@socketsecurity/cli-with-sentry 1.0.7 → 1.0.9

package/external/@coana-tech/cli/cli.mjs

@@ -221973,7 +221973,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.9.32";
+var version2 = "14.9.33";
 
 // ../../node_modules/.pnpm/axios@1.9.0/node_modules/axios/lib/helpers/bind.js
 function bind2(fn2, thisArg) {

package/external/@socketsecurity/registry/lib/constants/npm-real-exec-path.js

@@ -1,44 +1,6 @@
 'use strict'
 
-// Use non-'node:' prefixed require to avoid Webpack errors.
-// eslint-disable-next-line n/prefer-node-protocol
-const fs = /*@__PURE__*/ require('fs')
-
+const { resolveBinPathSync } = /*@__PURE__*/ require('../npm')
 const which = /*@__PURE__*/ require('../../external/which')
 
-const WIN32 = require('./win32')
-
-// Will throw if not found.
-let binPath = which.sync('npm')
-
-// Lazily access constants.WIN32.
-if (WIN32) {
-  // Use non-'node:' prefixed require to avoid Webpack errors.
-  // eslint-disable-next-line n/prefer-node-protocol
-  const path = /*@__PURE__*/ require('path')
-
-  // The npm.CMD looks like:
-  // :: Created by npm, please don't edit manually.
-  // @ECHO OFF
-  //
-  // SETLOCAL
-  //
-  // SET "NODE_EXE=%~dp0\node.exe"
-  // IF NOT EXIST "%NODE_EXE%" (
-  //   SET "NODE_EXE=node"
-  // )
-  //
-  // SET "NPM_PREFIX_JS=%~dp0\node_modules\npm\bin\npm-prefix.js"
-  // SET "NPM_CLI_JS=%~dp0\node_modules\npm\bin\npm-cli.js"
-  // FOR /F "delims=" %%F IN ('CALL "%NODE_EXE%" "%NPM_PREFIX_JS%"') DO (
-  //   SET "NPM_PREFIX_NPM_CLI_JS=%%F\node_modules\npm\bin\npm-cli.js"
-  // )
-  // IF EXIST "%NPM_PREFIX_NPM_CLI_JS%" (
-  //   SET "NPM_CLI_JS=%NPM_PREFIX_NPM_CLI_JS%"
-  // )
-  //
-  // "%NODE_EXE%" "%NPM_CLI_JS%" %*
-  binPath = path.join(path.dirname(binPath), 'node_modules/npm/bin/npm-cli.js')
-}
-
-module.exports = fs.realpathSync.native(binPath)
+module.exports = resolveBinPathSync(which.sync('npm'))

package/external/@socketsecurity/registry/lib/npm.js

@@ -1,6 +1,7 @@
 'use strict'
 
 const { isDebug } = /*@__PURE__*/ require('./debug')
+const { readJsonSync } = /*@__PURE__*/ require('./fs')
 const { isRelative } = /*@__PURE__*/ require('./path')
 const { spawn } = /*@__PURE__*/ require('./spawn')
 
@@ -59,12 +60,14 @@ function execNpm(args, options) {
   const terminatorPos = args.indexOf('--')
   const npmArgs = (
     terminatorPos === -1 ? args : args.slice(0, terminatorPos)
-  ).filter(a => !isAuditFlag(a) && !isFundFlag(a) && !isProgressFlag(a))
+  ).filter(
+    a => !isNpmAuditFlag(a) && !isNpmFundFlag(a) && !isNpmProgressFlag(a)
+  )
   const otherArgs = terminatorPos === -1 ? [] : args.slice(terminatorPos)
   const logLevelArgs =
     // The default value of loglevel is "notice". We default to "warn" which is
     // one level quieter.
-    useDebug || npmArgs.some(isLoglevelFlag) ? [] : ['--loglevel', 'warn']
+    useDebug || npmArgs.some(isNpmLoglevelFlag) ? [] : ['--loglevel', 'warn']
   return spawn(
     /*@__PURE__*/ require('./constants/exec-path'),
     [
@@ -106,107 +109,136 @@ function getNotResolvedError(binPath, source = '') {
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function isAuditFlag(cmdArg) {
+function isNpmAuditFlag(cmdArg) {
   return auditFlags.has(cmdArg)
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function isFundFlag(cmdArg) {
+function isNpmFundFlag(cmdArg) {
   return fundFlags.has(cmdArg)
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function isLoglevelFlag(cmdArg) {
+function isNpmLoglevelFlag(cmdArg) {
   // https://docs.npmjs.com/cli/v11/using-npm/logging#setting-log-levels
   return cmdArg.startsWith('--loglevel=') || logFlags.has(cmdArg)
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function isNodeOptionsFlag(cmdArg) {
+function isNpmNodeOptionsFlag(cmdArg) {
   // https://docs.npmjs.com/cli/v9/using-npm/config#node-options
   return cmdArg.startsWith('--node-options=')
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function isProgressFlag(cmdArg) {
+function isNpmProgressFlag(cmdArg) {
   return progressFlags.has(cmdArg)
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function realExecPathSync(npmOrNpxExecPath) {
+function resolveBinPathSync(binPath) {
   const fs = getFs()
-  const WIN32 = /*@__PURE__*/ require('./constants/win32')
-  let binPath = npmOrNpxExecPath
-  if (WIN32) {
-    const path = getPath()
-    const basename = path.basename(npmOrNpxExecPath).toLoweCase()
-    if (basename.endsWith('.cmd')) {
-      const basenameWithoutExt = basename.slice(0, -4)
-      if (basenameWithoutExt === 'npm' || basenameWithoutExt === 'npx') {
-        // The npm.CMD looks like:
-        // :: Created by npm, please don't edit manually.
-        // @ECHO OFF
-        //
-        // SETLOCAL
-        //
-        // SET "NODE_EXE=%~dp0\node.exe"
-        // IF NOT EXIST "%NODE_EXE%" (
-        //   SET "NODE_EXE=node"
-        // )
-        //
-        // SET "NPM_PREFIX_JS=%~dp0\node_modules\npm\bin\npm-prefix.js"
-        // SET "NPM_CLI_JS=%~dp0\node_modules\npm\bin\npm-cli.js"
-        // FOR /F "delims=" %%F IN ('CALL "%NODE_EXE%" "%NPM_PREFIX_JS%"') DO (
-        //   SET "NPM_PREFIX_NPM_CLI_JS=%%F\node_modules\npm\bin\npm-cli.js"
-        // )
-        // IF EXIST "%NPM_PREFIX_NPM_CLI_JS%" (
-        //   SET "NPM_CLI_JS=%NPM_PREFIX_NPM_CLI_JS%"
-        // )
-        //
-        // "%NODE_EXE%" "%NPM_CLI_JS%" %*
-        binPath = path.join(
-          path.dirname(npmOrNpxExecPath),
-          `node_modules/npm/bin/${basenameWithoutExt}-cli.js`
+  const path = getPath()
+  const ext = path.extname(binPath)
+  const extLowered = ext.toLowerCase()
+  const basename = path.basename(binPath, ext)
+  const voltaIndex =
+    basename === 'node'
+      ? -1
+      : (/(?<=[\\/]\.volta[\\/])/i.exec(binPath)?.index ?? -1)
+
+  if (voltaIndex !== -1) {
+    const voltaPath = binPath.slice(0, voltaIndex)
+    const voltaToolsPath = path.join(voltaPath, 'tools')
+    const voltaImagePath = path.join(voltaToolsPath, 'image')
+    const voltaUserPath = path.join(voltaToolsPath, 'user')
+    const voltaPlatform = readJsonSync(
+      path.join(voltaUserPath, 'platform.json')
+    )
+    const voltaNodeVersion = voltaPlatform?.node?.runtime
+    const voltaNpmVersion = voltaPlatform?.node?.npm
+    let voltaBinPath = ''
+    if (basename === 'npm' || basename === 'npx') {
+      if (voltaNpmVersion) {
+        const relCliPath = `bin/${basename}-cli.js`
+        voltaBinPath = path.join(
+          voltaImagePath,
+          `npm/${voltaNpmVersion}/${relCliPath}`
         )
+        if (voltaNodeVersion && !fs.existsSync(voltaBinPath)) {
+          voltaBinPath = path.join(
+            voltaImagePath,
+            `node/${voltaNodeVersion}/lib/node_modules/npm/${relCliPath}`
+          )
+          if (!fs.existsSync(voltaBinPath)) {
+            voltaBinPath = ''
+          }
+        }
+      }
+    } else {
+      const voltaUserBinPath = path.join(voltaUserPath, 'bin')
+      const binInfo = readJsonSync(
+        path.join(voltaUserBinPath, `${basename}.json`)
+      )
+      const binPackage = binInfo?.package
+      if (binPackage) {
+        voltaBinPath = path.join(
+          voltaImagePath,
+          `packages/${binPackage}/bin/${basename}`
+        )
+        if (!fs.existsSync(voltaBinPath)) {
+          voltaBinPath = `${voltaBinPath}.cmd`
+          if (!fs.existsSync(voltaBinPath)) {
+            voltaBinPath = ''
+          }
+        }
       }
     }
+    if (voltaBinPath) {
+      return fs.realpathSync.native(voltaBinPath)
+    }
   }
-  return fs.realpathSync.native(binPath)
-}
 
-/*@__NO_SIDE_EFFECTS__*/
-function resolveBinPath(binPath) {
-  const fs = getFs()
   const WIN32 = /*@__PURE__*/ require('./constants/win32')
   if (WIN32) {
-    const path = getPath()
-    const ext = path.extname(binPath)
-    const extLowered = ext.toLowerCase()
-    if (extLowered === '' || extLowered === '.cmd' || extLowered === '.ps1') {
-      const basename = path.basename(binPath, ext)
-      const source = fs.readFileSync(binPath, 'utf8')
-      let relPath
-      if (basename === 'npm' || basename === 'npx') {
+    const hasKnownExt =
+      extLowered === '' || extLowered === '.cmd' || extLowered === '.ps1'
+    const isNpmOrNpx = basename === 'npm' || basename === 'npx'
+    if (hasKnownExt && isNpmOrNpx) {
+      // The quick route assumes a bin path like: C:\Program Files\nodejs\npm.cmd
+      const quickPath = path.join(
+        path.dirname(binPath),
+        `node_modules/npm/bin/${basename}-cli.js`
+      )
+      if (fs.existsSync(quickPath)) {
+        return fs.realpathSync.native(quickPath)
+      }
+    }
+
+    let relPath = ''
+    const source = fs.readFileSync(binPath, 'utf8')
+    if (hasKnownExt) {
+      if (isNpmOrNpx) {
         if (extLowered === '.cmd') {
           // "npm.cmd" and "npx.cmd" defined by
-          // https://github.com/npm/cli/blob/v11.2.0/bin/npm.cmd
-          // https://github.com/npm/cli/blob/v11.2.0/bin/npx.cmd
+          // https://github.com/npm/cli/blob/v11.4.2/bin/npm.cmd
+          // https://github.com/npm/cli/blob/v11.4.2/bin/npx.cmd
           relPath =
             basename === 'npm'
               ? /(?<="NPM_CLI_JS=%~dp0\\).*(?=")/.exec(source)?.[0]
               : /(?<="NPX_CLI_JS=%~dp0\\).*(?=")/.exec(source)?.[0]
         } else if (extLowered === '') {
           // Extensionless "npm" and "npx" defined by
-          // https://github.com/npm/cli/blob/v11.2.0/bin/npm.cmd
-          // https://github.com/npm/cli/blob/v11.2.0/bin/npx.cmd
+          // https://github.com/npm/cli/blob/v11.4.2/bin/npm
+          // https://github.com/npm/cli/blob/v11.4.2/bin/npx
           relPath =
             basename === 'npm'
               ? /(?<=NPM_CLI_JS="\$CLI_BASEDIR\/).*(?=")/.exec(source)?.[0]
               : /(?<=NPX_CLI_JS="\$CLI_BASEDIR\/).*(?=")/.exec(source)?.[0]
         } else if (extLowered === '.ps1') {
           // "npm.ps1" and "npx.ps1" defined by
-          // https://github.com/npm/cli/blob/v11.2.0/bin/npm.ps1
-          // https://github.com/npm/cli/blob/v11.2.0/bin/npx.ps1
+          // https://github.com/npm/cli/blob/v11.4.2/bin/npm.ps1
+          // https://github.com/npm/cli/blob/v11.4.2/bin/npx.ps1
           relPath =
             basename === 'npm'
               ? /(?<=\$NPM_CLI_JS="\$PSScriptRoot\/).*(?=")/.exec(source)?.[0]
@@ -314,7 +346,7 @@ function runBin(binPath, args, options) {
     [
       .../*@__PURE__*/ require('./constants/node-no-warnings-flags'),
       isRelative(binPath) || getPath().isAbsolute(binPath)
-        ? resolveBinPath(binPath)
+        ? resolveBinPathSync(binPath)
         : whichBinSync(binPath),
       ...args
     ],
@@ -323,7 +355,7 @@ function runBin(binPath, args, options) {
 }
 
 /*@__NO_SIDE_EFFECTS__*/
-function runScript(scriptName, args, options) {
+function runNpmScript(scriptName, args, options) {
   const { prepost, ...spawnOptions } = { __proto__: null, ...options }
   const useNodeRun =
     !prepost && /*@__PURE__*/ require('./constants/supports-node-run')
@@ -348,26 +380,25 @@ async function whichBin(binName, options) {
   const which = getWhich()
   // Depending on options `which` may throw if `binName` is not found.
   // The default behavior is to throw when `binName` is not found.
-  return resolveBinPath(await which(binName, options))
+  return resolveBinPathSync(await which(binName, options))
 }
 
 function whichBinSync(binName, options) {
   // Depending on options `which` may throw if `binName` is not found.
   // The default behavior is to throw when `binName` is not found.
-  return resolveBinPath(getWhich().sync(binName, options))
+  return resolveBinPathSync(getWhich().sync(binName, options))
 }
 
 module.exports = {
   execNpm,
-  isAuditFlag,
-  isFundFlag,
-  isLoglevelFlag,
-  isNodeOptionsFlag,
-  isProgressFlag,
-  realExecPathSync,
-  resolveBinPath,
+  isNpmAuditFlag,
+  isNpmFundFlag,
+  isNpmLoglevelFlag,
+  isNpmNodeOptionsFlag,
+  isNpmProgressFlag,
+  resolveBinPathSync,
   runBin,
-  runScript,
+  runNpmScript,
   whichBin,
   whichBinSync
 }

package/external/@socketsecurity/registry/lib/spinner.js

@@ -120,6 +120,12 @@ function Spinner(options) {
       }
 
       start(...args) {
+        const text = args.at(0)
+        // We clear this.text on start when `text` is falsy because yocto-spinner
+        // would not clear it otherwise.
+        if (typeof text !== 'string' || !text) {
+          this.setText('')
+        }
         return this.#apply('start', args)
       }
 

package/external/blessed-contrib/lib/widget/charts/bar.js

@@ -1,13 +1,14 @@
 'use strict';
 
-var require$$2$1 = require('../../../../blessed/lib/widgets/node');
-var require$$0$1 = require('../../../../blessed/lib/widgets/box');
+var require$$2$1 = require('blessed/lib/widgets/node');
+var require$$0$1 = require('blessed/lib/widgets/box');
 
 function getAugmentedNamespace(n) {
   if (Object.prototype.hasOwnProperty.call(n, '__esModule')) return n;
   var f = n.default;
+  var a;
 	if (typeof f == "function") {
-		var a = function a () {
+		a = function a () {
 			var isInstance = false;
       try {
         isInstance = this instanceof a;

package/external/blessed-contrib/lib/widget/charts/line.js

@@ -1,13 +1,14 @@
 'use strict';
 
-var require$$0$1 = require('../../../../blessed/lib/widgets/box');
-var require$$2$1 = require('../../../../blessed/lib/widgets/node');
+var require$$0$1 = require('blessed/lib/widgets/box');
+var require$$2$1 = require('blessed/lib/widgets/node');
 
 function getAugmentedNamespace(n) {
   if (Object.prototype.hasOwnProperty.call(n, '__esModule')) return n;
   var f = n.default;
+  var a;
 	if (typeof f == "function") {
-		var a = function a () {
+		a = function a () {
 			var isInstance = false;
       try {
         isInstance = this instanceof a;

package/external/blessed-contrib/lib/widget/table.js

@@ -1,8 +1,8 @@
 'use strict';
 
-var require$$0 = require('../../../blessed/lib/widgets/box');
-var require$$1 = require('../../../blessed/lib/widgets/list');
-var require$$2 = require('../../../blessed/lib/widgets/node');
+var require$$0 = require('blessed/lib/widgets/box');
+var require$$1 = require('blessed/lib/widgets/list');
+var require$$2 = require('blessed/lib/widgets/node');
 
 var ansiRegex;
 var hasRequiredAnsiRegex;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli-with-sentry",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -78,18 +78,18 @@
     "update:deps": "npx --yes npm-check-updates"
   },
   "devDependencies": {
-    "@babel/core": "7.27.4",
+    "@babel/core": "7.27.7",
     "@babel/plugin-proposal-export-default-from": "7.27.1",
     "@babel/plugin-transform-export-namespace-from": "7.27.1",
     "@babel/plugin-transform-runtime": "7.27.4",
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.27.6",
-    "@biomejs/biome": "2.0.5",
-    "@coana-tech/cli": "14.9.32",
+    "@biomejs/biome": "2.0.6",
+    "@coana-tech/cli": "14.9.33",
     "@cyclonedx/cdxgen": "11.4.1",
     "@dotenvx/dotenvx": "1.45.1",
     "@eslint/compat": "1.3.1",
-    "@eslint/js": "9.29.0",
+    "@eslint/js": "9.30.0",
     "@npmcli/arborist": "9.1.2",
     "@npmcli/config": "10.3.0",
     "@octokit/graphql": "9.0.1",
@@ -112,14 +112,14 @@
     "@socketregistry/is-interactive": "1.0.6",
     "@socketregistry/packageurl-js": "1.0.8",
     "@socketsecurity/config": "3.0.1",
-    "@socketsecurity/registry": "1.0.212",
-    "@socketsecurity/sdk": "1.4.48",
+    "@socketsecurity/registry": "1.0.216",
+    "@socketsecurity/sdk": "1.4.50",
     "@types/blessed": "0.1.25",
     "@types/cmd-shim": "5.0.2",
     "@types/js-yaml": "4.0.9",
     "@types/micromatch": "4.0.9",
     "@types/mock-fs": "4.13.4",
-    "@types/node": "24.0.4",
+    "@types/node": "24.0.7",
     "@types/npmcli__arborist": "6.3.1",
     "@types/npmcli__config": "6.0.3",
     "@types/proc-log": "3.0.4",
@@ -127,7 +127,7 @@
     "@types/which": "3.0.4",
     "@types/yargs-parser": "21.0.3",
     "@typescript-eslint/parser": "8.35.0",
-    "@typescript/native-preview": "7.0.0-dev.20250625.1",
+    "@typescript/native-preview": "7.0.0-dev.20250628.1",
     "@vitest/coverage-v8": "3.2.4",
     "blessed": "0.1.81",
     "blessed-contrib": "4.11.0",
@@ -137,9 +137,9 @@
     "custompatch": "1.1.7",
     "del-cli": "6.0.0",
     "dev-null-cli": "2.0.0",
-    "eslint": "9.29.0",
-    "eslint-import-resolver-typescript": "4.4.3",
-    "eslint-plugin-import-x": "4.16.0",
+    "eslint": "9.30.0",
+    "eslint-import-resolver-typescript": "4.4.4",
+    "eslint-plugin-import-x": "4.16.1",
     "eslint-plugin-n": "17.20.0",
     "eslint-plugin-sort-destructure-keys": "2.0.0",
     "eslint-plugin-unicorn": "56.0.1",
@@ -148,20 +148,21 @@
     "husky": "9.1.7",
     "ignore": "7.0.5",
     "js-yaml": "npm:@zkochan/js-yaml@0.0.7",
-    "knip": "5.61.2",
+    "knip": "5.61.3",
     "lint-staged": "16.1.2",
     "magic-string": "0.30.17",
     "meow": "13.2.0",
     "micromatch": "4.0.8",
     "mock-fs": "5.5.0",
     "nock": "14.0.5",
-    "node-gyp": "11.2.0",
     "npm-package-arg": "12.0.2",
     "npm-run-all2": "8.0.4",
     "open": "10.1.2",
     "oxlint": "1.3.0",
     "pony-cause": "2.1.11",
-    "rollup": "4.44.0",
+    "registry-auth-token": "5.1.0",
+    "registry-url": "7.2.0",
+    "rollup": "4.44.1",
     "semver": "7.7.2",
     "synp": "1.9.14",
     "terminal-link": "2.1.1",
@@ -237,6 +238,6 @@
     "strict": true
   },
   "dependencies": {
-    "@sentry/node": "9.32.0"
+    "@sentry/node": "9.33.0"
   }
 }

package/dist/types/commands/scan/handle-reach-scan.d.mts

@@ -1,3 +0,0 @@
-import type { OutputKind } from '../../types.mts';
-export declare function handleScanReach(argv: string[] | readonly string[], cwd: string, outputKind: OutputKind): Promise<void>;
-//# sourceMappingURL=handle-reach-scan.d.mts.map

package/dist/types/commands/scan/handle-reach-scan.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handle-reach-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-reach-scan.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,UAAU,iBAwBvB"}

package/external/node-gyp/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-    ".": "11.2.0"
-}