@socketsecurity/cli-with-sentry 1.1.25 → 2.0.1

package/CHANGELOG.md

@@ -4,311 +4,154 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
-## [1.1.23](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.23) - 2025-09-22
+## [2.0.1](https://github.com/SocketDev/socket-cli/releases/tag/v2.0.1) - 2025-10-30
 
 ### Changed
-- Enhanced `--no-apply-fixes` flag naming for improved clarity (previously `--dont-apply-fixes`)
-- Streamlined documentation and help text for better user experience
-- Improved `pnpm dlx` operations by removing unnecessary `--ignore-scripts` flag
+- Updated @socketsecurity/lib to v2.9.0 with Socket.dev URL constants and enhanced error messages
+- Updated @socketsecurity/sdk to v3.0.21
+- Normalized lock behavior across codebase
 
 ### Fixed
-- Resolved JSON example formatting in usage documentation
-- Enhanced test reliability for cdxgen on Windows platforms
-- Improved error handling in optimize command for pnpm environments
+- Bootstrap path resolution in binary builders to correct path
 
-## [1.1.22](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.22) - 2025-09-20
+## [2.0.0](https://github.com/SocketDev/socket-cli/releases/tag/v2.0.0) - 2025-10-29
 
 ### Changed
-- Rename `--only-compute` flag to `--dont-apply-fixes` for `socket fix`, but keep old flag as an alias.
-
-### Fixed
-- Resolved interactive prompts in `socket optimize` when using pnpm
-- Sanitize extracted git repository names to be compatible with the Socket API.
-
-## [1.1.21](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.22) - 2025-09-20
+- **BREAKING**: CLI now ships as single executable binary requiring no external Node.js installation
 
 ### Added
-- New `--compact-header` flag for streamlined CLI output display
-
-### Changed
-- Enhanced package manager interception for improved security scanning
-- Improved detection of temporary package execution environments
+- GitLab merge request support for `socket fix`
+- Persistent GHSA tracking to avoid duplicate fixes
+- Markdown output support for `socket fix` and `socket optimize`
+- `--reach-min-severity` flag to filter reachability analysis by vulnerability severity threshold
 
 ### Fixed
-- Enhanced error handling in `socket optimize` with proper exit codes
+- Target directory handling in reachability analysis for scan commands
 
-## [1.1.20](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.20) - 2025-09-19
+## [1.1.25](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.25) - 2025-10-10
 
 ### Added
-- Terminal link support for enhanced command output formatting
+- `--no-major-updates` flag
+- `--show-affected-direct-dependencies` flag
 
 ### Fixed
-- Resolved Windows compatibility issues with package manager execution
+- Provenance handling
 
-## [1.1.19](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.19) - 2025-09-19
+## [1.1.24](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.24) - 2025-10-10
 
 ### Added
-- Enhanced testing capabilities for malware detection features
-
-## [1.1.18](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.18) - 2025-09-18
+- `--minimum-release-age` flag for `socket fix`
+- SOCKET_CLI_COANA_LOCAL_PATH environment variable
 
 ### Fixed
-- Enhanced compatibility with older Node.js versions
+- Organization capabilities detection
+- Enterprise plan filtering
 
-## [1.1.17](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.17) - 2025-09-18
-
-### Fixed
-- Enhanced Windows compatibility for package manager operations
+## [1.1.23](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.23) - 2025-09-22
 
-## [1.1.16](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.16) - 2025-09-16
+### Changed
+- Renamed `--dont-apply-fixes` to `--no-apply-fixes` (old flag remains as alias)
+- pnpm dlx operations no longer use `--ignore-scripts`
 
 ### Fixed
-- Enhanced pnpm wrapper compatibility with dlx commands
+- Error handling in optimize command for pnpm
 
-## [1.1.15](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.15) - 2025-09-16
+## [1.1.22](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.22) - 2025-09-20
 
 ### Changed
-- Improved `socket fix` error messages for missing environment variables
+- Renamed `--only-compute` to `--dont-apply-fixes` for `socket fix` (old flag remains as alias)
 
 ### Fixed
-- Resolved path handling issue in `socket optimize` command
+- Interactive prompts in `socket optimize` with pnpm
+- Git repository name sanitization
 
-## [1.1.14](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.14) - 2025-09-17
-
-### Changed
-- Enhanced third-party tool integration
-
-## [1.1.13](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.13) - 2025-09-16
+## [1.1.21](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.21) - 2025-09-20
 
 ### Added
-- New `--output-file` flag for `socket fix` to save computed fixes to a JSON file
-- New `--only-compute` flag for `socket fix` to compute fixes without applying them
-
-## [1.1.12](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.12) - 2025-09-15
+- `--compact-header` flag
 
 ### Fixed
-- Enhanced security alert processing for more reliable operations
+- Error handling in `socket optimize`
 
-## [1.1.11](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.11) - 2025-09-12
+## [1.1.20](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.20) - 2025-09-19
+
+### Added
+- Terminal link support
 
 ### Fixed
-- Improved multipart upload reliability with Socket SDK update
+- Windows package manager execution
 
-## [1.1.10](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.10) - 2025-09-11
+## [1.1.13](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.13) - 2025-09-16
 
-### Changed
-- Enhanced command argument filtering for improved compatibility with npm and cdxgen integrations
+### Added
+- `--output-file` flag for `socket fix`
+- `--only-compute` flag for `socket fix`
 
 ## [1.1.9](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.9) - 2025-09-11
 
 ### Added
-- Enhanced `socket fix --id` to accept CVE IDs and PURLs in addition to GHSA IDs
+- `socket fix --id` now accepts CVE IDs and PURLs
 
 ### Fixed
-- Correct SOCKET_CLI_API_TIMEOUT environment variable lookup
-
-## [1.1.8](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.8) - 2025-09-11
-
-### Changed
-- Clearer permission error messages to help resolve access issues
+- SOCKET_CLI_API_TIMEOUT environment variable lookup
 
 ## [1.1.7](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.7) - 2025-09-11
 
 ### Added
-- Control spinner display with new `--no-spinner` flag
-
-### Fixed
-- Enhanced proxy support for flexible network configurations
-
-## [1.1.6](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.6) - 2025-09-10
-
-### Fixed
-- Improved pull request operations with better cache management
-
-## [1.1.5](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.5) - 2025-09-10
+- `--no-spinner` flag
 
 ### Fixed
-- Enhanced reachability analysis spinner for consistent feedback
-- Better working directory control with `--cwd` flag improvements
+- Proxy support
 
 ## [1.1.4](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.4) - 2025-09-09
 
 ### Added
-- Track release changes with CHANGELOG.md
-- Enhanced development workflow with contributor guidance
-- Control scan output detail with `--report-level` flag
+- `--report-level` flag for scan output control
 
 ## [1.1.1](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.1) - 2025-09-04
 
-### Changed
-- Faster command completion with improved tab functionality
-- Smoother user experience with better loading indicators
-
 ### Removed
-- Removed legacy `--test` and `--test-script` flags from `socket fix`
-- Continued cleanup of legacy `socket fix` code
+- Legacy `--test` and `--test-script` flags from `socket fix`
 
 ## [1.1.0](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.0) - 2025-09-03
 
 ### Added
-- See package versions directly in `socket npm` security reports
-
-### Changed
-- Clearer feedback for repeat `socket npm` installations
-- More reliable handling of scan timeouts
-- Streamlined repeat installs by hiding redundant audit info
-
-### Fixed
-- More reliable file system operations
-- Better configuration value handling
-
-### Removed
-- Cleaned up legacy `socket fix` code
+- Package versions in `socket npm` security reports
 
 ## [1.0.111](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.111) - 2025-09-03
 
 ### Added
-- Reimplemented `--range-style` flag for `socket fix`
-
-### Fixed
-- Enhanced CI/CD compatibility for reachability analysis and fixes
-
-## [1.0.110](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.110) - 2025-09-03
-
-### Changed
-- Enhanced reachability analysis and `socket fix` for better output handling
-
-## [1.0.109](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.109) - 2025-09-03
-
-### Changed
-- Improved build environment handling for better compatibility
-
-## [1.0.108](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.108) - 2025-09-03
-
-### Changed
-- Cleaner output from wrapped commands for focused results
-
-## [1.0.107](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.107) - 2025-09-02
-
-### Fixed
-- Restored build stability for reliable deployments
+- `--range-style` flag for `socket fix`
 
 ## [1.0.106](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.106) - 2025-09-02
 
 ### Added
-- Control reachability analysis caching with new `--reach-skip-cache` flag
-
-## [1.0.104](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.104) - 2025-08-29
-
-### Fixed
-- Enhanced security advisory resolution for accurate vulnerability tracking
-
-## [1.0.103](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.103) - 2025-08-29
-
-### Fixed
-- Improved GitHub Security Advisory processing
-
-## [1.0.102](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.102) - 2025-08-29
-
-### Fixed
-- Enhanced command flag processing for better reliability
-
-## [1.0.100](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.100) - 2025-08-29
-
-### Added
-- Richer debugging output for security advisory analysis
-
-## [1.0.96](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.96) - 2025-08-27
-
-### Changed
-- Streamlined organization selection for reachability analysis
+- `--reach-skip-cache` flag
 
 ## [1.0.89](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.89) - 2025-08-15
 
 ### Added
-- Comprehensive manifest scanning with `socket scan create --reach`
+- `socket scan create --reach` for manifest scanning
 
 ## [1.0.85](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.85) - 2025-08-01
 
 ### Added
-- Flexible npm path configuration via `SOCKET_CLI_NPM_PATH` environment variable
+- SOCKET_CLI_NPM_PATH environment variable
 
 ## [1.0.82](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.82) - 2025-07-30
 
 ### Added
-- Memory optimization controls with `--max-old-space-size` and `--max-semi-space-size` flags
-
-## [1.0.80](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.80) - 2025-07-29
-
-### Changed
-- Enhanced file discovery feedback in `socket scan create`
+- `--max-old-space-size` and `--max-semi-space-size` flags
 
 ## [1.0.73](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.73) - 2025-07-14
 
 ### Added
-- Automatic detection of `.socket.facts.json` configuration files
+- Automatic `.socket.facts.json` detection
 
 ## [1.0.69](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.69) - 2025-07-10
 
 ### Added
-- Skip pull request checks with new `--no-pr-check` flag for `socket fix`
-
-## [1.0.10](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.10) - 2025-06-28
-
-### Changed
-- Enhanced performance and reliability across all commands
-
-## [1.0.9](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.9) - 2025-06-28
-
-### Changed
-- Improved stability and command execution speed
-
-## [1.0.8](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.8) - 2025-06-27
-
-### Changed
-- Faster command processing with optimized internals
-
-## [1.0.7](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.7) - 2025-06-25
-
-### Changed
-- Enhanced reliability through improved code quality
-
-## [1.0.6](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.6) - 2025-06-25
-
-### Changed
-- Smoother user experience with targeted improvements
-
-## [1.0.5](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.5) - 2025-06-25
-
-### Changed
-- Faster command execution with performance enhancements
-
-## [1.0.4](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.4) - 2025-06-25
-
-### Changed
-- More stable operations with targeted fixes
-
-## [1.0.3](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.3) - 2025-06-25
-
-### Added
-- Load npm config as part of `socket fix`
-
-## [1.0.2](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.2) - 2025-06-25
-
-### Added
-- Added spinner to reachability scan
-
-## [1.0.1](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.1) - 2025-06-24
-
-### Added
-- Package manager version logging to info
-- Organization persistence when selecting orgs
-
-### Changed
-- Made `socket fix` command reuse implementations for better efficiency
-- Normalized options passed to `socket fix`
-- Improved banner spacing logic
-- Enhanced default org feedback and call-to-action
+- `--no-pr-check` flag for `socket fix`
 
 ## [1.0.0](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.0) - 2025-06-13
 

package/README.md

@@ -1,99 +1,50 @@
-# Socket CLI
+# @socketsecurity/cli-with-sentry
 
-[![Socket Badge](https://socket.dev/api/badge/npm/package/socket)](https://socket.dev/npm/package/socket)
-[![Follow @SocketSecurity](https://img.shields.io/twitter/follow/SocketSecurity?style=social)](https://twitter.com/SocketSecurity)
+Socket CLI with integrated Sentry telemetry for enhanced error reporting and monitoring.
 
-CLI for [Socket.dev] security analysis
+## Overview
 
-## Usage
+This package provides the same functionality as `@socketsecurity/cli` with additional Sentry integration for:
+- Automatic error tracking and reporting
+- Performance monitoring
+- User feedback collection
+- Release tracking
+
+## Installation
 
 ```bash
-npm install -g socket
-socket --help
+npm install -g @socketsecurity/cli-with-sentry
 ```
 
-## Commands
-
-- `socket npm [args...]` and `socket npx [args...]` - Wraps npm/npx with Socket security scanning
-
-- `socket fix` - Fix CVEs in dependencies
-
-- `socket optimize` - Optimize dependencies with [`@socketregistry`](https://github.com/SocketDev/socket-registry) overrides
-
-- `socket cdxgen [command]` - Run [cdxgen](https://cyclonedx.github.io/cdxgen/#/?id=getting-started) for SBOM generation
-
-## Aliases
-
-All aliases support the flags and arguments of the commands they alias.
-
-- `socket ci` - Alias for `socket scan create --report` (creates report and exits with error if unhealthy)
-
-## Flags
-
-### Output flags
-
-- `--json` - Output as JSON
-- `--markdown` - Output as Markdown
-
-### Other flags
-
-- `--dry-run` - Run without uploading
-- `--debug` - Show debug output
-- `--help` - Show help
-- `--max-old-space-size` - Set Node.js memory limit
-- `--max-semi-space-size` - Set Node.js heap size
-- `--version` - Show version
-
-## Configuration files
+## Usage
 
-Socket CLI reads [`socket.yml`](https://docs.socket.dev/docs/socket-yml) configuration files.
-Supports version 2 format with `projectIgnorePaths` for excluding files from reports.
+Use exactly the same as the standard Socket CLI:
 
-## Environment variables
+```bash
+socket scan
+socket npm install express
+socket optimize
+```
 
-- `SOCKET_CLI_API_TOKEN` - Socket API token
-- `SOCKET_CLI_CONFIG` - JSON configuration object
-- `SOCKET_CLI_GITHUB_API_URL` - GitHub API base URL
-- `SOCKET_CLI_GIT_USER_EMAIL` - Git user email (default: `github-actions[bot]@users.noreply.github.com`)
-- `SOCKET_CLI_GIT_USER_NAME` - Git user name (default: `github-actions[bot]`)
-- `SOCKET_CLI_GITHUB_TOKEN` - GitHub token with repo access (alias: `GITHUB_TOKEN`)
-- `SOCKET_CLI_NO_API_TOKEN` - Disable default API token
-- `SOCKET_CLI_NPM_PATH` - Path to npm directory
-- `SOCKET_CLI_ORG_SLUG` - Socket organization slug
-- `SOCKET_CLI_ACCEPT_RISKS` - Accept npm/npx risks
-- `SOCKET_CLI_VIEW_ALL_RISKS` - Show all npm/npx risks
+## Telemetry
 
-## Contributing
+This package includes Sentry telemetry to help improve Socket CLI. The following data is collected:
 
-Run locally:
+- Error messages and stack traces
+- Performance metrics
+- CLI command usage (anonymized)
+- Node.js and OS version information
 
-```
-npm install
-npm run build
-npm exec socket
-```
+**No sensitive data** (API tokens, file contents, package names) is collected.
 
-### Development environment variables
+## Differences from @socketsecurity/cli
 
-- `SOCKET_CLI_API_BASE_URL` - API base URL (default: `https://api.socket.dev/v0/`)
-- `SOCKET_CLI_API_PROXY` - Proxy for API requests (aliases: `HTTPS_PROXY`, `https_proxy`, `HTTP_PROXY`, `http_proxy`)
-- `SOCKET_CLI_API_TIMEOUT` - API request timeout in milliseconds
-- `SOCKET_CLI_DEBUG` - Enable debug logging
-- `DEBUG` - Enable [`debug`](https://socket.dev/npm/package/debug) package logging
+The only difference is the inclusion of Sentry SDK and automatic error reporting. All CLI functionality remains identical.
 
-## See also
+## Documentation
 
-- [Socket API Reference](https://docs.socket.dev/reference)
-- [Socket GitHub App](https://github.com/apps/socket-security)
-- [`@socketsecurity/sdk`](https://github.com/SocketDev/socket-sdk-js)
+See main Socket CLI documentation: https://docs.socket.dev/
 
-[Socket.dev]: https://socket.dev/
+## License
 
-<br/>
-<div align="center">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="logo-dark.png">
-    <source media="(prefers-color-scheme: light)" srcset="logo-light.png">
-    <img width="324" height="108" alt="Socket Logo" src="logo-light.png">
-  </picture>
-</div>
+MIT

package/dist/cli.js.bz.sha256

@@ -0,0 +1 @@
+6e66820192ce87bd08f9254f373008787a4c1c93eb86d34e33d626e21242d1c7  cli.js.bz

package/dist/index.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+"use strict";var{mkdirSync:o,readFileSync:s,unlinkSync:l,writeFileSync:d}=require("node:fs"),t=require("node:module"),n=require("node:path"),{brotliDecompressSync:u}=require("node:zlib"),a=n.join(__dirname,"cli.js.bz"),c=n.join(__dirname,"..","build"),m=s(a),r=u(m);o(c,{recursive:!0});var e=n.join(c,`cli-runtime-${process.pid}.js`);d(e,r);try{let i=new t(e,module.parent);i.filename=e,i.paths=t._nodeModulePaths(__dirname),i._compile(r.toString("utf-8"),e)}finally{try{l(e)}catch{}}