@socketsecurity/cli 0.14.104 → 0.14.106

package/dist/require/cli.js

@@ -602,6 +602,8 @@ const commonFlags = {
   dryRun: {
     type: 'boolean',
     default: false,
+    hidden: true,
+    // Only show in root command
     description: 'Do input validation for a command and exit 0 when input is ok'
   },
   help: {
@@ -739,6 +741,21 @@ async function meowWithSubcommands(subcommands, options) {
     ...commonFlags,
     ...additionalOptions.flags
   }
+
+  // No further args or first arg is a flag (shrug)
+  if (
+    name === 'socket' &&
+    (!commandOrAliasName || commandOrAliasName?.startsWith('-'))
+  ) {
+    flags['dryRun'] = {
+      type: 'boolean',
+      default: false,
+      hidden: false,
+      // Only show on root
+      description:
+        'Do input validation for a command and exit 0 when input is ok. Every command should support this flag (not shown on help screens)'
+    }
+  }
   const cli = vendor.meow(
     `
     Usage
@@ -900,7 +917,7 @@ function emitBanner(name) {
   logger.logger.error(getAsciiHeader(name))
 }
 function getAsciiHeader(command) {
-  const cliVersion = '0.14.104:da4a527:c0794558:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
+  const cliVersion = '0.14.106:968fc98:25a28d7a:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
   const nodeVersion = process$1.version
   const apiToken = shadowNpmInject.getDefaultToken()
   const shownToken = apiToken ? getLastFiveOfApiToken(apiToken) : 'no'
@@ -923,8 +940,8 @@ function getAsciiHeader(command) {
   return `   ${body}\n`
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$I } = constants
-const config$L = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$J } = constants
+const config$M = {
   commandName: 'analytics',
   description: `Look up analytics data`,
   hidden: false,
@@ -979,14 +996,14 @@ const config$L = {
   `
 }
 const cmdAnalytics = {
-  description: config$L.description,
-  hidden: config$L.hidden,
-  run: run$L
+  description: config$M.description,
+  hidden: config$M.hidden,
+  run: run$M
 }
-async function run$L(argv, importMeta, { parentName }) {
+async function run$M(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$L,
+    config: config$M,
     importMeta,
     parentName
   })
@@ -1041,7 +1058,7 @@ async function run$L(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$I)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$J)
     return
   }
   assert(assertScope(scope))
@@ -1216,8 +1233,8 @@ async function handleAuditLog({ logType, orgSlug, outputKind, page, perPage }) {
   })
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$H } = constants
-const config$K = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$I } = constants
+const config$L = {
   commandName: 'audit-log',
   description: 'Look up the audit log for an organization',
   hidden: false,
@@ -1262,14 +1279,14 @@ const config$K = {
   `
 }
 const cmdAuditLog = {
-  description: config$K.description,
-  hidden: config$K.hidden,
-  run: run$K
+  description: config$L.description,
+  hidden: config$L.hidden,
+  run: run$L
 }
-async function run$K(argv, importMeta, { parentName }) {
+async function run$L(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$K,
+    config: config$L,
     importMeta,
     parentName
   })
@@ -1306,7 +1323,7 @@ async function run$K(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$H)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$I)
     return
   }
   await handleAuditLog({
@@ -1436,7 +1453,7 @@ function isHelpFlag(cmdArg) {
 }
 
 // import { meowOrExit } from '../../utils/meow-with-subcommands'
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$G } = constants
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$H } = constants
 
 // TODO: convert yargs to meow. Or convert all the other things to yargs.
 const toLower = arg => arg.toLowerCase()
@@ -1552,7 +1569,7 @@ const yargsConfig = {
     'spec-version'
   ]
 }
-const config$J = {
+const config$K = {
   commandName: 'cdxgen',
   description: 'Create an SBOM with CycloneDX generator (cdxgen)',
   hidden: false,
@@ -1568,16 +1585,16 @@ const config$J = {
   `
 }
 const cmdCdxgen = {
-  description: config$J.description,
-  hidden: config$J.hidden,
-  run: run$J
+  description: config$K.description,
+  hidden: config$K.hidden,
+  run: run$K
 }
-async function run$J(argv, importMeta, { parentName }) {
+async function run$K(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     allowUnknownFlags: true,
     // Don't let meow take over --help.
     argv: argv.filter(a => !isHelpFlag(a)),
-    config: config$J,
+    config: config$K,
     importMeta,
     parentName
   })
@@ -1599,7 +1616,7 @@ async function run$J(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$G)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$H)
     return
   }
   if (yargv.output === undefined) {
@@ -2447,8 +2464,8 @@ async function handleCI() {
   })
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$F } = constants
-const config$I = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$G } = constants
+const config$J = {
   commandName: 'ci',
   description:
     'Create a new scan and report whether it passes your security policy',
@@ -2468,19 +2485,19 @@ const config$I = {
   `
 }
 const cmdCI = {
-  description: config$I.description,
-  hidden: config$I.hidden,
-  run: run$I
+  description: config$J.description,
+  hidden: config$J.hidden,
+  run: run$J
 }
-async function run$I(argv, importMeta, { parentName }) {
+async function run$J(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$I,
+    config: config$J,
     importMeta,
     parentName
   })
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$F)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$G)
     return
   }
   await handleCI()
@@ -2727,8 +2744,8 @@ async function handleConfigAuto({ key, outputKind }) {
   await outputConfigAuto(key, result, outputKind)
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$E } = constants
-const config$H = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$F } = constants
+const config$I = {
   commandName: 'auto',
   description: 'Automatically discover and set the correct value config item',
   hidden: false,
@@ -2759,14 +2776,14 @@ ${Array.from(shadowNpmInject.supportedConfigKeys.entries())
   `
 }
 const cmdConfigAuto = {
-  description: config$H.description,
-  hidden: config$H.hidden,
-  run: run$H
+  description: config$I.description,
+  hidden: config$I.hidden,
+  run: run$I
 }
-async function run$H(argv, importMeta, { parentName }) {
+async function run$I(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$H,
+    config: config$I,
     importMeta,
     parentName
   })
@@ -2792,7 +2809,7 @@ async function run$H(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$E)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$F)
     return
   }
   await handleConfigAuto({
@@ -2846,8 +2863,8 @@ async function handleConfigGet({ key, outputKind }) {
   await outputConfigGet(key, value, readOnly, outputKind)
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$D } = constants
-const config$G = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$E } = constants
+const config$H = {
   commandName: 'get',
   description: 'Get the value of a local CLI config item',
   hidden: false,
@@ -2873,14 +2890,14 @@ ${Array.from(shadowNpmInject.supportedConfigKeys.entries())
   `
 }
 const cmdConfigGet = {
-  description: config$G.description,
-  hidden: config$G.hidden,
-  run: run$G
+  description: config$H.description,
+  hidden: config$H.hidden,
+  run: run$H
 }
-async function run$G(argv, importMeta, { parentName }) {
+async function run$H(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$G,
+    config: config$H,
     importMeta,
     parentName
   })
@@ -2906,7 +2923,7 @@ async function run$G(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$D)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$E)
     return
   }
   await handleConfigGet({
@@ -2968,8 +2985,8 @@ async function outputConfigList({ full, outputKind }) {
   }
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$C } = constants
-const config$F = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$D } = constants
+const config$G = {
   commandName: 'list',
   description: 'Show all local CLI config items and their values',
   hidden: false,
@@ -3000,14 +3017,14 @@ ${Array.from(shadowNpmInject.supportedConfigKeys.entries())
   `
 }
 const cmdConfigList = {
-  description: config$F.description,
-  hidden: config$F.hidden,
-  run: run$F
+  description: config$G.description,
+  hidden: config$G.hidden,
+  run: run$G
 }
-async function run$F(argv, importMeta, { parentName }) {
+async function run$G(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$F,
+    config: config$G,
     importMeta,
     parentName
   })
@@ -3024,7 +3041,7 @@ async function run$F(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$C)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$D)
     return
   }
   await outputConfigList({
@@ -3069,8 +3086,8 @@ async function handleConfigSet({ key, outputKind, value }) {
   await outputConfigSet(key, value, readOnly, outputKind)
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$B } = constants
-const config$E = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$C } = constants
+const config$F = {
   commandName: 'set',
   description: 'Update the value of a local CLI config item',
   hidden: false,
@@ -3101,14 +3118,14 @@ ${Array.from(shadowNpmInject.supportedConfigKeys.entries())
   `
 }
 const cmdConfigSet = {
-  description: config$E.description,
-  hidden: config$E.hidden,
-  run: run$E
+  description: config$F.description,
+  hidden: config$F.hidden,
+  run: run$F
 }
-async function run$E(argv, importMeta, { parentName }) {
+async function run$F(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$E,
+    config: config$F,
     importMeta,
     parentName
   })
@@ -3143,7 +3160,7 @@ async function run$E(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$B)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$C)
     return
   }
   await handleConfigSet({
@@ -3175,8 +3192,8 @@ async function handleConfigUnset({ key, outputKind }) {
   await outputConfigUnset(key, outputKind)
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$A } = constants
-const config$D = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$B } = constants
+const config$E = {
   commandName: 'unset',
   description: 'Clear the value of a local CLI config item',
   hidden: false,
@@ -3202,14 +3219,14 @@ ${Array.from(shadowNpmInject.supportedConfigKeys.entries())
   `
 }
 const cmdConfigUnset = {
-  description: config$D.description,
-  hidden: config$D.hidden,
-  run: run$D
+  description: config$E.description,
+  hidden: config$E.hidden,
+  run: run$E
 }
-async function run$D(argv, importMeta, { parentName }) {
+async function run$E(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$D,
+    config: config$E,
     importMeta,
     parentName
   })
@@ -3235,7 +3252,7 @@ async function run$D(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$A)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$B)
     return
   }
   await handleConfigUnset({
@@ -3362,8 +3379,8 @@ async function handleDependencies({ limit, offset, outputKind }) {
   })
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$z } = constants
-const config$C = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$A } = constants
+const config$D = {
   commandName: 'dependencies',
   description:
     'Search for any dependency that is being used in your organization',
@@ -3400,14 +3417,14 @@ const config$C = {
   `
 }
 const cmdScanCreate$1 = {
-  description: config$C.description,
-  hidden: config$C.hidden,
-  run: run$C
+  description: config$D.description,
+  hidden: config$D.hidden,
+  run: run$D
 }
-async function run$C(argv, importMeta, { parentName }) {
+async function run$D(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$C,
+    config: config$D,
     importMeta,
     parentName
   })
@@ -3435,7 +3452,7 @@ async function run$C(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$z)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$A)
     return
   }
   await handleDependencies({
@@ -3549,8 +3566,8 @@ async function handleDiffScan$1({
   })
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$y } = constants
-const config$B = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$z } = constants
+const config$C = {
   commandName: 'get',
   description: 'Get a diff scan for an organization',
   hidden: false,
@@ -3609,14 +3626,14 @@ const config$B = {
   `
 }
 const cmdDiffScanGet = {
-  description: config$B.description,
-  hidden: config$B.hidden,
-  run: run$B
+  description: config$C.description,
+  hidden: config$C.hidden,
+  run: run$C
 }
-async function run$B(argv, importMeta, { parentName }) {
+async function run$C(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$B,
+    config: config$C,
     importMeta,
     parentName
   })
@@ -3668,7 +3685,7 @@ async function run$B(argv, importMeta, { parentName }) {
     'Warning: this command is deprecated in favor of `socket scan diff` and will be removed in the next major bump.'
   )
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$y)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$z)
     return
   }
   await handleDiffScan$1({
@@ -3798,9 +3815,17 @@ async function gitCreateAndPushBranchIfNeeded(
   await spawn.spawn('git', ['checkout', '-b', branch], {
     cwd
   })
-  await spawn.spawn('git', ['add', 'package.json', 'pnpm-lock.yaml'], {
-    cwd
-  })
+  const relFilepaths = await vendor.distExports.glob(
+    '**/{package.json,package-lock.json,pnpm-lock.yaml}',
+    {
+      cwd
+    }
+  )
+  if (relFilepaths.length) {
+    await spawn.spawn('git', ['add', ...relFilepaths], {
+      cwd
+    })
+  }
   await spawn.spawn('git', ['commit', '-m', commitMsg], {
     cwd
   })
@@ -4088,19 +4113,6 @@ async function npmFix(
           )
           const newSpec = `${name}@${newVersionRange}`
           const newSpecKey = `${workspaceName ? `${workspaceName}>` : ''}${newSpec}`
-          const branch = isCi
-            ? getSocketBranchName(oldPurl, newVersion, workspaceName)
-            : ''
-          const { owner, repo } = isCi
-            ? getGitHubEnvRepoInfo()
-            : {
-                owner: '',
-                repo: ''
-              }
-          const shouldOpenPr = isCi
-            ? // eslint-disable-next-line no-await-in-loop
-              !(await doesPullRequestExistForBranch(owner, repo, branch))
-            : false
           const revertData = {
             ...(editablePkgJson.content.dependencies
               ? {
@@ -4119,30 +4131,45 @@ async function npmFix(
                 }
               : undefined)
           }
-          if (!installedSpecs.has(newSpecKey)) {
-            testedSpecs.add(newSpecKey)
-            spinner?.info(`Installing ${newSpec}${workspaceDetails}`)
+          const branch = isCi
+            ? getSocketBranchName(oldPurl, newVersion, workspaceName)
+            : ''
+          const baseBranch = isCi ? getBaseGitBranch() : ''
+          const { owner, repo } = isCi
+            ? getGitHubEnvRepoInfo()
+            : {
+                owner: '',
+                repo: ''
+              }
+          const shouldOpenPr = isCi
+            ? // eslint-disable-next-line no-await-in-loop
+              !(await doesPullRequestExistForBranch(owner, repo, branch))
+            : false
+          if (isCi) {
+            // eslint-disable-next-line no-await-in-loop
+            await gitCheckoutBaseBranchIfAvailable(baseBranch, cwd)
           }
-          const baseBranch = getBaseGitBranch()
-
-          // eslint-disable-next-line no-await-in-loop
-          await gitCheckoutBaseBranchIfAvailable(baseBranch, cwd)
+          shadowNpmInject.updatePackageJsonFromNode(
+            editablePkgJson,
+            arb.idealTree,
+            node,
+            newVersion,
+            rangeStyle
+          )
           let error
           let errored = false
           let installed = false
           let saved = false
+
+          // eslint-disable-next-line no-await-in-loop
+          if (await editablePkgJson.save()) {
+            saved = true
+          }
+          if (!installedSpecs.has(newSpecKey)) {
+            testedSpecs.add(newSpecKey)
+            spinner?.info(`Installing ${newSpec}${workspaceDetails}`)
+          }
           try {
-            shadowNpmInject.updatePackageJsonFromNode(
-              editablePkgJson,
-              arb.idealTree,
-              node,
-              newVersion,
-              rangeStyle
-            )
-            // eslint-disable-next-line no-await-in-loop
-            if (await editablePkgJson.save()) {
-              saved = true
-            }
             // eslint-disable-next-line no-await-in-loop
             await install$1(arb.idealTree, {
               cwd
@@ -4509,20 +4536,6 @@ async function pnpmFix(
           )
           const newSpec = `${name}@${newVersionRange}`
           const newSpecKey = `${workspaceName ? `${workspaceName}>` : ''}${newSpec}`
-          const branch = isCi
-            ? getSocketBranchName(oldPurl, newVersion, workspaceName)
-            : ''
-          const baseBranch = isCi ? getBaseGitBranch() : ''
-          const { owner, repo } = isCi
-            ? getGitHubEnvRepoInfo()
-            : {
-                owner: '',
-                repo: ''
-              }
-          const shouldOpenPr = isCi
-            ? // eslint-disable-next-line no-await-in-loop
-              !(await doesPullRequestExistForBranch(owner, repo, branch))
-            : false
           const updateData = isWorkspaceRoot
             ? {
                 [PNPM$8]: {
@@ -4533,7 +4546,7 @@ async function pnpmFix(
                   }
                 }
               }
-            : {}
+            : undefined
           const revertData = {
             ...(isWorkspaceRoot
               ? {
@@ -4568,32 +4581,47 @@ async function pnpmFix(
                 }
               : undefined)
           }
+          const branch = isCi
+            ? getSocketBranchName(oldPurl, newVersion, workspaceName)
+            : ''
+          const baseBranch = isCi ? getBaseGitBranch() : ''
+          const { owner, repo } = isCi
+            ? getGitHubEnvRepoInfo()
+            : {
+                owner: '',
+                repo: ''
+              }
+          const shouldOpenPr = isCi
+            ? // eslint-disable-next-line no-await-in-loop
+              !(await doesPullRequestExistForBranch(owner, repo, branch))
+            : false
+          if (isCi) {
+            // eslint-disable-next-line no-await-in-loop
+            await gitCheckoutBaseBranchIfAvailable(baseBranch, cwd)
+          }
+          if (updateData) {
+            editablePkgJson.update(updateData)
+          }
+          shadowNpmInject.updatePackageJsonFromNode(
+            editablePkgJson,
+            actualTree,
+            node,
+            newVersion,
+            rangeStyle
+          )
+          let error
+          let errored = false
+          let installed = false
+
+          // eslint-disable-next-line no-await-in-loop
+          if (!(await editablePkgJson.save())) {
+            continue
+          }
           if (!installedSpecs.has(newSpecKey)) {
             installedSpecs.add(newSpecKey)
             spinner?.info(`Installing ${newSpec}${workspaceDetails}`)
           }
-          if (isCi) {
-            // eslint-disable-next-line no-await-in-loop
-            await gitCheckoutBaseBranchIfAvailable(baseBranch, cwd)
-          }
-          let error
-          let errored = false
-          let installed = false
-          let saved = false
           try {
-            editablePkgJson.update(updateData)
-            shadowNpmInject.updatePackageJsonFromNode(
-              editablePkgJson,
-              actualTree,
-              node,
-              newVersion,
-              rangeStyle
-            )
-            // eslint-disable-next-line no-await-in-loop
-            if (!(await editablePkgJson.save())) {
-              continue
-            }
-            saved = true
             // eslint-disable-next-line no-await-in-loop
             actualTree = await install(pkgEnvDetails, {
               spinner
@@ -4651,21 +4679,15 @@ async function pnpmFix(
                 spinner?.error(`Reverting ${newSpec}${workspaceDetails}`, error)
               }
             }
+            editablePkgJson.update(revertData)
             if (isRepo) {
               // eslint-disable-next-line no-await-in-loop
               await gitHardReset(cwd)
-            }
-            if (saved) {
-              editablePkgJson.update(revertData)
-              if (!isRepo) {
-                // eslint-disable-next-line no-await-in-loop
-                await editablePkgJson.save()
-              }
-            }
-            if (isRepo) {
               // eslint-disable-next-line no-await-in-loop
               actualTree = await getActualTree(cwd)
             } else if (installed) {
+              // eslint-disable-next-line no-await-in-loop
+              await editablePkgJson.save()
               // eslint-disable-next-line no-await-in-loop
               actualTree = await install(pkgEnvDetails, {
                 spinner
@@ -4857,11 +4879,12 @@ async function detectPackageEnvironment({
         editable: true
       })
     : undefined
-  const pkgJson = editablePkgJson?.content
   // Read Corepack `packageManager` field in package.json:
   // https://nodejs.org/api/packages.html#packagemanager
-  const pkgManager = strings.isNonEmptyString(pkgJson?.packageManager)
-    ? pkgJson.packageManager
+  const pkgManager = strings.isNonEmptyString(
+    editablePkgJson?.content?.packageManager
+  )
+    ? editablePkgJson.content.packageManager
     : undefined
   let agent
   let agentVersion
@@ -4909,8 +4932,8 @@ async function detectPackageEnvironment({
   let pkgNodeRange
   let pkgMinAgentVersion = minSupportedAgentVersion
   let pkgMinNodeVersion = minSupportedNodeVersion
-  if (pkgJson) {
-    const { engines } = pkgJson
+  if (editablePkgJson?.content) {
+    const { engines } = editablePkgJson.content
     const engineAgentRange = engines?.[agent]
     const engineNodeRange = engines?.['node']
     if (strings.isNonEmptyString(engineAgentRange)) {
@@ -4931,7 +4954,7 @@ async function detectPackageEnvironment({
         pkgMinNodeVersion = coerced.version
       }
     }
-    const browserslistQuery = pkgJson['browserslist']
+    const browserslistQuery = editablePkgJson.content['browserslist']
     if (Array.isArray(browserslistQuery)) {
       // List Node targets in ascending version order.
       const browserslistNodeTargets = vendor
@@ -5132,8 +5155,8 @@ async function runFix(options_) {
   }
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$x } = constants
-const config$A = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$y } = constants
+const config$B = {
   commandName: 'fix',
   description: 'Fix "fixable" Socket alerts',
   hidden: true,
@@ -5190,14 +5213,14 @@ const config$A = {
   `
 }
 const cmdFix = {
-  description: config$A.description,
-  hidden: config$A.hidden,
-  run: run$A
+  description: config$B.description,
+  hidden: config$B.hidden,
+  run: run$B
 }
-async function run$A(argv, importMeta, { parentName }) {
+async function run$B(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$A,
+    config: config$B,
     importMeta,
     parentName
   })
@@ -5211,7 +5234,7 @@ async function run$A(argv, importMeta, { parentName }) {
     return
   }
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$x)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$y)
     return
   }
 
@@ -5414,8 +5437,8 @@ async function handlePackageInfo({
   }
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$w } = constants
-const config$z = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$x } = constants
+const config$A = {
   commandName: 'info',
   description: 'Look up info regarding a package',
   hidden: true,
@@ -5440,14 +5463,14 @@ const config$z = {
   `
 }
 const cmdInfo = {
-  description: config$z.description,
-  hidden: config$z.hidden,
-  run: run$z
+  description: config$A.description,
+  hidden: config$A.hidden,
+  run: run$A
 }
-async function run$z(argv, importMeta, { parentName }) {
+async function run$A(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$z,
+    config: config$A,
     importMeta,
     parentName
   })
@@ -5485,11 +5508,11 @@ async function run$z(argv, importMeta, { parentName }) {
   const pkgVersion =
     versionSeparator < 1 ? 'latest' : rawPkgName.slice(versionSeparator + 1)
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$w)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$x)
     return
   }
   await handlePackageInfo({
-    commandName: `${parentName} ${config$z.commandName}`,
+    commandName: `${parentName} ${config$A.commandName}`,
     includeAllIssues: Boolean(all),
     outputKind: json ? 'json' : markdown ? 'markdown' : 'print',
     pkgName,
@@ -5576,8 +5599,8 @@ async function attemptLogin(apiBaseUrl, apiProxy) {
   }
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$v } = constants
-const config$y = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$w } = constants
+const config$z = {
   commandName: 'login',
   description: 'Socket API login',
   hidden: false,
@@ -5610,21 +5633,21 @@ const config$y = {
   `
 }
 const cmdLogin = {
-  description: config$y.description,
-  hidden: config$y.hidden,
-  run: run$y
+  description: config$z.description,
+  hidden: config$z.hidden,
+  run: run$z
 }
-async function run$y(argv, importMeta, { parentName }) {
+async function run$z(argv, importMeta, { parentName }) {
   const cli = meowOrExit({
     argv,
-    config: config$y,
+    config: config$z,
     importMeta,
     parentName
   })
   const apiBaseUrl = cli.flags['apiBaseUrl']
   const apiProxy = cli.flags['apiProxy']
   if (cli.flags['dryRun']) {
-    logger.logger.log(DRY_RUN_BAIL_TEXT$v)
+    logger.logger.log(DRY_RUN_BAIL_TEXT$w)
     return
   }
   if (!isInteractive()) {
@@ -5657,8 +5680,8 @@ function attemptLogout() {
   }
 }
 
-const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$u } = constants
-const config$x = {
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$v } = constants
+const config$y = {
   commandName: 'logout',
   description: 'Socket API logout',
   hidden: false,
@@ -5673,6 +5696,247 @@ const config$x = {
   `
 }
 const cmdLogout = {
+  description: config$y.description,
+  hidden: config$y.hidden,
+  run: run$y
+}
+async function run$y(argv, importMeta, { parentName }) {
+  const cli = meowOrExit({
+    argv,
+    config: config$y,
+    importMeta,
+    parentName
+  })
+  if (cli.flags['dryRun']) {
+    logger.logger.log(DRY_RUN_BAIL_TEXT$v)
+    return
+  }
+  attemptLogout()
+}
+
+async function convertCondaToRequirements(target, cwd, verbose) {
+  let contents
+  if (target === '-') {
+    if (verbose) {
+      logger.logger.error(`[VERBOSE] reading input from stdin`)
+    }
+    const buf = []
+    contents = await new Promise((resolve, reject) => {
+      process.stdin.on('data', chunk => {
+        const input = chunk.toString()
+        buf.push(input)
+      })
+      process.stdin.on('end', () => {
+        resolve(buf.join(''))
+      })
+      process.stdin.on('error', e => {
+        if (verbose) {
+          logger.logger.error('Unexpected error while reading from stdin:', e)
+        }
+        reject(e)
+      })
+      process.stdin.on('close', () => {
+        if (buf.length === 0) {
+          if (verbose) {
+            logger.logger.error('stdin closed explicitly without data received')
+          }
+          reject(new Error('No data received from stdin'))
+        } else {
+          if (verbose) {
+            logger.logger.error(
+              'warning: stdin closed explicitly with some data received'
+            )
+          }
+          resolve(buf.join(''))
+        }
+      })
+    })
+    if (!contents) {
+      return {
+        ok: false,
+        message: 'No data received from stdin',
+        data: undefined
+      }
+    }
+  } else {
+    const f = path$1.resolve(cwd, target)
+    if (verbose) {
+      logger.logger.error(`[VERBOSE] target file: ${f}`)
+    }
+    if (!fs$1.existsSync(f)) {
+      return {
+        ok: false,
+        message: `Input file not found at ${f}`,
+        data: undefined
+      }
+    }
+    contents = fs$1.readFileSync(target, 'utf8')
+    if (!contents) {
+      return {
+        ok: false,
+        message: 'File is empty',
+        data: undefined
+      }
+    }
+  }
+  return {
+    ok: true,
+    message: '',
+    data: {
+      contents,
+      pip: convertCondaToRequirementsFromInput(contents)
+    }
+  }
+}
+
+// Just extract the first pip block, if one exists at all.
+function convertCondaToRequirementsFromInput(input) {
+  const keeping = []
+  let collecting = false
+  let delim = '-'
+  let indent = ''
+  input.split('\n').some(line => {
+    if (!line) {
+      // Ignore empty lines
+      return
+    }
+    if (collecting) {
+      if (line.startsWith('#')) {
+        // Ignore comment lines (keep?)
+        return
+      }
+      if (line.startsWith(delim)) {
+        // In this case we have a line with the same indentation as the
+        // `- pip:` line, so we have reached the end of the pip block.
+        return true // the end
+      } else {
+        if (!indent) {
+          // Store the indentation of the block
+          if (line.trim().startsWith('-')) {
+            indent = line.split('-')[0] + '-'
+            if (indent.length <= delim.length) {
+              // The first line after the `pip:` line does not indent further
+              // than that so the block is empty?
+              return true
+            }
+          }
+        }
+        if (line.startsWith(indent)) {
+          keeping.push(line.slice(indent.length).trim())
+        } else {
+          // Unexpected input. bail.
+          return true
+        }
+      }
+    } else {
+      // Note: the line may end with a line comment so don't === it.
+      if (line.trim().startsWith('- pip:')) {
+        delim = line.split('-')[0] + '-'
+        collecting = true
+      }
+    }
+  })
+  return keeping.join('\n')
+}
+
+async function outputRequirements(data, outputKind, out) {
+  if (outputKind === 'json') {
+    const json = JSON.stringify(
+      {
+        ok: true,
+        data: {
+          pip: data.pip
+        }
+      },
+      undefined,
+      2
+    )
+    if (out === '-') {
+      logger.logger.log(json)
+    } else {
+      fs$1.writeFileSync(out, json, 'utf8')
+    }
+    return
+  }
+  if (outputKind === 'markdown') {
+    const arr = []
+    arr.push('# Converted Conda file')
+    arr.push('')
+    arr.push(
+      'This is the Conda `environment.yml` file converted to python `requirements.txt`:'
+    )
+    arr.push('')
+    arr.push('```file=requirements.txt')
+    arr.push(data.pip)
+    arr.push('```')
+    arr.push('')
+    const md = arr.join('\n')
+    if (out === '-') {
+      logger.logger.log(md)
+    } else {
+      fs$1.writeFileSync(out, md, 'utf8')
+    }
+    return
+  }
+  if (out === '-') {
+    logger.logger.log(data.pip)
+    logger.logger.log('')
+  } else {
+    fs$1.writeFileSync(out, data.pip, 'utf8')
+  }
+}
+
+async function handleManifestConda(target, out, outputKind, cwd, verbose) {
+  const data = await convertCondaToRequirements(target, cwd, verbose)
+  if (!data) {
+    return
+  }
+  if (!data.ok) {
+    logger.logger.fail(data.message)
+    return
+  }
+  await outputRequirements(data.data, outputKind, out)
+}
+
+const { DRY_RUN_BAIL_TEXT: DRY_RUN_BAIL_TEXT$u } = constants
+const config$x = {
+  commandName: 'conda',
+  description:
+    '[beta] Convert a Conda environment.yml file to a python requirements.txt',
+  hidden: false,
+  flags: {
+    ...commonFlags,
+    ...outputFlags,
+    cwd: {
+      type: 'string',
+      description: 'Set the cwd, defaults to process.cwd()'
+    },
+    out: {
+      type: 'string',
+      default: '-',
+      description: 'Output target (use `-` or omit to print to stdout)'
+    },
+    verbose: {
+      type: 'boolean',
+      description: 'Print debug messages'
+    }
+  },
+  help: (command, config) => `
+    Usage
+      $ ${command} FILE
+
+    Note: FILE can be a dash (-) to indicate stdin. This way you can pipe the
+          contents of a file to have it processed.
+
+    Options
+      ${getFlagListOutput(config.flags, 6)}
+
+    Examples
+
+      $ ${command} ./environment.yml
+  `
+}
+const cmdManifestConda = {
   description: config$x.description,
   hidden: config$x.hidden,
   run: run$x
@@ -5684,11 +5948,59 @@ async function run$x(argv, importMeta, { parentName }) {
     importMeta,
     parentName
   })
+  const {
+    cwd = process.cwd(),
+    json = false,
+    markdown = false,
+    out = '-',
+    verbose = false
+  } = cli.flags
+  const [target = ''] = cli.input
+  if (verbose) {
+    logger.logger.group('- ', parentName, config$x.commandName, ':')
+    logger.logger.group('- flags:', cli.flags)
+    logger.logger.groupEnd()
+    logger.logger.log('- target:', target)
+    logger.logger.log('- output:', out)
+    logger.logger.groupEnd()
+  }
+  const wasBadInput = handleBadInput(
+    {
+      test: !!target,
+      message: 'The FILE arg is required',
+      pass: 'ok',
+      fail: 'missing'
+    },
+    {
+      nook: true,
+      test: cli.input.length <= 1,
+      message: 'Can only accept one DIR (make sure to escape spaces!)',
+      pass: 'ok',
+      fail: 'received ' + cli.input.length
+    },
+    {
+      nook: true,
+      test: !json || !markdown,
+      message:
+        'The `--json` and `--markdown` flags can not be used at the same time',
+      pass: 'ok',
+      fail: 'bad'
+    }
+  )
+  if (wasBadInput) {
+    return
+  }
   if (cli.flags['dryRun']) {
     logger.logger.log(DRY_RUN_BAIL_TEXT$u)
     return
   }
-  attemptLogout()
+  await handleManifestConda(
+    target,
+    String(out || ''),
+    json ? 'json' : markdown ? 'markdown' : 'text',
+    String(cwd),
+    Boolean(verbose)
+  )
 }
 
 async function convertGradleToMaven(target, bin, cwd, verbose, gradleOpts) {
@@ -6294,6 +6606,25 @@ async function run$u(argv, importMeta, { parentName }) {
     })
     return
   }
+  const envyml = path$1.join(dir, 'environment.yml')
+  const hasEnvyml = fs$1.existsSync(envyml)
+  const envyaml = path$1.join(dir, 'environment.yaml')
+  const hasEnvyaml = !hasEnvyml && fs$1.existsSync(envyaml)
+  if (hasEnvyml || hasEnvyaml) {
+    logger.logger.log(
+      'Detected an environment.yml file, running default Conda generator...'
+    )
+    // This command takes the TARGET as first arg.
+    subArgs.push(hasEnvyml ? envyml : hasEnvyaml ? envyaml : '')
+    if (cli.flags['dryRun']) {
+      logger.logger.log(DRY_RUN_BAIL_TEXT$r)
+      return
+    }
+    await cmdManifestConda.run(subArgs, importMeta, {
+      parentName
+    })
+    return
+  }
   if (cli.flags['dryRun']) {
     logger.logger.log(DRY_RUN_BAIL_TEXT$r)
     return
@@ -6484,6 +6815,7 @@ async function run$s(argv, importMeta, { parentName }) {
   await meowWithSubcommands(
     {
       auto: cmdManifestAuto,
+      conda: cmdManifestConda,
       scala: cmdManifestScala,
       gradle: cmdManifestGradle,
       kotlin: cmdManifestKotlin
@@ -9927,11 +10259,6 @@ const config$8 = {
       description:
         'Set the default branch of the repository to the branch of this full-scan. Should only need to be done once, for example for the "main" or "master" branch.'
     },
-    dryRun: {
-      type: 'boolean',
-      description:
-        'Run input validation part of command without any concrete side effects'
-    },
     pendingHead: {
       type: 'boolean',
       default: true,
@@ -11936,7 +12263,7 @@ void (async () => {
   await vendor.updater({
     name: SOCKET_CLI_BIN_NAME,
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
-    version: '0.14.104',
+    version: '0.14.106',
     ttl: 86_400_000 /* 24 hours in milliseconds */
   })
   try {
@@ -12004,5 +12331,5 @@ void (async () => {
     await shadowNpmInject.captureException(e)
   }
 })()
-//# debugId=35cb6fe4-28c3-408a-9222-5359160941e5
+//# debugId=1552d26d-87c3-4aa3-acbf-2a7c3d0deb6e
 //# sourceMappingURL=cli.js.map