@socketsecurity/cli-with-sentry 0.15.55 → 0.15.56

package/external/blessed-contrib/lib/widget/table.js

@@ -1,133 +1,152 @@
 'use strict';
 
-var Box = require('../../../blessed/lib/widgets/box')
-  , List = require('../../../blessed/lib/widgets/list')
-  , Node = require('../../../blessed/lib/widgets/node')
-  , stripAnsi = require('strip-ansi');
-
-function Table(options) {
-
-  var self = this;
-
-  if (!(this instanceof Node)) {
-    return new Table(options);
-  }
-
-  if (Array.isArray(options.columnSpacing)) {
-    throw 'Error: columnSpacing cannot be an array.\r\n' +
-           'Note: From release 2.0.0 use property columnWidth instead of columnSpacing.\r\n' +
-           'Please refere to the README or to https://github.com/yaronn/blessed-contrib/issues/39';
-  }
-
-  if (!options.columnWidth) {
-    throw 'Error: A table must get columnWidth as a property. Please refer to the README.';
-  }
+var require$$0 = require('../../../blessed/lib/widgets/box');
+var require$$1 = require('../../../blessed/lib/widgets/list');
+var require$$2 = require('../../../blessed/lib/widgets/node');
+
+var ansiRegex;
+var hasRequiredAnsiRegex;
+function requireAnsiRegex() {
+  if (hasRequiredAnsiRegex) return ansiRegex;
+  hasRequiredAnsiRegex = 1;
+  ansiRegex = function () {
+    return /[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-PRZcf-nqry=><]/g;
+  };
+  return ansiRegex;
+}
 
-  options = options || {};
-  options.columnSpacing = options.columnSpacing==null? 10 : options.columnSpacing;
-  options.bold = true;
-  options.selectedFg = options.selectedFg || 'white';
-  options.selectedBg = options.selectedBg || 'blue';
-  options.fg = options.fg || 'green';
-  options.bg = options.bg || '';
-  options.interactive = (typeof options.interactive === 'undefined') ? true : options.interactive;
-  this.options = options;
-  Box.call(this, options);
+var stripAnsi;
+var hasRequiredStripAnsi;
+function requireStripAnsi() {
+  if (hasRequiredStripAnsi) return stripAnsi;
+  hasRequiredStripAnsi = 1;
+  var ansiRegex = requireAnsiRegex()();
+  stripAnsi = function (str) {
+    return typeof str === 'string' ? str.replace(ansiRegex, '') : str;
+  };
+  return stripAnsi;
+}
 
-  this.rows = new List({
-    //height: 0,
-    top: 2,
-    width: 0,
-    left: 1,
-    style: { selected: {
-      fg: options.selectedFg
-      , bg: options.selectedBg
+var table;
+var hasRequiredTable;
+function requireTable() {
+  if (hasRequiredTable) return table;
+  hasRequiredTable = 1;
+  var Box = require$$0,
+    List = require$$1,
+    Node = require$$2,
+    stripAnsi = requireStripAnsi();
+  function Table(options) {
+    var self = this;
+    if (!(this instanceof Node)) {
+      return new Table(options);
     }
-    , item: {
-      fg: options.fg
-      , bg: options.bg
-    }},
-    keys: options.keys,
-    vi: options.vi,
-    mouse: options.mouse,
-    tags: true,
-    interactive: options.interactive,
-    screen: this.screen
-  });
-
-  this.append(this.rows);
-
-  this.on('attach', function() {
-    if (self.options.data) {
-      self.setData(self.options.data);
+    if (Array.isArray(options.columnSpacing)) {
+      throw 'Error: columnSpacing cannot be an array.\r\n' + 'Note: From release 2.0.0 use property columnWidth instead of columnSpacing.\r\n' + 'Please refere to the README or to https://github.com/yaronn/blessed-contrib/issues/39';
     }
-  });
-
-}
-
-Table.prototype = Object.create(Box.prototype);
-
-Table.prototype.focus = function(){
-  this.rows.focus();
-};
-
-Table.prototype.render = function() {
-  if(this.screen.focused == this.rows)
-    this.rows.focus();
-
-  this.rows.width = this.width-3;
-  this.rows.height = this.height-4;
-  Box.prototype.render.call(this);
-};
-
-
-Table.prototype.setData = function(table) {
-  var self = this;
-
-  var dataToString = function(d) {
-    var str = '';
-    d.forEach(function(r, i) {
-      var colsize = self.options.columnWidth[i]
-        , strip = stripAnsi(r.toString())
-        , ansiLen = r.toString().length - strip.length
-        , spaceLength = colsize - strip.length + self.options.columnSpacing;
-      r = r.toString().substring(0, colsize + ansiLen); //compensate for ansi len
-      if (spaceLength < 0) {
-        spaceLength = 0;
+    if (!options.columnWidth) {
+      throw 'Error: A table must get columnWidth as a property. Please refer to the README.';
+    }
+    options = options || {};
+    options.columnSpacing = options.columnSpacing == null ? 10 : options.columnSpacing;
+    options.bold = true;
+    options.selectedFg = options.selectedFg || 'white';
+    options.selectedBg = options.selectedBg || 'blue';
+    options.fg = options.fg || 'green';
+    options.bg = options.bg || '';
+    options.interactive = typeof options.interactive === 'undefined' ? true : options.interactive;
+    this.options = options;
+    Box.call(this, options);
+    this.rows = new List({
+      //height: 0,
+      top: 2,
+      width: 0,
+      left: 1,
+      style: {
+        selected: {
+          fg: options.selectedFg,
+          bg: options.selectedBg
+        },
+        item: {
+          fg: options.fg,
+          bg: options.bg
+        }
+      },
+      keys: options.keys,
+      vi: options.vi,
+      mouse: options.mouse,
+      tags: true,
+      interactive: options.interactive,
+      screen: this.screen
+    });
+    this.append(this.rows);
+    this.on('attach', function () {
+      if (self.options.data) {
+        self.setData(self.options.data);
       }
-      var spaces = new Array(spaceLength).join(' ');
-      str += r + spaces;
     });
-    return str;
+  }
+  Table.prototype = Object.create(Box.prototype);
+  Table.prototype.focus = function () {
+    this.rows.focus();
+  };
+  Table.prototype.render = function () {
+    if (this.screen.focused == this.rows) this.rows.focus();
+    this.rows.width = this.width - 3;
+    this.rows.height = this.height - 4;
+    Box.prototype.render.call(this);
+  };
+  Table.prototype.setData = function (table) {
+    var self = this;
+    var dataToString = function (d) {
+      var str = '';
+      d.forEach(function (r, i) {
+        var colsize = self.options.columnWidth[i],
+          strip = stripAnsi(r.toString()),
+          ansiLen = r.toString().length - strip.length,
+          spaceLength = colsize - strip.length + self.options.columnSpacing;
+        r = r.toString().substring(0, colsize + ansiLen); //compensate for ansi len
+        if (spaceLength < 0) {
+          spaceLength = 0;
+        }
+        var spaces = new Array(spaceLength).join(' ');
+        str += r + spaces;
+      });
+      return str;
+    };
+    var formatted = [];
+    table.data.forEach(function (d) {
+      var str = dataToString(d);
+      formatted.push(str);
+    });
+    this.setContent(dataToString(table.headers));
+    this.rows.setItems(formatted);
   };
-
-  var formatted = [];
-
-  table.data.forEach(function(d) {
-    var str = dataToString(d);
-    formatted.push(str);
-  });
-  this.setContent(dataToString(table.headers));
-  this.rows.setItems(formatted);
-};
-
-Table.prototype.getOptionsPrototype = function() {
-  return  { keys: true
-    , fg: 'white'
-    , interactive: false
-    , label: 'Active Processes'
-    , width: '30%'
-    , height: '30%'
-    , border: {type: 'line', fg: 'cyan'}
-    , columnSpacing: 10
-    , columnWidth: [16, 12]
-    , data: { headers: ['col1', 'col2']
-      , data: [ ['a', 'b']
-        , ['5', 'u']
-        , ['x', '16.1'] ]}
+  Table.prototype.getOptionsPrototype = function () {
+    return {
+      keys: true,
+      fg: 'white',
+      interactive: false,
+      label: 'Active Processes',
+      width: '30%',
+      height: '30%',
+      border: {
+        type: 'line',
+        fg: 'cyan'
+      },
+      columnSpacing: 10,
+      columnWidth: [16, 12],
+      data: {
+        headers: ['col1', 'col2'],
+        data: [['a', 'b'], ['5', 'u'], ['x', '16.1']]
+      }
+    };
   };
-};
+  Table.prototype.type = 'table';
+  table = Table;
+  return table;
+}
 
-Table.prototype.type = 'table';
+var tableExports = requireTable();
 
-module.exports = Table;
+module.exports = tableExports;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli-with-sentry",
-  "version": "0.15.55",
+  "version": "0.15.56",
   "description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -83,9 +83,9 @@
     "@babel/plugin-transform-export-namespace-from": "7.27.1",
     "@babel/plugin-transform-runtime": "7.27.4",
     "@babel/preset-typescript": "7.27.1",
-    "@babel/runtime": "7.27.4",
+    "@babel/runtime": "7.27.6",
     "@biomejs/biome": "1.9.4",
-    "@coana-tech/cli": "14.9.20",
+    "@coana-tech/cli": "14.9.21",
     "@cyclonedx/cdxgen": "11.3.2",
     "@dotenvx/dotenvx": "1.44.1",
     "@eslint/compat": "1.2.9",
@@ -118,7 +118,7 @@
     "@types/js-yaml": "4.0.9",
     "@types/micromatch": "4.0.9",
     "@types/mock-fs": "4.13.4",
-    "@types/node": "22.15.29",
+    "@types/node": "22.15.30",
     "@types/npmcli__arborist": "6.3.0",
     "@types/proc-log": "3.0.4",
     "@types/semver": "7.7.0",
@@ -126,7 +126,7 @@
     "@types/yargs-parser": "21.0.3",
     "@typescript-eslint/parser": "8.33.1",
     "@typescript/native-preview": "7.0.0-dev.20250605.1",
-    "@vitest/coverage-v8": "3.2.1",
+    "@vitest/coverage-v8": "3.2.2",
     "blessed": "0.1.81",
     "blessed-contrib": "4.11.0",
     "browserslist": "4.25.0",
@@ -136,8 +136,8 @@
     "del-cli": "6.0.0",
     "dev-null-cli": "2.0.0",
     "eslint": "9.28.0",
-    "eslint-import-resolver-typescript": "4.4.2",
-    "eslint-plugin-import-x": "4.15.0",
+    "eslint-import-resolver-typescript": "4.4.3",
+    "eslint-plugin-import-x": "4.15.1",
     "eslint-plugin-n": "17.19.0",
     "eslint-plugin-sort-destructure-keys": "2.0.0",
     "eslint-plugin-unicorn": "56.0.1",
@@ -146,7 +146,7 @@
     "husky": "9.1.7",
     "ignore": "7.0.5",
     "js-yaml": "npm:@zkochan/js-yaml@0.0.7",
-    "knip": "5.60.1",
+    "knip": "5.60.2",
     "lint-staged": "16.1.0",
     "magic-string": "0.30.17",
     "meow": "13.2.0",
@@ -164,10 +164,11 @@
     "terminal-link": "2.1.1",
     "tiny-updater": "3.5.3",
     "tinyglobby": "0.2.14",
+    "trash": "9.0.0",
     "type-coverage": "2.29.7",
     "typescript-eslint": "8.33.1",
     "unplugin-purge-polyfills": "0.1.0",
-    "vitest": "3.2.1",
+    "vitest": "3.2.2",
     "which": "5.0.0",
     "yaml": "2.8.0",
     "yargs-parser": "22.0.0",
@@ -200,7 +201,7 @@
     "side-channel": "npm:@socketregistry/side-channel@^1",
     "tiny-colors": "$yoctocolors-cjs",
     "typedarray": "npm:@socketregistry/typedarray@^1",
-    "undici": "6.21.1",
+    "undici": "6.21.2",
     "vite": "6.3.5",
     "xml2js": "0.5.0",
     "yaml": "2.8.0"
@@ -233,6 +234,6 @@
     "strict": true
   },
   "dependencies": {
-    "@sentry/node": "9.26.0"
+    "@sentry/node": "9.27.0"
   }
 }

package/dist/shadow-bin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shadow-bin.js","sources":["../src/shadow/npm/link.mts","../src/shadow/npm/bin.mts"],"sourcesContent":["import path from 'node:path'\n\nimport cmdShim from 'cmd-shim'\n\nimport constants from '../../constants.mts'\nimport {\n  getNpmBinPath,\n  getNpxBinPath,\n  isNpmBinPathShadowed,\n  isNpxBinPathShadowed,\n} from '../../utils/npm-paths.mts'\n\nexport async function installLinks(\n  realBinPath: string,\n  binName: 'npm' | 'npx',\n): Promise<string> {\n  const isNpx = binName === 'npx'\n  // Find package manager being shadowed by this process.\n  const binPath = isNpx ? getNpxBinPath() : getNpmBinPath()\n  // Lazily access constants.WIN32.\n  const { WIN32 } = constants\n  // TODO: Is this early exit needed?\n  if (WIN32 && binPath) {\n    return binPath\n  }\n  const shadowed = isNpx ? isNpxBinPathShadowed() : isNpmBinPathShadowed()\n  // Move our bin directory to front of PATH so its found first.\n  if (!shadowed) {\n    if (WIN32) {\n      await cmdShim(\n        // Lazily access constants.distPath.\n        path.join(constants.distPath, `${binName}-cli.js`),\n        path.join(realBinPath, binName),\n      )\n    }\n    const { env } = process\n    env['PATH'] = `${realBinPath}${path.delimiter}${env['PATH']}`\n  }\n  return binPath\n}\n","import { isDebug } from '@socketsecurity/registry/lib/debug'\nimport {\n  isLoglevelFlag,\n  isNodeOptionsFlag,\n  isProgressFlag,\n} from '@socketsecurity/registry/lib/npm'\nimport { spawn } from '@socketsecurity/registry/lib/spawn'\n\nimport { installLinks } from './link.mts'\nimport constants from '../../constants.mts'\nimport { cmdFlagsToString } from '../../utils/cmd.mts'\n\nimport type { SpawnOptions } from '@socketsecurity/registry/lib/spawn'\n\nconst { SOCKET_CLI_SAFE_BIN, SOCKET_CLI_SAFE_PROGRESS, SOCKET_IPC_HANDSHAKE } =\n  constants\n\nexport default async function shadowBin(\n  binName: 'npm' | 'npx',\n  args = process.argv.slice(2),\n) {\n  process.exitCode = 1\n  // Lazily access constants.ENV.NODE_COMPILE_CACHE\n  const { NODE_COMPILE_CACHE } = constants.ENV\n  const terminatorPos = args.indexOf('--')\n  const rawBinArgs = terminatorPos === -1 ? args : args.slice(0, terminatorPos)\n  const binArgs = rawBinArgs.filter(\n    a => !isProgressFlag(a) && !isNodeOptionsFlag(a),\n  )\n  const nodeOptionsArg = rawBinArgs.findLast(isNodeOptionsFlag)\n  const progressArg = rawBinArgs.findLast(isProgressFlag) !== '--no-progress'\n  const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)\n  const permArgs =\n    binName === 'npm' &&\n    // Lazily access constants.SUPPORTS_NODE_PERMISSION_FLAG.\n    constants.SUPPORTS_NODE_PERMISSION_FLAG\n      ? await (async () => {\n          const cwd = process.cwd()\n          const stdioPipeOptions: SpawnOptions = { cwd }\n          const globalPrefix = (\n            await spawn('npm', ['prefix', '-g'], stdioPipeOptions)\n          ).stdout.trim()\n          const npmCachePath = (\n            await spawn('npm', ['config', 'get', 'cache'], stdioPipeOptions)\n          ).stdout.trim()\n          return [\n            '--permission',\n            '--allow-child-process',\n            // '--allow-addons',\n            // '--allow-wasi',\n            // Allow all reads because npm walks up directories looking for config\n            // and package.json files.\n            '--allow-fs-read=*',\n            `--allow-fs-write=${cwd}/*`,\n            `--allow-fs-write=${globalPrefix}/*`,\n            `--allow-fs-write=${npmCachePath}/*`,\n          ]\n        })()\n      : []\n  const useDebug = isDebug()\n  const useNodeOptions = nodeOptionsArg || permArgs.length\n  const isSilent = !useDebug && !binArgs.some(isLoglevelFlag)\n  // The default value of loglevel is \"notice\". We default to \"error\" which is\n  // two levels quieter.\n  const logLevelArgs = isSilent ? ['--loglevel', 'error'] : []\n  const spawnPromise = spawn(\n    // Lazily access constants.execPath.\n    constants.execPath,\n    [\n      // Lazily access constants.nodeHardenFlags.\n      ...constants.nodeHardenFlags,\n      // Lazily access constants.nodeNoWarningsFlags.\n      ...constants.nodeNoWarningsFlags,\n      // Lazily access constants.ENV.INLINED_SOCKET_CLI_SENTRY_BUILD.\n      ...(constants.ENV.INLINED_SOCKET_CLI_SENTRY_BUILD\n        ? [\n            '--require',\n            // Lazily access constants.distInstrumentWithSentryPath.\n            constants.distInstrumentWithSentryPath,\n          ]\n        : []),\n      '--require',\n      // Lazily access constants.distShadowInjectPath.\n      constants.distShadowInjectPath,\n      // Lazily access constants.shadowBinPath.\n      await installLinks(constants.shadowBinPath, binName),\n      ...(useDebug ? ['--trace-uncaught', '--trace-warnings'] : []),\n      ...(useNodeOptions\n        ? [\n            `--node-options='${nodeOptionsArg ? nodeOptionsArg.slice(15) : ''}${cmdFlagsToString(permArgs)}'`,\n          ]\n        : []),\n      // Add '--no-progress' to fix input being swallowed by the npm spinner.\n      '--no-progress',\n      // Add '--loglevel=error' if a loglevel flag is not provided and the\n      // SOCKET_CLI_DEBUG environment variable is not truthy.\n      ...logLevelArgs,\n      ...binArgs,\n      ...otherArgs,\n    ],\n    {\n      env: {\n        ...process.env,\n        ...(NODE_COMPILE_CACHE ? { NODE_COMPILE_CACHE } : undefined),\n      },\n      // 'inherit' + 'ipc'\n      stdio: [0, 1, 2, 'ipc'],\n    },\n  )\n  // See https://nodejs.org/api/child_process.html#event-exit.\n  spawnPromise.process.on('exit', (code, signalName) => {\n    if (signalName) {\n      process.kill(process.pid, signalName)\n    } else if (code !== null) {\n      // eslint-disable-next-line n/no-process-exit\n      process.exit(code)\n    }\n  })\n  spawnPromise.process.send({\n    [SOCKET_IPC_HANDSHAKE]: {\n      [SOCKET_CLI_SAFE_BIN]: binName,\n      [SOCKET_CLI_SAFE_PROGRESS]: progressArg,\n    },\n  })\n  await spawnPromise\n}\n"],"names":["WIN32","env","SOCKET_IPC_HANDSHAKE","NODE_COMPILE_CACHE","constants","cwd","process","spawnPromise"],"mappings":";;;;;;;;;;AAYO;AAIL;AACA;;AAEA;;AACQA;AAAM;AACd;;AAEE;AACF;;AAEA;;AAEE;AACE;AACE;;AAIJ;;AACQC;AAAI;AACZA;AACF;AACA;AACF;;ACzBA;;;AAAuDC;AAAqB;AAG7D;;AAKb;;AACQC;;AACR;AACA;AACA;AAGA;;AAEA;AACA;AAEE;AACAC;AAEM;AACA;AAAyCC;;;;;AAUvC;AACA;AACA;AACA;AACA;;AAOV;AACA;;AAEA;AACA;;;AAGE;;AAGE;;AAEA;;AAEA;AACA;AAGM;AACAD;AAIN;AACAA;AACA;;AAQA;;AAEA;AACA;;AAMAH;;AAEE;AAA2BE;AAAmB;;AAEhD;;AAEF;AAEF;;AAEE;;AAEA;AACE;AACAG;AACF;AACF;AACAC;AACE;;AAEE;AACF;AACF;AACA;AACF;;","debugId":"22cddd58-b602-498a-8e93-9b948460e294"}

package/dist/shadow-inject.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shadow-inject.js","sources":["../src/shadow/npm/paths.mts","../src/shadow/npm/arborist/types.mts","../src/shadow/npm/arborist-helpers.mts","../src/shadow/npm/arborist/lib/arborist/index.mts","../src/shadow/npm/arborist/index.mts","../src/shadow/npm/inject.mts"],"sourcesContent":["import path from 'node:path'\n\nimport { normalizePath } from '@socketsecurity/registry/lib/path'\n\nimport constants from '../../constants.mts'\nimport { getNpmRequire } from '../../utils/npm-paths.mts'\n\nlet _arboristPkgPath: string | undefined\nexport function getArboristPackagePath() {\n  if (_arboristPkgPath === undefined) {\n    const pkgName = '@npmcli/arborist'\n    const mainPathWithForwardSlashes = normalizePath(\n      getNpmRequire().resolve(pkgName),\n    )\n    const arboristPkgPathWithForwardSlashes = mainPathWithForwardSlashes.slice(\n      0,\n      mainPathWithForwardSlashes.lastIndexOf(pkgName) + pkgName.length,\n    )\n    // Lazily access constants.WIN32.\n    _arboristPkgPath = constants.WIN32\n      ? path.normalize(arboristPkgPathWithForwardSlashes)\n      : arboristPkgPathWithForwardSlashes\n  }\n  return _arboristPkgPath\n}\n\nlet _arboristClassPath: string | undefined\nexport function getArboristClassPath() {\n  if (_arboristClassPath === undefined) {\n    _arboristClassPath = path.join(\n      getArboristPackagePath(),\n      'lib/arborist/index.js',\n    )\n  }\n  return _arboristClassPath\n}\n\nlet _arboristDepValidPath: string | undefined\nexport function getArboristDepValidPath() {\n  if (_arboristDepValidPath === undefined) {\n    _arboristDepValidPath = path.join(\n      getArboristPackagePath(),\n      'lib/dep-valid.js',\n    )\n  }\n  return _arboristDepValidPath\n}\n\nlet _arboristEdgeClassPath: string | undefined\nexport function getArboristEdgeClassPath() {\n  if (_arboristEdgeClassPath === undefined) {\n    _arboristEdgeClassPath = path.join(getArboristPackagePath(), 'lib/edge.js')\n  }\n  return _arboristEdgeClassPath\n}\n\nlet _arboristNodeClassPath: string | undefined\nexport function getArboristNodeClassPath() {\n  if (_arboristNodeClassPath === undefined) {\n    _arboristNodeClassPath = path.join(getArboristPackagePath(), 'lib/node.js')\n  }\n  return _arboristNodeClassPath\n}\n\nlet _arboristOverrideSetClassPath: string | undefined\nexport function getArboristOverrideSetClassPath() {\n  if (_arboristOverrideSetClassPath === undefined) {\n    _arboristOverrideSetClassPath = path.join(\n      getArboristPackagePath(),\n      'lib/override-set.js',\n    )\n  }\n  return _arboristOverrideSetClassPath\n}\n","import { createEnum } from '../../../utils/objects.mts'\n\nimport type {\n  Options as ArboristOptions,\n  Advisory as BaseAdvisory,\n  Arborist as BaseArborist,\n  AuditReport as BaseAuditReport,\n  Diff as BaseDiff,\n  Edge as BaseEdge,\n  Node as BaseNode,\n  BaseOverrideSet,\n  BuildIdealTreeOptions,\n  ReifyOptions,\n} from '@npmcli/arborist'\n\nexport type ArboristClass = ArboristInstance & {\n  new (...args: any): ArboristInstance\n}\n\nexport type ArboristInstance = Omit<\n  typeof BaseArborist,\n  | 'actualTree'\n  | 'auditReport'\n  | 'buildIdealTree'\n  | 'diff'\n  | 'idealTree'\n  | 'loadActual'\n  | 'loadVirtual'\n  | 'reify'\n> & {\n  auditReport?: AuditReportInstance | null | undefined\n  actualTree?: NodeClass | null | undefined\n  diff: Diff | null\n  idealTree?: NodeClass | null | undefined\n  buildIdealTree(options?: BuildIdealTreeOptions): Promise<NodeClass>\n  loadActual(options?: ArboristOptions): Promise<NodeClass>\n  loadVirtual(options?: ArboristOptions): Promise<NodeClass>\n  reify(options?: ArboristReifyOptions): Promise<NodeClass>\n}\n\nexport type ArboristReifyOptions = ReifyOptions & ArboristOptions\n\nexport type AuditAdvisory = Omit<BaseAdvisory, 'id'> & {\n  id: number\n  cwe: string[]\n  cvss: {\n    score: number\n    vectorString: string\n  }\n  vulnerable_versions: string\n}\n\nexport type AuditReportInstance = Omit<BaseAuditReport, 'report'> & {\n  report: { [dependency: string]: AuditAdvisory[] }\n}\n\nexport const DiffAction = createEnum({\n  add: 'ADD',\n  change: 'CHANGE',\n  remove: 'REMOVE',\n})\n\nexport type Diff = Omit<\n  BaseDiff,\n  | 'actual'\n  | 'children'\n  | 'filterSet'\n  | 'ideal'\n  | 'leaves'\n  | 'removed'\n  | 'shrinkwrapInflated'\n  | 'unchanged'\n> & {\n  actual: NodeClass\n  children: Diff[]\n  filterSet: Set<NodeClass>\n  ideal: NodeClass\n  leaves: NodeClass[]\n  parent: Diff | null\n  removed: NodeClass[]\n  shrinkwrapInflated: Set<NodeClass>\n  unchanged: NodeClass[]\n}\n\nexport type EdgeClass = Omit<\n  BaseEdge,\n  | 'accept'\n  | 'detach'\n  | 'optional'\n  | 'overrides'\n  | 'peer'\n  | 'peerConflicted'\n  | 'rawSpec'\n  | 'reload'\n  | 'satisfiedBy'\n  | 'spec'\n  | 'to'\n> & {\n  optional: boolean\n  overrides: OverrideSetClass | undefined\n  peer: boolean\n  peerConflicted: boolean\n  rawSpec: string\n  get accept(): string | undefined\n  get spec(): string\n  get to(): NodeClass | null\n  new (...args: any): EdgeClass\n  detach(): void\n  reload(hard?: boolean): void\n  satisfiedBy(node: NodeClass): boolean\n}\n\nexport type LinkClass = Omit<NodeClass, 'isLink'> & {\n  readonly isLink: true\n}\n\nexport type NodeClass = Omit<\n  BaseNode,\n  | 'addEdgeIn'\n  | 'addEdgeOut'\n  | 'canDedupe'\n  | 'canReplace'\n  | 'canReplaceWith'\n  | 'children'\n  | 'deleteEdgeIn'\n  | 'edgesIn'\n  | 'edgesOut'\n  | 'from'\n  | 'hasShrinkwrap'\n  | 'inDepBundle'\n  | 'inShrinkwrap'\n  | 'integrity'\n  | 'isTop'\n  | 'matches'\n  | 'meta'\n  | 'name'\n  | 'overrides'\n  | 'packageName'\n  | 'parent'\n  | 'recalculateOutEdgesOverrides'\n  | 'resolve'\n  | 'resolveParent'\n  | 'root'\n  | 'target'\n  | 'updateOverridesEdgeInAdded'\n  | 'updateOverridesEdgeInRemoved'\n  | 'version'\n  | 'versions'\n> & {\n  name: string\n  version: string\n  children: Map<string, NodeClass | LinkClass>\n  edgesIn: Set<EdgeClass>\n  edgesOut: Map<string, EdgeClass>\n  from: NodeClass | null\n  hasShrinkwrap: boolean\n  inShrinkwrap: boolean | undefined\n  integrity?: string | null\n  isTop: boolean | undefined\n  meta: BaseNode['meta'] & {\n    addEdge(edge: EdgeClass): void\n  }\n  overrides: OverrideSetClass | undefined\n  target: NodeClass\n  versions: string[]\n  get inDepBundle(): boolean\n  get packageName(): string | null\n  get parent(): NodeClass | null\n  set parent(value: NodeClass | null)\n  get resolveParent(): NodeClass | null\n  get root(): NodeClass | null\n  set root(value: NodeClass | null)\n  new (...args: any): NodeClass\n  addEdgeIn(edge: EdgeClass): void\n  addEdgeOut(edge: EdgeClass): void\n  canDedupe(preferDedupe?: boolean): boolean\n  canReplace(node: NodeClass, ignorePeers?: string[]): boolean\n  canReplaceWith(node: NodeClass, ignorePeers?: string[]): boolean\n  deleteEdgeIn(edge: EdgeClass): void\n  matches(node: NodeClass): boolean\n  recalculateOutEdgesOverrides(): void\n  resolve(name: string): NodeClass\n  updateOverridesEdgeInAdded(\n    otherOverrideSet: OverrideSetClass | undefined,\n  ): boolean\n  updateOverridesEdgeInRemoved(otherOverrideSet: OverrideSetClass): boolean\n}\n\nexport interface OverrideSetClass\n  extends Omit<\n    BaseOverrideSet,\n    | 'ancestry'\n    | 'children'\n    | 'getEdgeRule'\n    | 'getMatchingRule'\n    | 'getNodeRule'\n    | 'parent'\n    | 'ruleset'\n  > {\n  children: Map<string, OverrideSetClass>\n  key: string | undefined\n  keySpec: string | undefined\n  name: string | undefined\n  parent: OverrideSetClass | undefined\n  value: string | undefined\n  version: string | undefined\n  // eslint-disable-next-line @typescript-eslint/no-misused-new\n  new (...args: any[]): OverrideSetClass\n  get isRoot(): boolean\n  get ruleset(): Map<string, OverrideSetClass>\n  ancestry(): Generator<OverrideSetClass>\n  childrenAreEqual(otherOverrideSet: OverrideSetClass | undefined): boolean\n  getEdgeRule(edge: EdgeClass): OverrideSetClass\n  getMatchingRule(node: NodeClass): OverrideSetClass | null\n  getNodeRule(node: NodeClass): OverrideSetClass\n  isEqual(otherOverrideSet: OverrideSetClass | undefined): boolean\n}\n","import semver from 'semver'\n\nimport { PackageURL } from '@socketregistry/packageurl-js'\nimport { getManifestData } from '@socketsecurity/registry'\nimport { debugFn } from '@socketsecurity/registry/lib/debug'\nimport { hasOwn } from '@socketsecurity/registry/lib/objects'\nimport { fetchPackagePackument } from '@socketsecurity/registry/lib/packages'\n\nimport constants from '../../constants.mts'\nimport { Edge } from './arborist/index.mts'\nimport { DiffAction } from './arborist/types.mts'\nimport { getAlertsMapFromPurls } from '../../utils/alerts-map.mts'\nimport { type AliasResult, npa } from '../../utils/npm-package-arg.mts'\nimport { applyRange, getMajor, getMinVersion } from '../../utils/semver.mts'\nimport { idToNpmPurl } from '../../utils/spec.mts'\n\nimport type {\n  ArboristInstance,\n  Diff,\n  EdgeClass,\n  LinkClass,\n  NodeClass,\n} from './arborist/types.mts'\nimport type { RangeStyle } from '../../utils/semver.mts'\nimport type {\n  AlertIncludeFilter,\n  AlertsByPurl,\n} from '../../utils/socket-package-alert.mts'\nimport type { EditablePackageJson } from '@socketsecurity/registry/lib/packages'\nimport type { Spinner } from '@socketsecurity/registry/lib/spinner'\n\nconst { LOOP_SENTINEL, NPM, NPM_REGISTRY_URL } = constants\n\nfunction getUrlOrigin(input: string): string {\n  try {\n    // TODO: URL.parse is available in Node 22.1.0. We can use it when we drop Node 18.\n    // https://nodejs.org/docs/latest-v22.x/api/url.html#urlparseinput-base\n    // return URL.parse(input)?.origin ?? ''\n    return new URL(input).origin ?? ''\n  } catch {}\n  return ''\n}\n\nexport function findBestPatchVersion(\n  node: NodeClass,\n  availableVersions: string[],\n  vulnerableVersionRange?: string,\n  _firstPatchedVersionIdentifier?: string | undefined,\n): string | null {\n  const manifestData = getManifestData(NPM, node.name)\n  let eligibleVersions\n  if (manifestData && manifestData.name === manifestData.package) {\n    const major = getMajor(manifestData.version)\n    if (typeof major !== 'number') {\n      return null\n    }\n    eligibleVersions = availableVersions.filter(v => getMajor(v) === major)\n  } else {\n    const major = getMajor(node.version)\n    if (typeof major !== 'number') {\n      return null\n    }\n    eligibleVersions = availableVersions.filter(\n      v =>\n        // Filter for versions that are within the current major version and\n        // are NOT in the vulnerable range.\n        getMajor(v) === major &&\n        (!vulnerableVersionRange ||\n          !semver.satisfies(v, vulnerableVersionRange)),\n    )\n  }\n  return eligibleVersions ? semver.maxSatisfying(eligibleVersions, '*') : null\n}\n\nexport function findPackageNode(\n  tree: NodeClass,\n  name: string,\n  version?: string | undefined,\n): NodeClass | undefined {\n  const queue: Array<NodeClass | LinkClass> = [tree]\n  const visited = new Set<NodeClass>()\n  let sentinel = 0\n  while (queue.length) {\n    if (sentinel++ === LOOP_SENTINEL) {\n      throw new Error('Detected infinite loop in findPackageNode')\n    }\n    const nodeOrLink = queue.pop()!\n    const node = getTargetNode(nodeOrLink)\n    if (visited.has(node)) {\n      continue\n    }\n    visited.add(node)\n    if (\n      node.name === name &&\n      (typeof version !== 'string' || node.version === version)\n    ) {\n      return node\n    }\n    for (const child of node.children.values()) {\n      queue.push(child)\n    }\n    for (const edge of node.edgesOut.values()) {\n      const { to } = edge\n      if (to) {\n        queue.push(to)\n      }\n    }\n  }\n  return undefined\n}\n\nexport function findPackageNodes(\n  tree: NodeClass,\n  name: string,\n  version?: string | undefined,\n): NodeClass[] {\n  const matches: NodeClass[] = []\n  const queue: Array<NodeClass | LinkClass> = [tree]\n  const visited = new Set<NodeClass>()\n  let sentinel = 0\n  while (queue.length) {\n    if (sentinel++ === LOOP_SENTINEL) {\n      throw new Error('Detected infinite loop in findPackageNodes')\n    }\n    const nodeOrLink = queue.pop()!\n    const node = getTargetNode(nodeOrLink)\n    if (visited.has(node)) {\n      continue\n    }\n    visited.add(node)\n\n    const { version: targetVersion } = node\n    if (!targetVersion && Array.isArray(node.errors) && node.errors.length) {\n      debugFn(`miss: version for ${node.name} due to errors:\\n`, node.errors)\n    }\n    if (\n      node.name === name &&\n      (typeof version !== 'string' || node.version === version)\n    ) {\n      matches.push(node)\n    }\n    for (const child of node.children.values()) {\n      queue.push(child)\n    }\n    for (const edge of node.edgesOut.values()) {\n      const { to } = edge\n      if (to) {\n        queue.push(to)\n      }\n    }\n  }\n  return matches\n}\n\nexport type GetAlertsMapFromArboristOptions = {\n  consolidate?: boolean | undefined\n  include?: AlertIncludeFilter | undefined\n  nothrow?: boolean | undefined\n  spinner?: Spinner | undefined\n}\n\nexport async function getAlertsMapFromArborist(\n  arb: ArboristInstance,\n  options_?: GetAlertsMapFromArboristOptions | undefined,\n): Promise<AlertsByPurl> {\n  const options = {\n    __proto__: null,\n    consolidate: false,\n    include: undefined,\n    limit: Infinity,\n    nothrow: false,\n    ...options_,\n  } as GetAlertsMapFromArboristOptions\n\n  options.include = {\n    __proto__: null,\n    // Leave 'actions' unassigned so it can be given a default value in\n    // subsequent functions where `options` is passed.\n    // actions: undefined,\n    blocked: true,\n    critical: true,\n    cve: true,\n    existing: false,\n    unfixable: true,\n    upgradable: false,\n    ...options.include,\n  } as AlertIncludeFilter\n\n  const needInfoOn = getDetailsFromDiff(arb.diff, {\n    include: {\n      unchanged: options.include.existing,\n    },\n  })\n\n  const purls = needInfoOn.map(d => idToNpmPurl(d.node.pkgid))\n\n  let overrides: { [key: string]: string } | undefined\n  const overridesMap = (\n    arb.actualTree ??\n    arb.idealTree ??\n    (await arb.loadActual())\n  )?.overrides?.children\n  if (overridesMap) {\n    overrides = Object.fromEntries(\n      [...overridesMap.entries()].map(([key, overrideSet]) => {\n        return [key, overrideSet.value!]\n      }),\n    )\n  }\n\n  return await getAlertsMapFromPurls(purls, {\n    overrides,\n    ...options,\n  })\n}\n\nexport type DiffQueryIncludeFilter = {\n  unchanged?: boolean | undefined\n  unknownOrigin?: boolean | undefined\n}\n\nexport type DiffQueryOptions = {\n  include?: DiffQueryIncludeFilter | undefined\n}\n\nexport type PackageDetail = {\n  node: NodeClass\n  existing?: NodeClass | undefined\n}\n\nexport function getDetailsFromDiff(\n  diff_: Diff | null,\n  options?: DiffQueryOptions | undefined,\n): PackageDetail[] {\n  const details: PackageDetail[] = []\n  // `diff_` is `null` when `npm install --package-lock-only` is passed.\n  if (!diff_) {\n    return details\n  }\n\n  const include = {\n    __proto__: null,\n    unchanged: false,\n    unknownOrigin: false,\n    ...({ __proto__: null, ...options } as DiffQueryOptions).include,\n  } as DiffQueryIncludeFilter\n\n  const queue: Diff[] = [...diff_.children]\n  let pos = 0\n  let { length: queueLength } = queue\n  while (pos < queueLength) {\n    if (pos === LOOP_SENTINEL) {\n      throw new Error('Detected infinite loop while walking Arborist diff')\n    }\n    const diff = queue[pos++]!\n    const { action } = diff\n    if (action) {\n      // The `pkgNode`, i.e. the `ideal` node, will be `undefined` if the diff\n      // action is 'REMOVE'\n      // The `oldNode`, i.e. the `actual` node, will be `undefined` if the diff\n      // action is 'ADD'.\n      const { actual: oldNode, ideal: pkgNode } = diff\n      let existing: NodeClass | undefined\n      let keep = false\n      if (action === DiffAction.change) {\n        if (pkgNode?.package.version !== oldNode?.package.version) {\n          keep = true\n          if (\n            oldNode?.package.name &&\n            oldNode.package.name === pkgNode?.package.name\n          ) {\n            existing = oldNode\n          }\n        } else {\n          // TODO: This debug log has too much information. We should narrow it down.\n          // debugFn('skip: meta change diff\\n', diff)\n        }\n      } else {\n        keep = action !== DiffAction.remove\n      }\n      if (keep && pkgNode?.resolved && (!oldNode || oldNode.resolved)) {\n        if (\n          include.unknownOrigin ||\n          getUrlOrigin(pkgNode.resolved) === NPM_REGISTRY_URL\n        ) {\n          details.push({\n            node: pkgNode,\n            existing,\n          })\n        }\n      }\n    }\n    for (const child of diff.children) {\n      queue[queueLength++] = child\n    }\n  }\n  if (include.unchanged) {\n    const { unchanged } = diff_!\n    for (let i = 0, { length } = unchanged; i < length; i += 1) {\n      const pkgNode = unchanged[i]!\n      if (\n        include.unknownOrigin ||\n        getUrlOrigin(pkgNode.resolved!) === NPM_REGISTRY_URL\n      ) {\n        details.push({\n          node: pkgNode,\n          existing: pkgNode,\n        })\n      }\n    }\n  }\n  return details\n}\n\nexport function getTargetNode(nodeOrLink: NodeClass | LinkClass): NodeClass\nexport function getTargetNode<T>(nodeOrLink: T): NodeClass | null\nexport function getTargetNode(nodeOrLink: any): NodeClass | null {\n  return nodeOrLink?.isLink ? nodeOrLink.target : (nodeOrLink ?? null)\n}\n\nexport function isTopLevel(tree: NodeClass, node: NodeClass): boolean {\n  return getTargetNode(tree.children.get(node.name)) === node\n}\n\nexport type Packument = Exclude<\n  Awaited<ReturnType<typeof fetchPackagePackument>>,\n  null\n>\n\nexport function updateNode(\n  node: NodeClass,\n  newVersion: string,\n  newVersionPackument: Packument['versions'][number],\n): void {\n  // Object.defineProperty is needed to set the version property and replace\n  // the old value with newVersion.\n  Object.defineProperty(node, 'version', {\n    configurable: true,\n    enumerable: true,\n    get: () => newVersion,\n  })\n  // Update package.version associated with the node.\n  node.package.version = newVersion\n  // Update node.resolved.\n  const purlObj = PackageURL.fromString(idToNpmPurl(node.name))\n  node.resolved = `${NPM_REGISTRY_URL}/${node.name}/-/${purlObj.name}-${newVersion}.tgz`\n  // Update node.integrity with the targetPackument.dist.integrity value if available\n  // else delete node.integrity so a new value is resolved for the target version.\n  const { integrity } = newVersionPackument.dist\n  if (integrity) {\n    node.integrity = integrity\n  } else {\n    delete node.integrity\n  }\n  // Update node.package.deprecated based on targetPackument.deprecated.\n  if (hasOwn(newVersionPackument, 'deprecated')) {\n    node.package['deprecated'] = newVersionPackument.deprecated as string\n  } else {\n    delete node.package['deprecated']\n  }\n  // Update node.package.dependencies.\n  const newDeps = { ...newVersionPackument.dependencies }\n  const { dependencies: oldDeps } = node.package\n  node.package.dependencies = newDeps\n  if (oldDeps) {\n    for (const oldDepName of Object.keys(oldDeps)) {\n      if (!hasOwn(newDeps, oldDepName)) {\n        // Detach old edges for dependencies that don't exist on the updated\n        // node.package.dependencies.\n        node.edgesOut.get(oldDepName)?.detach()\n      }\n    }\n  }\n  for (const newDepName of Object.keys(newDeps)) {\n    if (!hasOwn(oldDeps, newDepName)) {\n      // Add new edges for dependencies that don't exist on the old\n      // node.package.dependencies.\n      node.addEdgeOut(\n        new Edge({\n          from: node,\n          name: newDepName,\n          spec: newDeps[newDepName],\n          type: 'prod',\n        }) as unknown as EdgeClass,\n      )\n    }\n  }\n}\n\nexport function updatePackageJsonFromNode(\n  editablePkgJson: EditablePackageJson,\n  tree: NodeClass,\n  node: NodeClass,\n  newVersion: string,\n  rangeStyle?: RangeStyle | undefined,\n): boolean {\n  let result = false\n  if (!isTopLevel(tree, node)) {\n    return result\n  }\n  const { name } = node\n  for (const depField of [\n    'dependencies',\n    'optionalDependencies',\n    'peerDependencies',\n  ]) {\n    const depObject = editablePkgJson.content[depField] as\n      | { [key: string]: string }\n      | undefined\n    const depValue = hasOwn(depObject, name) ? depObject[name] : undefined\n    if (typeof depValue !== 'string' || depValue.startsWith('catalog:')) {\n      continue\n    }\n    let oldRange = depValue\n    // Use npa if depValue looks like more than just a semver range.\n    if (depValue.includes(':')) {\n      const npaResult = npa(depValue)\n      if (!npaResult || (npaResult as AliasResult).subSpec) {\n        continue\n      }\n      oldRange = npaResult.rawSpec\n    }\n    const oldMin = getMinVersion(oldRange)\n    const newRange =\n      oldMin &&\n      // Ensure we're on the same major version...\n      getMajor(newVersion) === oldMin.major &&\n      // and not a downgrade.\n      semver.gte(newVersion, oldMin.version)\n        ? applyRange(oldRange, newVersion, rangeStyle)\n        : oldRange\n    if (oldRange !== newRange) {\n      result = true\n      editablePkgJson.update({\n        [depField]: {\n          ...depObject,\n          [name]: newRange,\n        },\n      })\n    }\n  }\n  return result\n}\n","// @ts-ignore\nimport UntypedArborist from '@npmcli/arborist/lib/arborist/index.js'\n\nimport { logger } from '@socketsecurity/registry/lib/logger'\n\nimport constants from '../../../../../constants.mts'\nimport { logAlertsMap } from '../../../../../utils/socket-package-alert.mts'\nimport { getAlertsMapFromArborist } from '../../../arborist-helpers.mts'\n\nimport type {\n  ArboristClass,\n  ArboristReifyOptions,\n  NodeClass,\n} from '../../types.mts'\n\nconst {\n  NPM,\n  NPX,\n  SOCKET_CLI_ACCEPT_RISKS,\n  SOCKET_CLI_SAFE_BIN,\n  SOCKET_CLI_SAFE_PROGRESS,\n  SOCKET_CLI_VIEW_ALL_RISKS,\n  kInternalsSymbol,\n  [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { getIpc },\n} = constants\n\nexport const SAFE_ARBORIST_REIFY_OPTIONS_OVERRIDES = {\n  __proto__: null,\n  audit: false,\n  dryRun: true,\n  fund: false,\n  ignoreScripts: true,\n  progress: false,\n  save: false,\n  saveBundle: false,\n  silent: true,\n}\n\nexport const kCtorArgs = Symbol('ctorArgs')\n\nexport const kRiskyReify = Symbol('riskyReify')\n\nexport const Arborist: ArboristClass = UntypedArborist\n\n// Implementation code not related to our custom behavior is based on\n// https://github.com/npm/cli/blob/v11.0.0/workspaces/arborist/lib/arborist/index.js:\nexport class SafeArborist extends Arborist {\n  constructor(...ctorArgs: ConstructorParameters<ArboristClass>) {\n    super(\n      {\n        path:\n          (ctorArgs.length ? ctorArgs[0]?.path : undefined) ?? process.cwd(),\n        ...(ctorArgs.length ? ctorArgs[0] : undefined),\n        ...SAFE_ARBORIST_REIFY_OPTIONS_OVERRIDES,\n      },\n      ...ctorArgs.slice(1),\n    )\n    ;(this as any)[kCtorArgs] = ctorArgs\n  }\n\n  async [kRiskyReify](\n    ...args: Parameters<InstanceType<ArboristClass>['reify']>\n  ): Promise<NodeClass> {\n    const ctorArgs = (this as any)[kCtorArgs]\n    const arb = new Arborist(\n      {\n        ...(ctorArgs.length ? ctorArgs[0] : undefined),\n        progress: false,\n      },\n      ...ctorArgs.slice(1),\n    )\n    const ret = await (arb.reify as (...args: any[]) => Promise<NodeClass>)(\n      {\n        ...(args.length ? args[0] : undefined),\n        progress: false,\n      },\n      ...args.slice(1),\n    )\n    Object.assign(this, arb)\n    return ret\n  }\n\n  // @ts-ignore Incorrectly typed.\n  override async reify(\n    this: SafeArborist,\n    ...args: Parameters<InstanceType<ArboristClass>['reify']>\n  ): Promise<NodeClass> {\n    const options = {\n      __proto__: null,\n      ...(args.length ? args[0] : undefined),\n    } as ArboristReifyOptions\n    const ipc = await getIpc()\n    const binName = ipc[SOCKET_CLI_SAFE_BIN]\n    if (!binName) {\n      return await this[kRiskyReify](...args)\n    }\n    await super.reify(\n      {\n        ...options,\n        ...SAFE_ARBORIST_REIFY_OPTIONS_OVERRIDES,\n        progress: false,\n      },\n      // @ts-ignore: TypeScript gets grumpy about rest parameters.\n      ...args.slice(1),\n    )\n    // Lazily access constants.ENV.SOCKET_CLI_ACCEPT_RISKS.\n    const acceptRisks = constants.ENV.SOCKET_CLI_ACCEPT_RISKS\n    const progress = ipc[SOCKET_CLI_SAFE_PROGRESS]\n    const spinner =\n      options['silent'] || !progress\n        ? undefined\n        : // Lazily access constants.spinner.\n          constants.spinner\n    const isSafeNpm = binName === NPM\n    const isSafeNpx = binName === NPX\n    const alertsMap = await getAlertsMapFromArborist(this, {\n      spinner,\n      include:\n        acceptRisks || options.dryRun || options['yes']\n          ? {\n              actions: ['error'],\n              blocked: true,\n              critical: false,\n              cve: false,\n              existing: true,\n              unfixable: false,\n            }\n          : {\n              existing: isSafeNpx,\n              unfixable: isSafeNpm,\n            },\n    })\n    if (alertsMap.size) {\n      process.exitCode = 1\n      // Lazily access constants.ENV.SOCKET_CLI_VIEW_ALL_RISKS.\n      const viewAllRisks = constants.ENV.SOCKET_CLI_VIEW_ALL_RISKS\n      logAlertsMap(alertsMap, {\n        hideAt: viewAllRisks ? 'none' : 'middle',\n        output: process.stderr,\n      })\n      throw new Error(\n        `\n          Socket ${binName} exiting due to risks.${\n            viewAllRisks\n              ? ''\n              : `\\nView all risks - Rerun with environment variable ${SOCKET_CLI_VIEW_ALL_RISKS}=1.`\n          }${\n            acceptRisks\n              ? ''\n              : `\\nAccept risks - Rerun with environment variable ${SOCKET_CLI_ACCEPT_RISKS}=1.`\n          }\n        `.trim(),\n      )\n    } else if (!options['silent']) {\n      logger.success(\n        `Socket ${binName} ${acceptRisks ? 'accepted' : 'found no'} risks`,\n      )\n      if (binName === NPX) {\n        logger.log(`Running ${options.add![0]}`)\n      }\n    }\n    return await this[kRiskyReify](...args)\n  }\n}\n","import { createRequire } from 'node:module'\n\n// @ts-ignore\nimport UntypedEdge from '@npmcli/arborist/lib/edge.js'\n// @ts-ignore\nimport UntypedNode from '@npmcli/arborist/lib/node.js'\n// @ts-ignore\nimport UntypedOverrideSet from '@npmcli/arborist/lib/override-set.js'\n\nimport {\n  getArboristClassPath,\n  getArboristEdgeClassPath,\n  getArboristNodeClassPath,\n  getArboristOverrideSetClassPath,\n} from '../paths.mts'\nimport { Arborist, SafeArborist } from './lib/arborist/index.mts'\n\nimport type { EdgeClass, NodeClass, OverrideSetClass } from './types.mts'\n\nconst require = createRequire(import.meta.url)\n\nexport const SAFE_ARBORIST_REIFY_OPTIONS_OVERRIDES = {\n  __proto__: null,\n  audit: false,\n  dryRun: true,\n  fund: false,\n  ignoreScripts: true,\n  progress: false,\n  save: false,\n  saveBundle: false,\n  silent: true,\n}\n\nexport { Arborist, SafeArborist }\n\nexport const Edge: EdgeClass = UntypedEdge\n\nexport const Node: NodeClass = UntypedNode\n\nexport const OverrideSet: OverrideSetClass = UntypedOverrideSet\n\nexport function installSafeArborist() {\n  // Override '@npmcli/arborist' module exports with patched variants based on\n  // https://github.com/npm/cli/pull/8089.\n  const cache: { [key: string]: any } = require.cache\n  cache[getArboristClassPath()] = { exports: SafeArborist }\n  cache[getArboristEdgeClassPath()] = { exports: Edge }\n  cache[getArboristNodeClassPath()] = { exports: Node }\n  cache[getArboristOverrideSetClassPath()] = { exports: OverrideSet }\n}\n","import { installSafeArborist } from './arborist/index.mts'\n\ninstallSafeArborist()\n"],"names":["_arboristPkgPath","add","change","remove","NPM_REGISTRY_URL","eligibleVersions","getMajor","visited","queue","to","version","matches","__proto__","consolidate","include","limit","nothrow","blocked","critical","cve","existing","unfixable","upgradable","unchanged","unknownOrigin","length","action","actual","ideal","keep","node","Object","configurable","enumerable","integrity","dependencies","from","name","spec","type","semver","result","getIpc","audit","dryRun","fund","ignoreScripts","progress","save","saveBundle","silent","path","constants","hideAt","logger","cache","exports","installSafeArborist"],"mappings":";;;;;;;;;;;;;;AAOA;AACO;;;AAGH;AAGA;AAIA;AACAA;AAGF;AACA;AACF;AAEA;AACO;;;AAML;AACA;AACF;AAaA;AACO;;;AAGL;AACA;AACF;AAEA;AACO;;;AAGL;AACA;AACF;AAEA;AACO;;;AAML;AACA;AACF;;ACjBO;AACLC;AACAC;AACAC;AACF;;AC7BA;;;AAA4BC;AAAiB;AAE7C;;AAEI;AACA;AACA;;;AAGF;AACF;AAEO;;AAOL;;AAEE;AACA;AACE;AACF;AACAC;AACF;AACE;AACA;AACE;AACF;AACAA;AAEI;AACA;AACAC;AAIN;;AAEF;AAEO;AAKL;AACA;;;AAGE;AACE;AACF;AACA;AACA;AACA;AACE;AACF;AACAC;AACA;AAIE;AACF;;AAEEC;AACF;;;AAEUC;AAAG;AACX;AACED;AACF;AACF;AACF;AACA;AACF;AAEO;;AAML;AACA;;;AAGE;AACE;AACF;AACA;AACA;AACA;AACE;AACF;AACAD;;AAEQG;AAAuB;AAC/B;;AAEA;AACA;AAIEC;AACF;;AAEEH;AACF;;;AAEUC;AAAG;AACX;AACED;AACF;AACF;AACF;AACA;AACF;AASO;AAIL;AACEI;AACAC;AACAC;AACAC;AACAC;;;;AAKAJ;AACA;AACA;AACA;AACAK;AACAC;AACAC;AACAC;AACAC;AACAC;AACA;;AAGF;AACER;AACES;AACF;AACF;AAEA;AAEA;;AAMA;;AAGM;AACF;AAEJ;AAEA;;;AAGA;AACF;AAgBO;;AAKL;;AAEE;AACF;AAEA;AACEX;AACAW;AACAC;;AACMZ;;AAA4B;;AAGpC;;;AAEMa;AAAoB;;;AAGtB;AACF;AACA;;AACQC;AAAO;AACf;AACE;AACA;AACA;AACA;;AACQC;AAAiBC;AAAe;AACxC;;AAEA;;AAEIC;AACA;AAIET;AACF;AACF;AAIF;AACES;AACF;AACA;AACE;;AAKIC;AACAV;AACF;AACF;AACF;AACF;AACA;AACEZ;AACF;AACF;;;AAEUe;AAAU;AAClB;AAAkBE;;AAChB;AACA;;AAKIK;AACAV;AACF;AACF;AACF;AACF;AACA;AACF;AAIO;;AAEP;AAEO;AACL;AACF;AAOO;AAKL;AACA;AACAW;AACEC;AACAC;;AAEF;AACA;AACAH;AACA;AACA;AACAA;AACA;AACA;;AACQI;;AACR;;AAEA;;AAEA;AACA;AACA;;AAEA;AACE;AACF;AACA;AACA;AAAkB;;;AACVC;;AACRL;AACA;;AAEI;AACE;AACA;;AAEF;AACF;AACF;;AAEE;AACE;AACA;AACAA;AAEIM;AACAC;AACAC;AACAC;AACF;AAEJ;AACF;AACF;AAEO;;AAQL;AACE;AACF;;AACQF;AAAK;;AAMX;AAGA;;AAEE;AACF;;AAEA;AACA;AACE;AACA;AACE;AACF;;AAEF;AACA;;AAGE;AACA/B;AACA;AACAkC;;AAIAC;;AAEE;AACE;AACA;AACF;AACF;AACF;AACF;AACA;AACF;;AC1bA;AAeA;;;;;;;;AAQE;AAA+DC;AAAO;AACxE;AAEO;AACL9B;AACA+B;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACF;AAEO;AAEA;AAEA;;AAEP;AACA;AACO;;AAEH;AAEIC;;;;AAOF;AACJ;AAEA;AAGE;AACA;;AAGIJ;;AAIJ;;AAGIA;;AAIJhB;AACA;AACF;;AAEA;AACA;AAIE;AACEnB;;;AAGF;AACA;;;AAGA;;AAGI;AACA;AACAmC;;AAEF;AACA;AAEF;AACA;AACA;;AAIM;AACAK;AACN;AACA;AACA;;;;AAMUnC;AACAC;AACAC;AACAC;AACAC;AACF;AAEED;AACAC;AACF;AACR;;;AAGE;AACA;;AAEEgC;;AAEF;;AAGN;AAQA;AAGI;AACEC;;;AAKA;AACF;;AAEF;AACF;;AChJA,iBAAA;AAEO;AACL1C;AACA+B;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACAC;AACF;AAIO;AAEA;AAEA;AAEA;AACL;AACA;AACA;AACAK;AAAkCC;;AAClCD;AAAsCC;;AACtCD;AAAsCC;;AACtCD;AAA6CC;;AAC/C;;AC/CAC;;;;;;;;;","debugId":"a5816f76-450f-4ee2-89c1-c52f85bce9ae"}

package/external/blessed-contrib/index.js

@@ -1,28 +0,0 @@
-'use strict'
-
-exports.grid = require('./lib/layout/grid')
-exports.carousel = require('./lib/layout/carousel')
-
-exports.map = require('./lib/widget/map')
-exports.canvas = require('./lib/widget/canvas')
-
-exports.gauge = require('./lib/widget/gauge.js')
-exports.gaugeList = require('./lib/widget/gauge-list.js')
-
-exports.lcd = require('./lib/widget/lcd.js')
-exports.donut = require('./lib/widget/donut.js')
-exports.log = require('./lib/widget/log.js')
-exports.picture = require('./lib/widget/picture.js')
-exports.sparkline = require('./lib/widget/sparkline.js')
-exports.table = require('./lib/widget/table.js')
-exports.tree = require('./lib/widget/tree.js')
-exports.markdown = require('./lib/widget/markdown.js')
-
-exports.bar = require('./lib/widget/charts/bar')
-exports.stackedBar = require('./lib/widget/charts/stacked-bar')
-exports.line = require('./lib/widget/charts/line')
-
-exports.OutputBuffer = require('./lib/server-utils').OutputBuffer
-exports.InputBuffer = require('./lib/server-utils').InputBuffer
-exports.createScreen = require('./lib/server-utils').createScreen
-exports.serverError = require('./lib/server-utils').serverError

package/external/blessed-contrib/lib/layout/carousel.js

@@ -1,74 +0,0 @@
-'use strict';
-
-function Carousel(pages, options) {
-  this.currPage = 0;
-  this.pages = pages;
-  this.options = options;
-  this.screen = this.options.screen;
-}
-
-Carousel.prototype.move = function() {
-  var i = this.screen.children.length;
-  while (i--) this.screen.children[i].detach();
-
-  this.pages[this.currPage](this.screen, this.currPage);
-  this.screen.render();
-};
-
-Carousel.prototype.next = function() {
-  this.currPage++;
-  if (this.currPage==this.pages.length){
-    if (!this.options.rotate) {
-      this.currPage--;
-      return;
-    } else {
-      this.currPage=0;
-    }
-  }
-  this.move();
-};
-
-Carousel.prototype.prev = function() {
-  this.currPage--;
-  if (this.currPage<0) {
-    if (!this.options.rotate) {
-      this.currPage++;
-      return;
-    } else {
-      this.currPage=this.pages.length-1;
-    }
-  }
-  this.move();
-};
-
-Carousel.prototype.home = function() {
-  this.currPage = 0;
-  this.move();
-};
-
-Carousel.prototype.end = function() {
-  this.currPage = this.pages.length -1;
-  this.move();
-};
-
-Carousel.prototype.start = function() {
-  var self = this;
-
-  this.move();
-
-  if (this.options.interval) {
-    setInterval(this.next.bind(this), this.options.interval);
-  }
-
-  if (this.options.controlKeys) {
-    this.screen.key(['right', 'left', 'home', 'end'], function(ch, key) {
-      if (key.name=='right') self.next();
-      if (key.name=='left') self.prev();
-      if (key.name=='home') self.home();
-      if (key.name=='end') self.end();
-    });
-  }
-
-};
-
-module.exports = Carousel;

package/external/blessed-contrib/lib/server-utils.js

@@ -1,73 +0,0 @@
-'use strict';
-
-function OutputBuffer(options) {
-  this.isTTY = true;
-  this.columns = options.cols;
-  this.rows = options.rows;
-  this.write = function(s) {
-    s = s.replace('\x1b8', ''); //not clear from where in blessed this code comes from. It forces the terminal to clear and loose existing content.
-    options.res.write(s);
-  };
-
-  this.on = function() {};
-}
-
-function InputBuffer() {
-  this.isTTY = true;
-  this.isRaw = true;
-
-  this.emit = function() {};
-
-  this.setRawMode = function() {};
-  this.resume = function() {};
-  this.pause = function() {};
-
-  this.on = function() {};
-}
-
-function serverError(req, res, err) {
-  setTimeout(function() {
-    if (!res.headersSent) res.writeHead(500, {'Content-Type': 'text/plain'});
-    res.write('\r\n\r\n'+err+'\r\n\r\n');
-    //restore cursor
-    res.end('\u001b[?25h');
-  }, 0);
-
-  return true;
-}
-
-
-function createScreen(req, res) {
-  var url = require('url');
-  var query = url.parse(req.url, true).query;
-
-  var cols = query.cols || 250;
-  var rows = query.rows || 50;
-
-  if (cols<=35 || cols>=500 || rows<=5 || rows>=300) {
-    serverError(req, res, 'cols must be bigger than 35 and rows must be bigger than 5');
-    return null;
-  }
-
-  res.writeHead(200, {'Content-Type': 'text/plain'});
-
-  var contrib = require('../index')
-  var output = new contrib.OutputBuffer({res: res, cols: cols, rows: rows});
-  var input = new contrib.InputBuffer(); //required to run under forever since it replaces stdin to non-tty
-  var Program = require('../../blessed/lib/program')
-  var program = new Program({output: output, input: input});
-
-  if (query.terminal) program.terminal = query.terminal;
-  if (query.isOSX) program.isOSXTerm = query.isOSX;
-  if (query.isiTerm2) program.isiTerm2 = query.isiTerm2;
-
-  var ScreenWidget = require('../../blessed/lib/widgets/screen')
-  var screen = new ScreenWidget({program: program});
-  return screen;
-}
-
-
-exports.createScreen = createScreen;
-exports.OutputBuffer = OutputBuffer;
-exports.InputBuffer = InputBuffer;
-exports.serverError = serverError;