@socketsecurity/cli 0.14.131 → 0.14.133
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +3 -3
- package/dist/cli.js.map +1 -1
- package/dist/shadow-npm-inject.js +17 -7
- package/dist/shadow-npm-inject.js.map +1 -1
- package/package.json +1 -1
|
@@ -662,7 +662,7 @@ async function setupSdk(
|
|
|
662
662
|
// The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_NAME']".
|
|
663
663
|
name: 'socket',
|
|
664
664
|
// The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
|
|
665
|
-
version: '0.14.
|
|
665
|
+
version: '0.14.133',
|
|
666
666
|
// The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_HOMEPAGE']".
|
|
667
667
|
homepage: 'https://github.com/SocketDev/socket-cli'
|
|
668
668
|
})
|
|
@@ -2122,12 +2122,22 @@ function getCveInfoByAlertsMap(alertsMap, options) {
|
|
|
2122
2122
|
}
|
|
2123
2123
|
const { firstPatchedVersionIdentifier, vulnerableVersionRange } =
|
|
2124
2124
|
alert.props
|
|
2125
|
-
|
|
2126
|
-
|
|
2127
|
-
|
|
2125
|
+
try {
|
|
2126
|
+
infos.push({
|
|
2127
|
+
firstPatchedVersionIdentifier,
|
|
2128
|
+
vulnerableVersionRange: new vendor.semverExports.Range(
|
|
2129
|
+
// Replace ', ' in a range like '>= 1.0.0, < 1.8.2' with ' ' so that
|
|
2130
|
+
// semver.Range will parse it without erroring.
|
|
2131
|
+
vulnerableVersionRange.replace(/, +/g, ' ')
|
|
2132
|
+
).format()
|
|
2133
|
+
})
|
|
2134
|
+
} catch (e) {
|
|
2135
|
+
debug.debugLog('getCveInfoByAlertsMap', {
|
|
2136
|
+
firstPatchedVersionIdentifier,
|
|
2128
2137
|
vulnerableVersionRange
|
|
2129
|
-
)
|
|
2130
|
-
|
|
2138
|
+
})
|
|
2139
|
+
debug.debugLog(e)
|
|
2140
|
+
}
|
|
2131
2141
|
}
|
|
2132
2142
|
}
|
|
2133
2143
|
return infoByPkg
|
|
@@ -2631,5 +2641,5 @@ exports.supportedConfigKeys = supportedConfigKeys
|
|
|
2631
2641
|
exports.updateConfigValue = updateConfigValue
|
|
2632
2642
|
exports.updateNode = updateNode
|
|
2633
2643
|
exports.updatePackageJsonFromNode = updatePackageJsonFromNode
|
|
2634
|
-
//# debugId=
|
|
2644
|
+
//# debugId=2a75b512-d681-4137-917d-d3b41bda7e56
|
|
2635
2645
|
//# sourceMappingURL=shadow-npm-inject.js.map
|