\nconst SOCKET_CLI_OPTIMIZE = 'SOCKET_CLI_OPTIMIZE'\nconst SOCKET_CLI_PUBLISHED_BUILD = 'SOCKET_CLI_PUBLISHED_BUILD'\nconst SOCKET_CLI_SAFE_WRAPPER = 'SOCKET_CLI_SAFE_WRAPPER'\nconst SOCKET_CLI_SENTRY_BUILD = 'SOCKET_CLI_SENTRY_BUILD'\nconst SOCKET_CLI_VERSION_HASH = 'SOCKET_CLI_VERSION_HASH'\nconst VLT = 'vlt'\nconst YARN = 'yarn'\nconst YARN_BERRY = `${YARN}/berry`\nconst YARN_CLASSIC = `${YARN}/classic`\n\nlet _Sentry: any\n\nconst LAZY_BATCH_PURL_ENDPOINT = () => {\n  const query = new URLSearchParams()\n  query.append('alerts', 'true')\n  query.append('compact', 'true')\n  return `${API_V0_URL}/purl?${query}`\n}\n\nconst LAZY_DIST_TYPE = () =>\n  registryConstants.SUPPORTS_NODE_REQUIRE_MODULE ? MODULE_SYNC : REQUIRE\n\nconst LAZY_ENV = () =>\n  Object.freeze({\n    // Lazily access registryConstants.ENV.\n    ...registryConstants.ENV,\n    // Flag set to help debug Socket CLI.\n    [SOCKET_CLI_DEBUG]: envAsBoolean(process.env[SOCKET_CLI_DEBUG]),\n    // Inline the following environment values so that they CANNOT be influenced\n    // by user provided environment variables.\n    //\n    // Flag set to determine if this is the Legacy build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_LEGACY_BUILD]\".\n    [SOCKET_CLI_LEGACY_BUILD]: process.env[SOCKET_CLI_LEGACY_BUILD],\n    // Flag set to determine if this is a published build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_PUBLISHED_BUILD]\".\n    [SOCKET_CLI_PUBLISHED_BUILD]: process.env[SOCKET_CLI_PUBLISHED_BUILD],\n    // Flag set to determine if this is the Sentry build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_SENTRY_BUILD]\".\n    [SOCKET_CLI_SENTRY_BUILD]: process.env[SOCKET_CLI_SENTRY_BUILD],\n    // Flag set to determine the version hash of the build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_VERSION_HASH]\".\n    [SOCKET_CLI_VERSION_HASH]: process.env[SOCKET_CLI_VERSION_HASH]\n  })\n\nconst lazyCdxgenBinPath = () =>\n  // Lazily access constants.nmBinPath.\n  path.join(constants.nmBinPath, 'cdxgen')\n\nconst lazyDistPath = () =>\n  // Lazily access constants.rootDistPath and constants.DIST_TYPE.\n  path.join(constants.rootDistPath, constants.DIST_TYPE)\n\nconst lazyInstrumentWithSentryPath = () =>\n  // Lazily access constants.rootDistPath.\n  path.join(constants.rootDistPath, 'instrument-with-sentry.js')\n\nconst lazyNmBinPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, `${NODE_MODULES}/.bin`)\n\nconst lazyNpmInjectionPath = () =>\n  // Lazily access constants.distPath.\n  path.join(constants.distPath, `${NPM_INJECTION}.js`)\n\nconst lazyRootBinPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, 'bin')\n\nconst lazyRootDistPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, 'dist')\n\nconst lazyRootPath = () =>\n  // The '@rollup/plugin-replace' will replace \"process.env.['TAP']\".\n  path.resolve(\n    realpathSync.native(__dirname),\n    process.env['TAP'] ? '../..' : '..'\n  )\n\nconst lazyRootPkgJsonPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, PACKAGE_JSON)\n\nconst lazyShadowBinPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, SHADOW_BIN)\n\nconst lazySynpBinPath = () =>\n  // Lazily access constants.nmBinPath.\n  path.join(constants.nmBinPath, 'synp')\n\nconst constants = <Constants>createConstantsObject(\n  {\n    ALERT_TYPE_CRITICAL_CVE,\n    ALERT_TYPE_CVE,\n    ALERT_TYPE_MEDIUM_CVE,\n    ALERT_TYPE_MILD_CVE,\n    ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE,\n    API_V0_URL,\n    BABEL_RUNTIME,\n    // Lazily defined values are initialized as `undefined` to keep their key order.\n    BATCH_PURL_ENDPOINT: undefined,\n    BINARY_LOCK_EXT,\n    BUN,\n    CLI,\n    CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER,\n    CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE,\n    DIST_TYPE: undefined,\n    ENV: undefined,\n    LOCK_EXT,\n    MODULE_SYNC,\n    NPM_INJECTION,\n    NPM_REGISTRY_URL,\n    NPX,\n    PNPM,\n    REQUIRE,\n    SHADOW_BIN,\n    SOCKET,\n    SOCKET_CLI_DEBUG,\n    SOCKET_CLI_FIX,\n    SOCKET_CLI_ISSUES_URL,\n    SOCKET_CLI_LEGACY_BUILD,\n    SOCKET_CLI_OPTIMIZE,\n    SOCKET_CLI_PUBLISHED_BUILD,\n    SOCKET_CLI_SAFE_WRAPPER,\n    SOCKET_CLI_SENTRY_BUILD,\n    SOCKET_CLI_VERSION_HASH,\n    VLT,\n    YARN,\n    YARN_BERRY,\n    YARN_CLASSIC,\n    cdxgenBinPath: undefined,\n    distPath: undefined,\n    instrumentWithSentryPath: undefined,\n    nmBinPath: undefined,\n    npmInjectionPath: undefined,\n    rootBinPath: undefined,\n    rootDistPath: undefined,\n    rootPath: undefined,\n    rootPkgJsonPath: undefined,\n    shadowBinPath: undefined,\n    synpBinPath: undefined\n  },\n  {\n    getters: {\n      BATCH_PURL_ENDPOINT: LAZY_BATCH_PURL_ENDPOINT,\n      DIST_TYPE: LAZY_DIST_TYPE,\n      ENV: LAZY_ENV,\n      distPath: lazyDistPath,\n      cdxgenBinPath: lazyCdxgenBinPath,\n      instrumentWithSentryPath: lazyInstrumentWithSentryPath,\n      nmBinPath: lazyNmBinPath,\n      npmInjectionPath: lazyNpmInjectionPath,\n      rootBinPath: lazyRootBinPath,\n      rootDistPath: lazyRootDistPath,\n      rootPath: lazyRootPath,\n      rootPkgJsonPath: lazyRootPkgJsonPath,\n      shadowBinPath: lazyShadowBinPath,\n      synpBinPath: lazySynpBinPath\n    },\n    internals: {\n      getSentry() {\n        return _Sentry\n      },\n      setSentry(Sentry: Sentry): boolean {\n        if (_Sentry === undefined) {\n          _Sentry = Sentry\n          return true\n        }\n        return false\n      }\n    },\n    mixin: registryConstants\n  }\n)\n\nexport default constants\n"],"names":["createConstantsObject","query","path","constants","BATCH_PURL_ENDPOINT","DIST_TYPE","ENV","cdxgenBinPath","distPath","instrumentWithSentryPath","nmBinPath","npmInjectionPath","rootBinPath","rootDistPath","rootPath","rootPkgJsonPath","shadowBinPath","synpBinPath","getters","internals","getSentry","_Sentry","mixin"],"mappings":";;;;;;;;AASA;;;;AAIE;AACEA;AACF;AACF;AA8FA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AAEA;AACE;AACAC;AACAA;AACA;AACF;AAEA;AAGA;AAEI;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF;AAEF;AACE;AACAC;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAKF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEIC;;;;;;;;AASF;AACAC;;;;;;AAMAC;AACAC;;;;;;;;;;;;;;;;;;;;;;;AAuBAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACF;AAEEC;AACEd;AACAC;AACAC;AACAE;AACAD;AACAE;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;;AAEFE;AACEC;AACE;;;;AAIEC;AACA;AACF;AACA;AACF;;AAEFC;AACF;;","debugId":"f78c9185-0736-4c65-8fa7-88f4d179ae89"}

package/dist/instrument-with-sentry.js

@@ -10,20 +10,22 @@ function _socketInterop(e) {
 }
 
 var require$$0 = _socketInterop(require('@sentry/node'));
-var constants = require('./constants2.js');
 
 var instrumentWithSentry = {};
 
 // This should ONLY be included in the special Sentry build!
 // Otherwise the Sentry dependency won't even be present in the manifest.
 
+// Require constants with require(relConstantsPath) instead of require('./constants')
+// so Rollup doesn't generate a constants2.js chunk.
+const relConstantsPath = './constants';
 // The '@rollup/plugin-replace' will replace "process.env['SOCKET_CLI_SENTRY_BUILD']".
 {
   const Sentry = require$$0;
   Sentry.init({
     onFatalError(error) {
       // Defer module loads until after Sentry.init is called.
-      if (constants.require$$1.ENV.SOCKET_CLI_DEBUG) {
+      if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {
         console.error('[DEBUG] [Sentry onFatalError]:', error);
       }
     },
@@ -36,9 +38,9 @@ var instrumentWithSentry = {};
   'pub' );
   Sentry.setTag('version',
   // The '@rollup/plugin-replace' will replace "process.env['SOCKET_CLI_VERSION_HASH']".
-  "0.14.44:d759761:ba5ca849:pub");
-  const constants$1 = constants.require$$1;
-  if (constants$1.ENV.SOCKET_CLI_DEBUG) {
+  "0.14.46:bbb426c:2ebaf778:pub");
+  const constants = require(relConstantsPath);
+  if (constants.ENV.SOCKET_CLI_DEBUG) {
     Sentry.setTag('debugging', true);
     console.log('[DEBUG] Set up Sentry.');
   } else {
@@ -49,10 +51,10 @@ var instrumentWithSentry = {};
     [kInternalsSymbol]: {
       setSentry
     }
-  } = constants$1;
+  } = constants;
   setSentry(Sentry);
 }
 
 module.exports = instrumentWithSentry;
-//# debugId=9ffcf668-7565-4e0f-b4dd-d1c71b2a7e83
+//# debugId=f6ed194c-046b-4f37-b7e3-813d94301f8c
 //# sourceMappingURL=instrument-with-sentry.js.map

package/dist/instrument-with-sentry.js.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-with-sentry.js","sources":["../../src/instrument-with-sentry.ts"],"sourcesContent":["// This should ONLY be included in the special Sentry build!\n// Otherwise the Sentry dependency won't even be present in the manifest.\n\n// The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_SENTRY_BUILD']\".\nif (process.env['SOCKET_CLI_SENTRY_BUILD']) {\n  const Sentry = require('@sentry/node')\n  Sentry.init({\n    onFatalError(error: Error) {\n      // Defer module loads until after Sentry.init is called.\n      if (require('./constants').ENV.SOCKET_CLI_DEBUG) {\n        console.error('[DEBUG] [Sentry onFatalError]:', error)\n      }\n    },\n    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',\n    enabled: true,\n    integrations: []\n  })\n  Sentry.setTag(\n    'environment',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_PUBLISHED_BUILD']\".\n    process.env['SOCKET_CLI_PUBLISHED_BUILD'] ? 'pub' : process.env['NODE_ENV']\n  )\n  Sentry.setTag(\n    'version',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_VERSION_HASH']\".\n    process.env['SOCKET_CLI_VERSION_HASH']\n  )\n  const constants = require('./constants')\n  if (constants.ENV.SOCKET_CLI_DEBUG) {\n    Sentry.setTag('debugging', true)\n    console.log('[DEBUG] Set up Sentry.')\n  } else {\n    Sentry.setTag('debugging', false)\n  }\n  const {\n    kInternalsSymbol,\n    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry }\n  } = constants\n  setSentry(Sentry)\n} else if (require('./constants').ENV.SOCKET_CLI_DEBUG) {\n  console.log('[DEBUG] Sentry disabled explicitly.')\n}\n"],"names":["console","dsn","enabled","integrations","process","Sentry","setSentry"],"mappings":";;;;;;;;;;;;;;;;AAAA;AACA;;AAEA;AAC4C;AAC1C;;;AAGI;;AAEEA;AACF;;AAEFC;AACAC;AACAC;AACF;;AAGE;AACAC;;AAIA;AACAA;AAEF;AACA;AACEC;AACAL;AACF;AACEK;AACF;;;AAGE;AAA+DC;AAAU;AAC3E;;AAEF;;","debugId":"9ffcf668-7565-4e0f-b4dd-d1c71b2a7e83"}
+{"version":3,"file":"instrument-with-sentry.js","sources":["../../src/instrument-with-sentry.ts"],"sourcesContent":["// This should ONLY be included in the special Sentry build!\n// Otherwise the Sentry dependency won't even be present in the manifest.\n\n// Require constants with require(relConstantsPath) instead of require('./constants')\n// so Rollup doesn't generate a constants2.js chunk.\nconst relConstantsPath = './constants'\n// The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_SENTRY_BUILD']\".\nif (process.env['SOCKET_CLI_SENTRY_BUILD']) {\n  const Sentry = require('@sentry/node')\n  Sentry.init({\n    onFatalError(error: Error) {\n      // Defer module loads until after Sentry.init is called.\n      if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n        console.error('[DEBUG] [Sentry onFatalError]:', error)\n      }\n    },\n    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',\n    enabled: true,\n    integrations: []\n  })\n  Sentry.setTag(\n    'environment',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_PUBLISHED_BUILD']\".\n    process.env['SOCKET_CLI_PUBLISHED_BUILD'] ? 'pub' : process.env['NODE_ENV']\n  )\n  Sentry.setTag(\n    'version',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_VERSION_HASH']\".\n    process.env['SOCKET_CLI_VERSION_HASH']\n  )\n  const constants = require(relConstantsPath)\n  if (constants.ENV.SOCKET_CLI_DEBUG) {\n    Sentry.setTag('debugging', true)\n    console.log('[DEBUG] Set up Sentry.')\n  } else {\n    Sentry.setTag('debugging', false)\n  }\n  const {\n    kInternalsSymbol,\n    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry }\n  } = constants\n  setSentry(Sentry)\n} else if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n  console.log('[DEBUG] Sentry disabled explicitly.')\n}\n"],"names":["console","dsn","enabled","integrations","process","Sentry","setSentry"],"mappings":";;;;;;;;;;;;;;;AAAA;AACA;;AAEA;AACA;AACA;AACA;AAC4C;AAC1C;;;AAGI;;AAEEA;AACF;;AAEFC;AACAC;AACAC;AACF;;AAGE;AACAC;;AAIA;AACAA;AAEF;AACA;AACEC;AACAL;AACF;AACEK;AACF;;;AAGE;AAA+DC;AAAU;AAC3E;;AAEF;;","debugId":"f6ed194c-046b-4f37-b7e3-813d94301f8c"}

package/dist/module-sync/cli.js

@@ -30,7 +30,7 @@ var fs$1 = require('node:fs/promises');
 var ScreenWidget = _socketInterop(require('blessed/lib/widgets/screen'));
 var contrib = _socketInterop(require('blessed-contrib'));
 var spinner = require('@socketsecurity/registry/lib/spinner');
-var constants = require('./constants2.js');
+var constants = require('./constants.js');
 var prompts = require('@socketsecurity/registry/lib/prompts');
 var yargsParse = _socketInterop(require('yargs-parser'));
 var words = require('@socketsecurity/registry/lib/words');
@@ -1503,7 +1503,7 @@ async function run$z(argv, importMeta, {
 
 const {
   API_V0_URL
-} = constants.constants;
+} = constants;
 function handleUnsuccessfulApiResponse(_name, result, spinner) {
   // SocketSdkErrorType['error'] is not typed.
   const resultErrorMessage = result.error?.message;
@@ -1965,7 +1965,7 @@ const {
   PNPM: PNPM$8,
   cdxgenBinPath,
   synpBinPath
-} = constants.constants;
+} = constants;
 const nodejsPlatformTypes = new Set(['javascript', 'js', 'nodejs', NPM$e, PNPM$8, 'ts', 'tsx', 'typescript']);
 async function runCycloneDX(yargv) {
   let cleanupPackageLock = false;
@@ -2401,7 +2401,7 @@ const cmdDiffScan = {
 
 const {
   NPM: NPM$d
-} = constants.constants;
+} = constants;
 function isTopLevel(tree, node) {
   return tree.children.get(node.name) === node;
 }
@@ -2817,7 +2817,7 @@ function applyLogin(apiToken, enforcedOrgs, apiBaseUrl, apiProxy) {
 
 const {
   SOCKET_PUBLIC_API_TOKEN
-} = constants.constants;
+} = constants;
 async function attemptLogin(apiBaseUrl, apiProxy) {
   const apiToken = (await prompts.password({
     message: `Enter your ${terminalLink('Socket.dev API key', 'https://docs.socket.dev/docs/api-keys')} (leave blank for a public key)`
@@ -2999,7 +2999,7 @@ async function convertGradleToMaven(target, bin, _out, verbose, gradleOpts) {
     // We could do a .socket folder. We could do a socket.pom.gz with all the poms, although I'd prefer something plain-text if it is to be committed.
 
     // Note: init.gradle will be exported by .config/rollup.dist.config.mjs
-    const initLocation = path.join(constants.constants.rootDistPath, 'init.gradle');
+    const initLocation = path.join(constants.rootDistPath, 'init.gradle');
     const commandArgs = ['--init-script', initLocation, ...gradleOpts, 'pom'];
     if (verbose) {
       console.log('\n[VERBOSE] Executing:', bin, commandArgs);
@@ -3718,16 +3718,16 @@ async function run$l(argv, importMeta, {
 const {
   NPM: NPM$b,
   SHADOW_BIN: SHADOW_BIN$1
-} = constants.constants;
+} = constants;
 async function wrapNpm(argv) {
   // Lazily access constants.distPath.
-  const shadowBin = require(`${constants.constants.distPath}/${SHADOW_BIN$1}.js`);
+  const shadowBin = require(`${constants.distPath}/${SHADOW_BIN$1}.js`);
   await shadowBin(NPM$b, argv);
 }
 
 const {
   NPM: NPM$a
-} = constants.constants;
+} = constants;
 const config$k = {
   commandName: 'npm',
   description: `${NPM$a} wrapper functionality`,
@@ -3759,16 +3759,16 @@ async function run$k(argv, importMeta, {
 const {
   NPX: NPX$2,
   SHADOW_BIN
-} = constants.constants;
+} = constants;
 async function wrapNpx(argv) {
   // Lazily access constants.distPath.
-  const shadowBin = require(`${constants.constants.distPath}/${SHADOW_BIN}.js`);
+  const shadowBin = require(`${constants.distPath}/${SHADOW_BIN}.js`);
   await shadowBin(NPX$2, argv);
 }
 
 const {
   NPX: NPX$1
-} = constants.constants;
+} = constants;
 const config$j = {
   commandName: 'npx',
   description: `${NPX$1} wrapper functionality`,
@@ -3833,7 +3833,7 @@ const {
   VLT: VLT$6,
   YARN_BERRY: YARN_BERRY$6,
   YARN_CLASSIC: YARN_CLASSIC$6
-} = constants.constants;
+} = constants;
 function matchHumanStdout(stdout, name) {
   return stdout.includes(` ${name}@`);
 }
@@ -3861,7 +3861,7 @@ const {
   YARN,
   YARN_BERRY: YARN_BERRY$5,
   YARN_CLASSIC: YARN_CLASSIC$5
-} = constants.constants;
+} = constants;
 const AGENTS = [BUN$5, NPM$8, PNPM$6, YARN_BERRY$5, YARN_CLASSIC$5, VLT$5];
 const binByAgent = {
   __proto__: null,
@@ -4003,7 +4003,7 @@ async function detect({
   };
   let lockSrc;
   // Lazily access constants.maintainedNodeVersions.
-  let minimumNodeVersion = constants.constants.maintainedNodeVersions.previous;
+  let minimumNodeVersion = constants.maintainedNodeVersions.previous;
   if (pkgJson) {
     const browserField = pkgJson.browser;
     if (strings.isNonEmptyString(browserField) || objects.isObjectObject(browserField)) {
@@ -4031,7 +4031,7 @@ async function detect({
       }
     }
     // Lazily access constants.maintainedNodeVersions.
-    targets.node = constants.constants.maintainedNodeVersions.some(v => semver.satisfies(v, `>=${minimumNodeVersion}`));
+    targets.node = constants.maintainedNodeVersions.some(v => semver.satisfies(v, `>=${minimumNodeVersion}`));
     lockSrc = typeof lockPath === 'string' ? await readLockFileByAgent[agent](lockPath, agentExecPath) : undefined;
   } else {
     lockBasename = undefined;
@@ -4058,7 +4058,7 @@ const {
   NPM: NPM$7,
   VLT: VLT$4,
   YARN_BERRY: YARN_BERRY$4
-} = constants.constants;
+} = constants;
 const COMMAND_TITLE$2 = 'Socket Optimize';
 const manifestNpmOverrides = registry.getManifestData(NPM$7);
 async function detectAndValidatePackageManager(cwd, prod) {
@@ -4158,7 +4158,7 @@ const {
   VLT: VLT$3,
   YARN_BERRY: YARN_BERRY$3,
   YARN_CLASSIC: YARN_CLASSIC$4
-} = constants.constants;
+} = constants;
 function getOverridesDataBun(pkgJson) {
   const overrides = pkgJson?.[RESOLUTIONS$1] ?? {};
   return {
@@ -4226,7 +4226,7 @@ const getOverridesDataByAgent = {
 
 const {
   PNPM: PNPM$4
-} = constants.constants;
+} = constants;
 const PNPM_WORKSPACE = `${PNPM$4}-workspace`;
 async function getWorkspaceGlobs(agent, pkgPath, pkgJson) {
   let workspacePatterns;
@@ -4275,7 +4275,7 @@ const {
   VLT: VLT$2,
   YARN_BERRY: YARN_BERRY$2,
   YARN_CLASSIC: YARN_CLASSIC$3
-} = constants.constants;
+} = constants;
 function lockIncludesNpm(lockSrc, name) {
   // Detects the package name in the following cases:
   //   "name":
@@ -4332,7 +4332,7 @@ const {
   VLT: VLT$1,
   YARN_BERRY: YARN_BERRY$1,
   YARN_CLASSIC: YARN_CLASSIC$2
-} = constants.constants;
+} = constants;
 function cleanupQueryStdout(stdout) {
   if (stdout === '') {
     return '';
@@ -4464,7 +4464,7 @@ const {
   VLT,
   YARN_BERRY,
   YARN_CLASSIC: YARN_CLASSIC$1
-} = constants.constants;
+} = constants;
 const PNPM_FIELD_NAME = PNPM$1;
 const depFields = ['dependencies', 'devDependencies', 'peerDependencies', 'peerDependenciesMeta', 'optionalDependencies', 'bundleDependencies'];
 function getEntryIndexes(entries, keys) {
@@ -4576,7 +4576,7 @@ const {
   NPM: NPM$2,
   SOCKET_CLI_SAFE_WRAPPER,
   abortSignal: abortSignal$2
-} = constants.constants;
+} = constants;
 const COMMAND_TITLE$1 = 'Socket Optimize';
 const NPM_OVERRIDE_PR_URL = 'https://github.com/npm/cli/pull/7025';
 async function updatePackageLockJson(lockName, agentExecPath, agent, spinner) {
@@ -4617,7 +4617,7 @@ const {
   NPM: NPM$1,
   PNPM,
   YARN_CLASSIC
-} = constants.constants;
+} = constants;
 const COMMAND_TITLE = 'Socket Optimize';
 async function applyOptimization(cwd, pin, prod) {
   const pkgMgrData = await detectAndValidatePackageManager(cwd, prod);
@@ -4955,7 +4955,7 @@ async function run$g(argv, importMeta, {
 
 const {
   abortSignal: abortSignal$1
-} = constants.constants;
+} = constants;
 async function runRawNpm(argv) {
   const spawnPromise = spawn(npmPaths.getNpmBinPath(), argv.slice(0), {
     signal: abortSignal$1,
@@ -4977,7 +4977,7 @@ async function runRawNpm(argv) {
 
 const {
   NPM
-} = constants.constants;
+} = constants;
 const config$f = {
   commandName: 'raw-npm',
   description: `Temporarily disable the Socket ${NPM} wrapper`,
@@ -5014,7 +5014,7 @@ async function run$f(argv, importMeta, {
 
 const {
   abortSignal
-} = constants.constants;
+} = constants;
 async function runRawNpx(argv) {
   const spawnPromise = spawn(npmPaths.getNpxBinPath(), argv, {
     signal: abortSignal,
@@ -5036,7 +5036,7 @@ async function runRawNpx(argv) {
 
 const {
   NPX
-} = constants.constants;
+} = constants;
 const config$e = {
   commandName: 'raw-npx',
   description: `Temporarily disable the Socket ${NPX} wrapper`,
@@ -6774,7 +6774,7 @@ async function run(argv, importMeta, {
 const {
   SOCKET,
   rootPkgJsonPath
-} = constants.constants;
+} = constants;
 
 // TODO: Add autocompletion using https://socket.dev/npm/package/omelette
 void (async () => {
@@ -6847,5 +6847,5 @@ void (async () => {
     await index.captureException(e);
   }
 })();
-//# debugId=76e0c507-52ca-4166-8d91-8d85877f5cf0
+//# debugId=fb8eadc9-13dc-438b-93e1-3d3b5a23a39a
 //# sourceMappingURL=cli.js.map