@socketsecurity/cli-with-sentry 0.14.45 → 0.14.47

package/dist/constants.d.ts

@@ -17,6 +17,7 @@ type ENV = Remap<RegistryEnv & Readonly<{
     SOCKET_CLI_LEGACY_BUILD: boolean;
     SOCKET_CLI_PUBLISHED_BUILD: boolean;
     SOCKET_CLI_SENTRY_BUILD: boolean;
+    SOCKET_CLI_SHOW_BANNER: boolean;
     SOCKET_CLI_VERSION_HASH: string;
 }>>;
 type IPC = Readonly<{
@@ -25,15 +26,15 @@ type IPC = Readonly<{
     SOCKET_CLI_SAFE_WRAPPER?: boolean;
 }>;
 declare const constants: {
+    readonly CI: "CI";
     readonly [kInternalsSymbol]: registryConstants.Internals;
     readonly NODE_MODULES: "node_modules";
     readonly PACKAGE_JSON: "package.json";
-    readonly TAP: "TAP";
     readonly kInternalsSymbol: unique symbol;
-    readonly CI: "CI";
     readonly NODE_AUTH_TOKEN: "NODE_AUTH_TOKEN";
     readonly NODE_ENV: "NODE_ENV";
     readonly PRE_COMMIT: "PRE_COMMIT";
+    readonly TAP: "TAP";
     readonly VITEST: "VITEST";
     readonly AT_LATEST: "@latest";
     readonly BIOME_JSON: "biome.json";
@@ -142,13 +143,16 @@ declare const constants: {
     readonly SOCKET_CLI_PUBLISHED_BUILD: 'SOCKET_CLI_PUBLISHED_BUILD';
     readonly SOCKET_CLI_SAFE_WRAPPER: 'SOCKET_CLI_SAFE_WRAPPER';
     readonly SOCKET_CLI_SENTRY_BUILD: 'SOCKET_CLI_SENTRY_BUILD';
+    readonly SOCKET_CLI_SHOW_BANNER: 'SOCKET_CLI_SHOW_BANNER';
     readonly SOCKET_CLI_VERSION_HASH: 'SOCKET_CLI_VERSION_HASH';
     readonly VLT: 'vlt';
     readonly YARN: 'yarn';
     readonly YARN_BERRY: 'yarn/berry';
     readonly YARN_CLASSIC: 'yarn/classic';
+    readonly bashRcPath: string;
     readonly cdxgenBinPath: string;
     readonly distPath: string;
+    readonly homePath: string;
     readonly instrumentWithSentryPath: string;
     readonly nmBinPath: string;
     readonly npmInjectionPath: string;
@@ -158,5 +162,6 @@ declare const constants: {
     readonly rootPkgJsonPath: string;
     readonly shadowBinPath: string;
     readonly synpBinPath: string;
+    readonly zshRcPath: string;
 };
 export { constants as default };

package/dist/constants.js

@@ -1,8 +1,220 @@
 'use strict';
-var constants = require('./constants2.js');
 
+var fs = require('node:fs');
+var os = require('node:os');
+var path = require('node:path');
+var process = require('node:process');
+var registryConstants = require('@socketsecurity/registry/lib/constants');
+var env = require('@socketsecurity/registry/lib/env');
 
+const {
+  NODE_MODULES,
+  PACKAGE_JSON,
+  kInternalsSymbol,
+  [kInternalsSymbol]: {
+    createConstantsObject
+  }
+} = registryConstants;
+const ALERT_TYPE_CRITICAL_CVE = 'criticalCVE';
+const ALERT_TYPE_CVE = 'cve';
+const ALERT_TYPE_MEDIUM_CVE = 'mediumCVE';
+const ALERT_TYPE_MILD_CVE = 'mildCVE';
+const ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE = 'socketUpgradeAvailable';
+const API_V0_URL = 'https://api.socket.dev/v0';
+const BABEL_RUNTIME = '@babel/runtime';
+const BINARY_LOCK_EXT = '.lockb';
+const BUN = 'bun';
+const CLI = 'cli';
+const CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER = 'firstPatchedVersionIdentifier';
+const CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE = 'vulnerableVersionRange';
+const LOCK_EXT = '.lock';
+const MODULE_SYNC = 'module-sync';
+const NPM_INJECTION = 'npm-injection';
+const NPM_REGISTRY_URL = 'https://registry.npmjs.org';
+const NPX = 'npx';
+const PNPM = 'pnpm';
+const REQUIRE = 'require';
+const SHADOW_BIN = 'shadow-bin';
+const SOCKET = 'socket';
+const SOCKET_CLI_DEBUG = 'SOCKET_CLI_DEBUG';
+const SOCKET_CLI_FIX = 'SOCKET_CLI_FIX';
+const SOCKET_CLI_ISSUES_URL = 'https://github.com/SocketDev/socket-cli/issues';
+const SOCKET_CLI_LEGACY_BUILD = 'SOCKET_CLI_LEGACY_BUILD';
+const SOCKET_CLI_OPTIMIZE = 'SOCKET_CLI_OPTIMIZE';
+const SOCKET_CLI_PUBLISHED_BUILD = 'SOCKET_CLI_PUBLISHED_BUILD';
+const SOCKET_CLI_SAFE_WRAPPER = 'SOCKET_CLI_SAFE_WRAPPER';
+const SOCKET_CLI_SENTRY_BUILD = 'SOCKET_CLI_SENTRY_BUILD';
+const SOCKET_CLI_SHOW_BANNER = 'SOCKET_CLI_SHOW_BANNER';
+const SOCKET_CLI_VERSION_HASH = 'SOCKET_CLI_VERSION_HASH';
+const VLT = 'vlt';
+const YARN = 'yarn';
+const YARN_BERRY = `${YARN}/berry`;
+const YARN_CLASSIC = `${YARN}/classic`;
+let _Sentry;
+const LAZY_BATCH_PURL_ENDPOINT = () => {
+  const query = new URLSearchParams();
+  query.append('alerts', 'true');
+  query.append('compact', 'true');
+  return `${API_V0_URL}/purl?${query}`;
+};
+const LAZY_DIST_TYPE = () => registryConstants.SUPPORTS_NODE_REQUIRE_MODULE ? MODULE_SYNC : REQUIRE;
+const LAZY_ENV = () => {
+  const {
+    env: env$1
+  } = process;
+  // We inline some environment values so that they CANNOT be influenced by user
+  // provided environment variables.
+  return Object.freeze({
+    // Lazily access registryConstants.ENV.
+    ...registryConstants.ENV,
+    // Flag set to help debug Socket CLI.
+    [SOCKET_CLI_DEBUG]: env.envAsBoolean(env$1[SOCKET_CLI_DEBUG]),
+    // Inlined flag set to determine if this is the Legacy build.
+    // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_LEGACY_BUILD]".
+    [SOCKET_CLI_LEGACY_BUILD]: false,
+    // Inlined flag set to determine if this is a published build.
+    // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_PUBLISHED_BUILD]".
+    [SOCKET_CLI_PUBLISHED_BUILD]: true,
+    // Inlined flag set to determine if this is the Sentry build.
+    // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_SENTRY_BUILD]".
+    [SOCKET_CLI_SENTRY_BUILD]: true,
+    // Flag set to toggle the informative ASCII art banner.
+    [SOCKET_CLI_SHOW_BANNER]: env.envAsBoolean(env$1[SOCKET_CLI_SHOW_BANNER]),
+    // Inlined flag set to determine the version hash of the build.
+    // The '@rollup/plugin-replace' will replace "process.env[SOCKET_CLI_VERSION_HASH]".
+    [SOCKET_CLI_VERSION_HASH]: "0.14.47:e0c97e0:714b50c6:pub"
+  });
+};
+const lazyBashRcPath = () =>
+// Lazily access constants.homePath.
+path.join(constants.homePath, '.bashrc');
+const lazyCdxgenBinPath = () =>
+// Lazily access constants.nmBinPath.
+path.join(constants.nmBinPath, 'cdxgen');
+const lazyDistPath = () =>
+// Lazily access constants.rootDistPath and constants.DIST_TYPE.
+path.join(constants.rootDistPath, constants.DIST_TYPE);
+const lazyHomePath = () => os.homedir();
+const lazyInstrumentWithSentryPath = () =>
+// Lazily access constants.rootDistPath.
+path.join(constants.rootDistPath, 'instrument-with-sentry.js');
+const lazyNmBinPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, `${NODE_MODULES}/.bin`);
+const lazyNpmInjectionPath = () =>
+// Lazily access constants.distPath.
+path.join(constants.distPath, `${NPM_INJECTION}.js`);
+const lazyRootBinPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, 'bin');
+const lazyRootDistPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, 'dist');
+const lazyRootPath = () =>
+// The '@rollup/plugin-replace' will replace "process.env.['VITEST']" with `false` and
+// it will be dead code eliminated by Rollup.
+path.resolve(fs.realpathSync.native(__dirname), '..');
+const lazyRootPkgJsonPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, PACKAGE_JSON);
+const lazyShadowBinPath = () =>
+// Lazily access constants.rootPath.
+path.join(constants.rootPath, SHADOW_BIN);
+const lazySynpBinPath = () =>
+// Lazily access constants.nmBinPath.
+path.join(constants.nmBinPath, 'synp');
+const lazyZshRcPath = () =>
+// Lazily access constants.homePath.
+path.join(constants.homePath, '.zshrc');
+const constants = createConstantsObject({
+  ALERT_TYPE_CRITICAL_CVE,
+  ALERT_TYPE_CVE,
+  ALERT_TYPE_MEDIUM_CVE,
+  ALERT_TYPE_MILD_CVE,
+  ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE,
+  API_V0_URL,
+  BABEL_RUNTIME,
+  // Lazily defined values are initialized as `undefined` to keep their key order.
+  BATCH_PURL_ENDPOINT: undefined,
+  BINARY_LOCK_EXT,
+  BUN,
+  CLI,
+  CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER,
+  CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE,
+  DIST_TYPE: undefined,
+  ENV: undefined,
+  LOCK_EXT,
+  MODULE_SYNC,
+  NPM_INJECTION,
+  NPM_REGISTRY_URL,
+  NPX,
+  PNPM,
+  REQUIRE,
+  SHADOW_BIN,
+  SOCKET,
+  SOCKET_CLI_DEBUG,
+  SOCKET_CLI_FIX,
+  SOCKET_CLI_ISSUES_URL,
+  SOCKET_CLI_LEGACY_BUILD,
+  SOCKET_CLI_OPTIMIZE,
+  SOCKET_CLI_PUBLISHED_BUILD,
+  SOCKET_CLI_SAFE_WRAPPER,
+  SOCKET_CLI_SENTRY_BUILD,
+  SOCKET_CLI_SHOW_BANNER,
+  SOCKET_CLI_VERSION_HASH,
+  VLT,
+  YARN,
+  YARN_BERRY,
+  YARN_CLASSIC,
+  bashRcPath: undefined,
+  cdxgenBinPath: undefined,
+  distPath: undefined,
+  homePath: undefined,
+  instrumentWithSentryPath: undefined,
+  nmBinPath: undefined,
+  npmInjectionPath: undefined,
+  rootBinPath: undefined,
+  rootDistPath: undefined,
+  rootPath: undefined,
+  rootPkgJsonPath: undefined,
+  shadowBinPath: undefined,
+  synpBinPath: undefined,
+  zshRcPath: undefined
+}, {
+  getters: {
+    BATCH_PURL_ENDPOINT: LAZY_BATCH_PURL_ENDPOINT,
+    DIST_TYPE: LAZY_DIST_TYPE,
+    ENV: LAZY_ENV,
+    bashRcPath: lazyBashRcPath,
+    distPath: lazyDistPath,
+    cdxgenBinPath: lazyCdxgenBinPath,
+    homePath: lazyHomePath,
+    instrumentWithSentryPath: lazyInstrumentWithSentryPath,
+    nmBinPath: lazyNmBinPath,
+    npmInjectionPath: lazyNpmInjectionPath,
+    rootBinPath: lazyRootBinPath,
+    rootDistPath: lazyRootDistPath,
+    rootPath: lazyRootPath,
+    rootPkgJsonPath: lazyRootPkgJsonPath,
+    shadowBinPath: lazyShadowBinPath,
+    synpBinPath: lazySynpBinPath,
+    zshRcPath: lazyZshRcPath
+  },
+  internals: {
+    getSentry() {
+      return _Sentry;
+    },
+    setSentry(Sentry) {
+      if (_Sentry === undefined) {
+        _Sentry = Sentry;
+        return true;
+      }
+      return false;
+    }
+  },
+  mixin: registryConstants
+});
 
-module.exports = constants.constants;
-//# debugId=415faf35-61fa-4973-8b4c-040eacb52c54
+module.exports = constants;
+//# debugId=2f3f6718-efed-4ef0-9f73-7227183876d4
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;","debugId":"415faf35-61fa-4973-8b4c-040eacb52c54"}
+{"version":3,"file":"constants.js","sources":["../../src/constants.ts"],"sourcesContent":["import { realpathSync } from 'node:fs'\nimport os from 'node:os'\nimport path from 'node:path'\nimport process from 'node:process'\n\nimport registryConstants from '@socketsecurity/registry/lib/constants'\nimport { envAsBoolean } from '@socketsecurity/registry/lib/env'\n\nimport type { Remap } from '@socketsecurity/registry/lib/objects'\n\nconst {\n  NODE_MODULES,\n  PACKAGE_JSON,\n  kInternalsSymbol,\n  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: {\n    createConstantsObject\n  }\n} = registryConstants\n\ntype RegistryEnv = typeof registryConstants.ENV\n\ntype RegistryInternals = (typeof registryConstants)['Symbol(kInternalsSymbol)']\n\ntype Sentry = any\n\ntype Internals = Remap<\n  Omit<RegistryInternals, 'getIPC'> &\n    Readonly<{\n      getIPC: {\n        (): Promise<IPC>\n        <K extends keyof IPC | undefined>(\n          key?: K\n        ): Promise<K extends keyof IPC ? IPC[K] : IPC>\n      }\n      getSentry: () => Sentry\n      setSentry(Sentry: Sentry): boolean\n    }>\n>\n\ntype ENV = Remap<\n  RegistryEnv &\n    Readonly<{\n      SOCKET_CLI_DEBUG: boolean\n      SOCKET_CLI_LEGACY_BUILD: boolean\n      SOCKET_CLI_PUBLISHED_BUILD: boolean\n      SOCKET_CLI_SENTRY_BUILD: boolean\n      SOCKET_CLI_SHOW_BANNER: boolean\n      SOCKET_CLI_VERSION_HASH: string\n    }>\n>\n\ntype IPC = Readonly<{\n  SOCKET_CLI_FIX?: string\n  SOCKET_CLI_OPTIMIZE?: boolean\n  SOCKET_CLI_SAFE_WRAPPER?: boolean\n}>\n\ntype Constants = Remap<\n  Omit<typeof registryConstants, 'Symbol(kInternalsSymbol)' | 'ENV' | 'IPC'> & {\n    readonly 'Symbol(kInternalsSymbol)': Internals\n    readonly ALERT_TYPE_CRITICAL_CVE: 'criticalCVE'\n    readonly ALERT_TYPE_CVE: 'cve'\n    readonly ALERT_TYPE_MEDIUM_CVE: 'mediumCVE'\n    readonly ALERT_TYPE_MILD_CVE: 'mildCVE'\n    readonly ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE: 'socketUpgradeAvailable'\n    readonly API_V0_URL: 'https://api.socket.dev/v0'\n    readonly BABEL_RUNTIME: '@babel/runtime'\n    readonly BATCH_PURL_ENDPOINT: 'https://api.socket.dev/v0/purl?alerts=true&compact=true'\n    readonly BINARY_LOCK_EXT: '.lockb'\n    readonly BUN: 'bun'\n    readonly CLI: 'cli'\n    readonly CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER: 'firstPatchedVersionIdentifier'\n    readonly CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE: 'vulnerableVersionRange'\n    readonly ENV: ENV\n    readonly DIST_TYPE: 'module-sync' | 'require'\n    readonly IPC: IPC\n    readonly LOCK_EXT: '.lock'\n    readonly MODULE_SYNC: 'module-sync'\n    readonly NPM_INJECTION: 'npm-injection'\n    readonly NPM_REGISTRY_URL: 'https://registry.npmjs.org'\n    readonly NPX: 'npx'\n    readonly PNPM: 'pnpm'\n    readonly REQUIRE: 'require'\n    readonly SHADOW_BIN: 'shadow-bin'\n    readonly SOCKET: 'socket'\n    readonly SOCKET_CLI_DEBUG: 'SOCKET_CLI_DEBUG'\n    readonly SOCKET_CLI_FIX: 'SOCKET_CLI_FIX'\n    readonly SOCKET_CLI_ISSUES_URL: 'https://github.com/SocketDev/socket-cli/issues'\n    readonly SOCKET_CLI_LEGACY_BUILD: 'SOCKET_CLI_LEGACY_BUILD'\n    readonly SOCKET_CLI_OPTIMIZE: 'SOCKET_CLI_OPTIMIZE'\n    readonly SOCKET_CLI_PUBLISHED_BUILD: 'SOCKET_CLI_PUBLISHED_BUILD'\n    readonly SOCKET_CLI_SAFE_WRAPPER: 'SOCKET_CLI_SAFE_WRAPPER'\n    readonly SOCKET_CLI_SENTRY_BUILD: 'SOCKET_CLI_SENTRY_BUILD'\n    readonly SOCKET_CLI_SHOW_BANNER: 'SOCKET_CLI_SHOW_BANNER'\n    readonly SOCKET_CLI_VERSION_HASH: 'SOCKET_CLI_VERSION_HASH'\n    readonly VLT: 'vlt'\n    readonly YARN: 'yarn'\n    readonly YARN_BERRY: 'yarn/berry'\n    readonly YARN_CLASSIC: 'yarn/classic'\n    readonly bashRcPath: string\n    readonly cdxgenBinPath: string\n    readonly distPath: string\n    readonly homePath: string\n    readonly instrumentWithSentryPath: string\n    readonly nmBinPath: string\n    readonly npmInjectionPath: string\n    readonly rootBinPath: string\n    readonly rootDistPath: string\n    readonly rootPath: string\n    readonly rootPkgJsonPath: string\n    readonly shadowBinPath: string\n    readonly synpBinPath: string\n    readonly zshRcPath: string\n  }\n>\n\nconst ALERT_TYPE_CRITICAL_CVE = 'criticalCVE'\nconst ALERT_TYPE_CVE = 'cve'\nconst ALERT_TYPE_MEDIUM_CVE = 'mediumCVE'\nconst ALERT_TYPE_MILD_CVE = 'mildCVE'\nconst ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE = 'socketUpgradeAvailable'\nconst API_V0_URL = 'https://api.socket.dev/v0'\nconst BABEL_RUNTIME = '@babel/runtime'\nconst BINARY_LOCK_EXT = '.lockb'\nconst BUN = 'bun'\nconst CLI = 'cli'\nconst CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER =\n  'firstPatchedVersionIdentifier'\nconst CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE = 'vulnerableVersionRange'\nconst LOCK_EXT = '.lock'\nconst MODULE_SYNC = 'module-sync'\nconst NPM_INJECTION = 'npm-injection'\nconst NPM_REGISTRY_URL = 'https://registry.npmjs.org'\nconst NPX = 'npx'\nconst PNPM = 'pnpm'\nconst REQUIRE = 'require'\nconst SHADOW_BIN = 'shadow-bin'\nconst SOCKET = 'socket'\nconst SOCKET_CLI_DEBUG = 'SOCKET_CLI_DEBUG'\nconst SOCKET_CLI_FIX = 'SOCKET_CLI_FIX'\nconst SOCKET_CLI_ISSUES_URL = 'https://github.com/SocketDev/socket-cli/issues'\nconst SOCKET_CLI_LEGACY_BUILD = 'SOCKET_CLI_LEGACY_BUILD'\nconst SOCKET_CLI_OPTIMIZE = 'SOCKET_CLI_OPTIMIZE'\nconst SOCKET_CLI_PUBLISHED_BUILD = 'SOCKET_CLI_PUBLISHED_BUILD'\nconst SOCKET_CLI_SAFE_WRAPPER = 'SOCKET_CLI_SAFE_WRAPPER'\nconst SOCKET_CLI_SENTRY_BUILD = 'SOCKET_CLI_SENTRY_BUILD'\nconst SOCKET_CLI_SHOW_BANNER = 'SOCKET_CLI_SHOW_BANNER'\nconst SOCKET_CLI_VERSION_HASH = 'SOCKET_CLI_VERSION_HASH'\nconst VLT = 'vlt'\nconst YARN = 'yarn'\nconst YARN_BERRY = `${YARN}/berry`\nconst YARN_CLASSIC = `${YARN}/classic`\n\nlet _Sentry: any\n\nconst LAZY_BATCH_PURL_ENDPOINT = () => {\n  const query = new URLSearchParams()\n  query.append('alerts', 'true')\n  query.append('compact', 'true')\n  return `${API_V0_URL}/purl?${query}`\n}\n\nconst LAZY_DIST_TYPE = () =>\n  registryConstants.SUPPORTS_NODE_REQUIRE_MODULE ? MODULE_SYNC : REQUIRE\n\nconst LAZY_ENV = () => {\n  const { env } = process\n  // We inline some environment values so that they CANNOT be influenced by user\n  // provided environment variables.\n  return Object.freeze({\n    // Lazily access registryConstants.ENV.\n    ...registryConstants.ENV,\n    // Flag set to help debug Socket CLI.\n    [SOCKET_CLI_DEBUG]: envAsBoolean(env[SOCKET_CLI_DEBUG]),\n    // Inlined flag set to determine if this is the Legacy build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_LEGACY_BUILD]\".\n    [SOCKET_CLI_LEGACY_BUILD]: process.env[SOCKET_CLI_LEGACY_BUILD],\n    // Inlined flag set to determine if this is a published build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_PUBLISHED_BUILD]\".\n    [SOCKET_CLI_PUBLISHED_BUILD]: process.env[SOCKET_CLI_PUBLISHED_BUILD],\n    // Inlined flag set to determine if this is the Sentry build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_SENTRY_BUILD]\".\n    [SOCKET_CLI_SENTRY_BUILD]: process.env[SOCKET_CLI_SENTRY_BUILD],\n    // Flag set to toggle the informative ASCII art banner.\n    [SOCKET_CLI_SHOW_BANNER]: envAsBoolean(env[SOCKET_CLI_SHOW_BANNER]),\n    // Inlined flag set to determine the version hash of the build.\n    // The '@rollup/plugin-replace' will replace \"process.env[SOCKET_CLI_VERSION_HASH]\".\n    [SOCKET_CLI_VERSION_HASH]: process.env[SOCKET_CLI_VERSION_HASH]\n  })\n}\n\nconst lazyBashRcPath = () =>\n  // Lazily access constants.homePath.\n  path.join(constants.homePath, '.bashrc')\n\nconst lazyCdxgenBinPath = () =>\n  // Lazily access constants.nmBinPath.\n  path.join(constants.nmBinPath, 'cdxgen')\n\nconst lazyDistPath = () =>\n  // Lazily access constants.rootDistPath and constants.DIST_TYPE.\n  path.join(constants.rootDistPath, constants.DIST_TYPE)\n\nconst lazyHomePath = () => os.homedir()\n\nconst lazyInstrumentWithSentryPath = () =>\n  // Lazily access constants.rootDistPath.\n  path.join(constants.rootDistPath, 'instrument-with-sentry.js')\n\nconst lazyNmBinPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, `${NODE_MODULES}/.bin`)\n\nconst lazyNpmInjectionPath = () =>\n  // Lazily access constants.distPath.\n  path.join(constants.distPath, `${NPM_INJECTION}.js`)\n\nconst lazyRootBinPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, 'bin')\n\nconst lazyRootDistPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, 'dist')\n\nconst lazyRootPath = () =>\n  // The '@rollup/plugin-replace' will replace \"process.env.['VITEST']\" with `false` and\n  // it will be dead code eliminated by Rollup.\n  path.resolve(\n    realpathSync.native(__dirname),\n    process.env['SOCKET_CLI_TEST_DIST_BUILD'] ? '../..' : '..'\n  )\n\nconst lazyRootPkgJsonPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, PACKAGE_JSON)\n\nconst lazyShadowBinPath = () =>\n  // Lazily access constants.rootPath.\n  path.join(constants.rootPath, SHADOW_BIN)\n\nconst lazySynpBinPath = () =>\n  // Lazily access constants.nmBinPath.\n  path.join(constants.nmBinPath, 'synp')\n\nconst lazyZshRcPath = () =>\n  // Lazily access constants.homePath.\n  path.join(constants.homePath, '.zshrc')\n\nconst constants = <Constants>createConstantsObject(\n  {\n    ALERT_TYPE_CRITICAL_CVE,\n    ALERT_TYPE_CVE,\n    ALERT_TYPE_MEDIUM_CVE,\n    ALERT_TYPE_MILD_CVE,\n    ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE,\n    API_V0_URL,\n    BABEL_RUNTIME,\n    // Lazily defined values are initialized as `undefined` to keep their key order.\n    BATCH_PURL_ENDPOINT: undefined,\n    BINARY_LOCK_EXT,\n    BUN,\n    CLI,\n    CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER,\n    CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE,\n    DIST_TYPE: undefined,\n    ENV: undefined,\n    LOCK_EXT,\n    MODULE_SYNC,\n    NPM_INJECTION,\n    NPM_REGISTRY_URL,\n    NPX,\n    PNPM,\n    REQUIRE,\n    SHADOW_BIN,\n    SOCKET,\n    SOCKET_CLI_DEBUG,\n    SOCKET_CLI_FIX,\n    SOCKET_CLI_ISSUES_URL,\n    SOCKET_CLI_LEGACY_BUILD,\n    SOCKET_CLI_OPTIMIZE,\n    SOCKET_CLI_PUBLISHED_BUILD,\n    SOCKET_CLI_SAFE_WRAPPER,\n    SOCKET_CLI_SENTRY_BUILD,\n    SOCKET_CLI_SHOW_BANNER,\n    SOCKET_CLI_VERSION_HASH,\n    VLT,\n    YARN,\n    YARN_BERRY,\n    YARN_CLASSIC,\n    bashRcPath: undefined,\n    cdxgenBinPath: undefined,\n    distPath: undefined,\n    homePath: undefined,\n    instrumentWithSentryPath: undefined,\n    nmBinPath: undefined,\n    npmInjectionPath: undefined,\n    rootBinPath: undefined,\n    rootDistPath: undefined,\n    rootPath: undefined,\n    rootPkgJsonPath: undefined,\n    shadowBinPath: undefined,\n    synpBinPath: undefined,\n    zshRcPath: undefined\n  },\n  {\n    getters: {\n      BATCH_PURL_ENDPOINT: LAZY_BATCH_PURL_ENDPOINT,\n      DIST_TYPE: LAZY_DIST_TYPE,\n      ENV: LAZY_ENV,\n      bashRcPath: lazyBashRcPath,\n      distPath: lazyDistPath,\n      cdxgenBinPath: lazyCdxgenBinPath,\n      homePath: lazyHomePath,\n      instrumentWithSentryPath: lazyInstrumentWithSentryPath,\n      nmBinPath: lazyNmBinPath,\n      npmInjectionPath: lazyNpmInjectionPath,\n      rootBinPath: lazyRootBinPath,\n      rootDistPath: lazyRootDistPath,\n      rootPath: lazyRootPath,\n      rootPkgJsonPath: lazyRootPkgJsonPath,\n      shadowBinPath: lazyShadowBinPath,\n      synpBinPath: lazySynpBinPath,\n      zshRcPath: lazyZshRcPath\n    },\n    internals: {\n      getSentry() {\n        return _Sentry\n      },\n      setSentry(Sentry: Sentry): boolean {\n        if (_Sentry === undefined) {\n          _Sentry = Sentry\n          return true\n        }\n        return false\n      }\n    },\n    mixin: registryConstants\n  }\n)\n\nexport default constants\n"],"names":["createConstantsObject","query","env","path","constants","BATCH_PURL_ENDPOINT","DIST_TYPE","ENV","bashRcPath","cdxgenBinPath","distPath","homePath","instrumentWithSentryPath","nmBinPath","npmInjectionPath","rootBinPath","rootDistPath","rootPath","rootPkgJsonPath","shadowBinPath","synpBinPath","zshRcPath","getters","internals","getSentry","_Sentry","mixin"],"mappings":";;;;;;;;;AAUA;;;;AAIE;AACEA;AACF;AACF;AAmGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AAEA;AACE;AACAC;AACAA;AACA;AACF;AAEA;AAGA;;AACUC;AAAI;AACZ;AACA;;AAEE;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACF;AACF;AAEA;AACE;AACAC;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AAEA;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACA;AACAA;AAKF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEF;AACE;AACAA;AAEIC;;;;;;;;AASF;AACAC;;;;;;AAMAC;AACAC;;;;;;;;;;;;;;;;;;;;;;;;AAwBAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACF;AAEEC;AACEjB;AACAC;AACAC;AACAC;AACAE;AACAD;AACAE;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;;AAEFE;AACEC;AACE;;;;AAIEC;AACA;AACF;AACA;AACF;;AAEFC;AACF;;","debugId":"2f3f6718-efed-4ef0-9f73-7227183876d4"}

package/dist/instrument-with-sentry.js

@@ -10,20 +10,22 @@ function _socketInterop(e) {
 }
 
 var require$$0 = _socketInterop(require('@sentry/node'));
-var constants = require('./constants2.js');
 
 var instrumentWithSentry = {};
 
 // This should ONLY be included in the special Sentry build!
 // Otherwise the Sentry dependency won't even be present in the manifest.
 
+// Require constants with require(relConstantsPath) instead of require('./constants')
+// so Rollup doesn't generate a constants2.js chunk.
+const relConstantsPath = './constants';
 // The '@rollup/plugin-replace' will replace "process.env['SOCKET_CLI_SENTRY_BUILD']".
 {
   const Sentry = require$$0;
   Sentry.init({
     onFatalError(error) {
       // Defer module loads until after Sentry.init is called.
-      if (constants.require$$1.ENV.SOCKET_CLI_DEBUG) {
+      if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {
         console.error('[DEBUG] [Sentry onFatalError]:', error);
       }
     },
@@ -36,9 +38,9 @@ var instrumentWithSentry = {};
   'pub' );
   Sentry.setTag('version',
   // The '@rollup/plugin-replace' will replace "process.env['SOCKET_CLI_VERSION_HASH']".
-  "0.14.45:d29fb65:fc27b180:pub");
-  const constants$1 = constants.require$$1;
-  if (constants$1.ENV.SOCKET_CLI_DEBUG) {
+  "0.14.47:e0c97e0:714b50c6:pub");
+  const constants = require(relConstantsPath);
+  if (constants.ENV.SOCKET_CLI_DEBUG) {
     Sentry.setTag('debugging', true);
     console.log('[DEBUG] Set up Sentry.');
   } else {
@@ -49,10 +51,10 @@ var instrumentWithSentry = {};
     [kInternalsSymbol]: {
       setSentry
     }
-  } = constants$1;
+  } = constants;
   setSentry(Sentry);
 }
 
 module.exports = instrumentWithSentry;
-//# debugId=0cf4fc59-671e-49ac-924c-9a7d192a497
+//# debugId=f9c4c083-a4f7-4aa4-b0af-c0a438552401
 //# sourceMappingURL=instrument-with-sentry.js.map

package/dist/instrument-with-sentry.js.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-with-sentry.js","sources":["../../src/instrument-with-sentry.ts"],"sourcesContent":["// This should ONLY be included in the special Sentry build!\n// Otherwise the Sentry dependency won't even be present in the manifest.\n\n// The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_SENTRY_BUILD']\".\nif (process.env['SOCKET_CLI_SENTRY_BUILD']) {\n  const Sentry = require('@sentry/node')\n  Sentry.init({\n    onFatalError(error: Error) {\n      // Defer module loads until after Sentry.init is called.\n      if (require('./constants').ENV.SOCKET_CLI_DEBUG) {\n        console.error('[DEBUG] [Sentry onFatalError]:', error)\n      }\n    },\n    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',\n    enabled: true,\n    integrations: []\n  })\n  Sentry.setTag(\n    'environment',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_PUBLISHED_BUILD']\".\n    process.env['SOCKET_CLI_PUBLISHED_BUILD'] ? 'pub' : process.env['NODE_ENV']\n  )\n  Sentry.setTag(\n    'version',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_VERSION_HASH']\".\n    process.env['SOCKET_CLI_VERSION_HASH']\n  )\n  const constants = require('./constants')\n  if (constants.ENV.SOCKET_CLI_DEBUG) {\n    Sentry.setTag('debugging', true)\n    console.log('[DEBUG] Set up Sentry.')\n  } else {\n    Sentry.setTag('debugging', false)\n  }\n  const {\n    kInternalsSymbol,\n    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry }\n  } = constants\n  setSentry(Sentry)\n} else if (require('./constants').ENV.SOCKET_CLI_DEBUG) {\n  console.log('[DEBUG] Sentry disabled explicitly.')\n}\n"],"names":["console","dsn","enabled","integrations","process","Sentry","setSentry"],"mappings":";;;;;;;;;;;;;;;;AAAA;AACA;;AAEA;AAC4C;AAC1C;;;AAGI;;AAEEA;AACF;;AAEFC;AACAC;AACAC;AACF;;AAGE;AACAC;;AAIA;AACAA;AAEF;AACA;AACEC;AACAL;AACF;AACEK;AACF;;;AAGE;AAA+DC;AAAU;AAC3E;;AAEF;;","debugId":"0cf4fc59-671e-49ac-924c-9a7d192a497"}
+{"version":3,"file":"instrument-with-sentry.js","sources":["../../src/instrument-with-sentry.ts"],"sourcesContent":["// This should ONLY be included in the special Sentry build!\n// Otherwise the Sentry dependency won't even be present in the manifest.\n\n// Require constants with require(relConstantsPath) instead of require('./constants')\n// so Rollup doesn't generate a constants2.js chunk.\nconst relConstantsPath = './constants'\n// The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_SENTRY_BUILD']\".\nif (process.env['SOCKET_CLI_SENTRY_BUILD']) {\n  const Sentry = require('@sentry/node')\n  Sentry.init({\n    onFatalError(error: Error) {\n      // Defer module loads until after Sentry.init is called.\n      if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n        console.error('[DEBUG] [Sentry onFatalError]:', error)\n      }\n    },\n    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',\n    enabled: true,\n    integrations: []\n  })\n  Sentry.setTag(\n    'environment',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_PUBLISHED_BUILD']\".\n    process.env['SOCKET_CLI_PUBLISHED_BUILD'] ? 'pub' : process.env['NODE_ENV']\n  )\n  Sentry.setTag(\n    'version',\n    // The '@rollup/plugin-replace' will replace \"process.env['SOCKET_CLI_VERSION_HASH']\".\n    process.env['SOCKET_CLI_VERSION_HASH']\n  )\n  const constants = require(relConstantsPath)\n  if (constants.ENV.SOCKET_CLI_DEBUG) {\n    Sentry.setTag('debugging', true)\n    console.log('[DEBUG] Set up Sentry.')\n  } else {\n    Sentry.setTag('debugging', false)\n  }\n  const {\n    kInternalsSymbol,\n    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry }\n  } = constants\n  setSentry(Sentry)\n} else if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n  console.log('[DEBUG] Sentry disabled explicitly.')\n}\n"],"names":["console","dsn","enabled","integrations","process","Sentry","setSentry"],"mappings":";;;;;;;;;;;;;;;AAAA;AACA;;AAEA;AACA;AACA;AACA;AAC4C;AAC1C;;;AAGI;;AAEEA;AACF;;AAEFC;AACAC;AACAC;AACF;;AAGE;AACAC;;AAIA;AACAA;AAEF;AACA;AACEC;AACAL;AACF;AACEK;AACF;;;AAGE;AAA+DC;AAAU;AAC3E;;AAEF;;","debugId":"f9c4c083-a4f7-4aa4-b0af-c0a438552401"}