@socketsecurity/cli 0.14.30 → 0.14.31

package/dist/module-sync/npx-cli.js

@@ -1,11 +1,23 @@
 #!/usr/bin/env node
 'use strict';
 
-var constants = require('./constants.js');
-var require$$0 = require('@babel/runtime/helpers/interopRequireWildcard');
-var require$$1 = require('node:path');
-var require$$1$1 = require('@npmcli/promise-spawn');
-var link = require('./link.js');
+function _interop(e) {
+  let d
+  if (e) {
+    let c = 0
+    for (const k in e) {
+      d = c++ === 0 && k === 'default' ? e[k] : void 0
+      if (!d) break
+    }
+  }
+  return d ?? e
+}
+
+var vendor = _interop(require('./vendor.js'));
+var require$$1 = _interop(require('node:path'));
+var require$$1$1 = _interop(require('@npmcli/promise-spawn'));
+var constants = _interop(require('./constants.js'));
+var link = _interop(require('./link.js'));
 
 var npxCli$2 = {};
 
@@ -31,7 +43,7 @@ spawnPromise.process.on('exit', (code, signal) => {
 
 (function (exports) {
 
-	var _interopRequireWildcard = require$$0.default;
+	var _interopRequireWildcard = vendor.interopRequireWildcard.default;
 	Object.defineProperty(exports, "__esModule", {
 	  value: true
 	});
@@ -56,6 +68,6 @@ spawnPromise.process.on('exit', (code, signal) => {
 	}); 
 } (npxCli$2));
 
-var npxCli = /*@__PURE__*/constants.getDefaultExportFromCjs(npxCli$2);
+var npxCli = /*@__PURE__*/vendor.getDefaultExportFromCjs(npxCli$2);
 
 module.exports = npxCli;

package/dist/module-sync/path-resolve.js

@@ -1,10 +1,22 @@
 'use strict';
 
-var require$$1$1 = require('node:fs/promises');
-var require$$1 = require('node:path');
-var require$$2 = require('ignore');
-var require$$3 = require('micromatch');
-var require$$8 = require('tinyglobby');
+function _interop(e) {
+  let d
+  if (e) {
+    let c = 0
+    for (const k in e) {
+      d = c++ === 0 && k === 'default' ? e[k] : void 0
+      if (!d) break
+    }
+  }
+  return d ?? e
+}
+
+var require$$1$1 = _interop(require('node:fs/promises'));
+var require$$1 = _interop(require('node:path'));
+var require$$2 = _interop(require('ignore'));
+var require$$3 = _interop(require('micromatch'));
+var require$$8 = _interop(require('tinyglobby'));
 
 var pathResolve = {};
 

package/dist/module-sync/sdk.d.ts

@@ -3,7 +3,6 @@ import { SocketSdk } from '@socketsecurity/sdk';
 declare function createDebugLogger(printDebugLogs?: boolean): typeof console.error;
 declare function isErrnoException(value: unknown): value is NodeJS.ErrnoException;
 declare function stringJoinWithSeparateFinalSeparator(list: (string | undefined)[], separator?: string): string;
-declare const FREE_API_KEY = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
 declare function getDefaultKey(): string | undefined;
 declare function setupSdk(apiKey?: string | undefined, apiBaseUrl?: string | undefined, proxy?: string | undefined): Promise<SocketSdk>;
-export { createDebugLogger, isErrnoException, stringJoinWithSeparateFinalSeparator, FREE_API_KEY, getDefaultKey, setupSdk };
+export { createDebugLogger, isErrnoException, stringJoinWithSeparateFinalSeparator, getDefaultKey, setupSdk };

package/dist/module-sync/sdk.js

@@ -1,18 +1,31 @@
 'use strict';
 
-var require$$0 = require('@babel/runtime/helpers/interopRequireDefault');
-var require$$1 = require('yoctocolors-cjs');
-var require$$2 = require('is-unicode-supported');
-var require$$3 = require('terminal-link');
-var require$$1$2 = require('@inquirer/prompts');
-var require$$2$2 = require('hpagent');
-var require$$3$2 = require('is-interactive');
-var require$$4 = require('@socketsecurity/sdk');
-var constants = require('./constants.js');
-var require$$0$1 = require('node:fs');
-var require$$2$1 = require('node:os');
-var require$$1$1 = require('node:path');
-var require$$3$1 = require('@socketregistry/yocto-spinner');
+function _interop(e) {
+  let d
+  if (e) {
+    let c = 0
+    for (const k in e) {
+      d = c++ === 0 && k === 'default' ? e[k] : void 0
+      if (!d) break
+    }
+  }
+  return d ?? e
+}
+
+var vendor = _interop(require('./vendor.js'));
+var require$$1 = _interop(require('yoctocolors-cjs'));
+var require$$2 = _interop(require('is-unicode-supported'));
+var require$$3 = _interop(require('terminal-link'));
+var require$$1$2 = _interop(require('@inquirer/password'));
+var require$$2$2 = _interop(require('hpagent'));
+var require$$3$2 = _interop(require('is-interactive'));
+var require$$4 = _interop(require('@socketsecurity/registry/lib/strings'));
+var require$$5 = _interop(require('@socketsecurity/sdk'));
+var constants = _interop(require('./constants.js'));
+var require$$0 = _interop(require('node:fs'));
+var require$$2$1 = _interop(require('node:os'));
+var require$$1$1 = _interop(require('node:path'));
+var require$$3$1 = _interop(require('@socketregistry/yocto-spinner'));
 
 var errors = {};
 
@@ -32,7 +45,7 @@ errors.InputError = InputError;
 
 var colorOrMarkdown = {};
 
-var _interopRequireDefault$1 = require$$0.default;
+var _interopRequireDefault$1 = vendor.interopRequireDefault.default;
 Object.defineProperty(colorOrMarkdown, "__esModule", {
   value: true
 });
@@ -142,7 +155,7 @@ Object.defineProperty(settings$1, "__esModule", {
 });
 settings$1.getSetting = getSetting;
 settings$1.updateSetting = updateSetting;
-var _nodeFs = require$$0$1;
+var _nodeFs = require$$0;
 var _nodeOs = require$$2$1;
 var _nodePath = require$$1$1;
 var _yoctoSpinner = require$$3$1;
@@ -181,45 +194,42 @@ function updateSetting(key, value) {
   }
 }
 
-var _interopRequireDefault = require$$0.default;
+var _interopRequireDefault = vendor.interopRequireDefault.default;
 Object.defineProperty(sdk, "__esModule", {
   value: true
 });
-sdk.FREE_API_KEY = void 0;
 sdk.getDefaultKey = getDefaultKey;
 sdk.setupSdk = setupSdk;
-var _prompts = require$$1$2;
+var _password = require$$1$2;
 var _hpagent = require$$2$2;
 var _isInteractive = _interopRequireDefault(require$$3$2);
-var _sdk = require$$4;
+var _strings = require$$4;
+var _sdk = require$$5;
 var _constants = constants.constants;
 var _errors = errors;
 var _settings = settings$1;
-sdk.FREE_API_KEY = 'sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api';
-
-// This API key should be stored globally for the duration of the CLI execution
+// This API key should be stored globally for the duration of the CLI execution.
 let defaultKey;
 function getDefaultKey() {
-  defaultKey = process.env['SOCKET_SECURITY_API_KEY'] || (0, _settings.getSetting)('apiKey') || defaultKey;
+  const key = process.env['SOCKET_SECURITY_API_KEY'] || (0, _settings.getSetting)('apiKey') || defaultKey;
+  defaultKey = (0, _strings.isNonEmptyString)(key) ? key : undefined;
   return defaultKey;
 }
 
-// The API server that should be used for operations
-let defaultAPIBaseUrl;
+// The API server that should be used for operations.
 function getDefaultAPIBaseUrl() {
-  defaultAPIBaseUrl = process.env['SOCKET_SECURITY_API_BASE_URL'] || (0, _settings.getSetting)('apiBaseUrl') || undefined;
-  return defaultAPIBaseUrl;
+  const baseUrl = process.env['SOCKET_SECURITY_API_BASE_URL'] || (0, _settings.getSetting)('apiBaseUrl');
+  return (0, _strings.isNonEmptyString)(baseUrl) ? baseUrl : undefined;
 }
 
-// The API server that should be used for operations
-let defaultApiProxy;
+// The API server that should be used for operations.
 function getDefaultHTTPProxy() {
-  defaultApiProxy = process.env['SOCKET_SECURITY_API_PROXY'] || (0, _settings.getSetting)('apiProxy') || undefined;
-  return defaultApiProxy;
+  const apiProxy = process.env['SOCKET_SECURITY_API_PROXY'] || (0, _settings.getSetting)('apiProxy');
+  return (0, _strings.isNonEmptyString)(apiProxy) ? apiProxy : undefined;
 }
 async function setupSdk(apiKey = getDefaultKey(), apiBaseUrl = getDefaultAPIBaseUrl(), proxy = getDefaultHTTPProxy()) {
   if (typeof apiKey !== 'string' && (0, _isInteractive.default)()) {
-    apiKey = await (0, _prompts.password)({
+    apiKey = await _password({
       message: 'Enter your Socket.dev API key (not saved, use socket login to persist)'
     });
     defaultKey = apiKey;

package/dist/module-sync/vendor.js

@@ -0,0 +1,82 @@
+'use strict';
+
+function _interop(e) {
+  let d
+  if (e) {
+    let c = 0
+    for (const k in e) {
+      d = c++ === 0 && k === 'default' ? e[k] : void 0
+      if (!d) break
+    }
+  }
+  return d ?? e
+}
+
+function getDefaultExportFromCjs (x) {
+	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
+}
+
+var interopRequireWildcard = {};
+
+var _typeof$1 = {};
+
+Object.defineProperty(_typeof$1, "__esModule", {
+  value: true
+});
+_typeof$1.default = _typeof;
+function _typeof(o) {
+  "@babel/helpers - typeof";
+
+  return _typeof$1.default = _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) {
+    return typeof o;
+  } : function (o) {
+    return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o;
+  }, _typeof(o);
+}
+
+Object.defineProperty(interopRequireWildcard, "__esModule", {
+  value: true
+});
+interopRequireWildcard.default = _interopRequireWildcard;
+var _typeof2 = _typeof$1;
+function _getRequireWildcardCache(e) {
+  if ("function" != typeof WeakMap) return null;
+  var r = new WeakMap(),
+    t = new WeakMap();
+  return (_getRequireWildcardCache = function _getRequireWildcardCache(e) {
+    return e ? t : r;
+  })(e);
+}
+function _interopRequireWildcard(e, r) {
+  if (!r && e && e.__esModule) return e;
+  if (null === e || "object" != (0, _typeof2.default)(e) && "function" != typeof e) return {
+    "default": e
+  };
+  var t = _getRequireWildcardCache(r);
+  if (t && t.has(e)) return t.get(e);
+  var n = {
+      __proto__: null
+    },
+    a = Object.defineProperty && Object.getOwnPropertyDescriptor;
+  for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) {
+    var i = a ? Object.getOwnPropertyDescriptor(e, u) : null;
+    i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u];
+  }
+  return n["default"] = e, t && t.set(e, n), n;
+}
+
+var interopRequireDefault = {};
+
+Object.defineProperty(interopRequireDefault, "__esModule", {
+  value: true
+});
+interopRequireDefault.default = _interopRequireDefault;
+function _interopRequireDefault(e) {
+  return e && e.__esModule ? e : {
+    "default": e
+  };
+}
+
+exports.getDefaultExportFromCjs = getDefaultExportFromCjs;
+exports.interopRequireDefault = interopRequireDefault;
+exports.interopRequireWildcard = interopRequireWildcard;

package/dist/require/cli.js

@@ -1,48 +1,62 @@
 #!/usr/bin/env node
 'use strict';
 
-var vendor = require('./vendor.js');
-var require$$8$2 = require('node:url');
-var require$$1$2 = require('yoctocolors-cjs');
-var require$$4$1 = require('pony-cause');
-var require$$0 = require('node:fs');
-var require$$1 = require('node:path');
-var require$$1$1 = require('@npmcli/promise-spawn');
-var require$$4 = require('yargs-parser');
-var require$$5 = require('@socketsecurity/registry/lib/words');
-var constants = require('./constants.js');
-var require$$3 = require('@socketregistry/yocto-spinner');
-var sdk = require('./sdk.js');
-var require$$1$3 = require('@inquirer/prompts');
-var require$$1$4 = require('node:fs/promises');
-var require$$5$2 = require('npm-package-arg');
-var require$$4$2 = require('semver');
-var require$$8$1 = require('tinyglobby');
-var require$$9$1 = require('yaml');
-var require$$10 = require('@socketsecurity/registry');
-var require$$7 = require('@socketsecurity/registry/lib/objects');
-var require$$8 = require('@socketsecurity/registry/lib/packages');
-var require$$13 = require('@socketsecurity/registry/lib/promises');
-var require$$14 = require('@socketsecurity/registry/lib/regexps');
-var require$$9 = require('@socketsecurity/registry/lib/strings');
-var require$$2 = require('browserslist');
-var require$$4$3 = require('which');
-var require$$5$1 = require('@socketregistry/hyrious__bun.lockb');
-var require$$3$1 = require('@socketsecurity/registry/lib/constants');
-var require$$2$1 = require('@apideck/better-ajv-errors');
-var require$$6 = require('@socketsecurity/config');
-var pathResolve = require('./path-resolve.js');
-var require$$1$5 = require('node:os');
-var require$$3$2 = require('node:readline');
-var require$$0$1 = require('node:process');
-var require$$2$2 = require('node:readline/promises');
-var require$$2$3 = require('chalk-table');
-var require$$2$4 = require('blessed/lib/widgets/screen');
-var require$$3$3 = require('blessed-contrib/lib/widget/charts/bar');
-var require$$4$4 = require('blessed-contrib/lib/layout/grid');
-var require$$5$3 = require('blessed-contrib/lib/widget/charts/line');
-var require$$0$2 = require('node:util');
-var require$$2$5 = require('blessed-contrib/lib/widget/table');
+function _interop(e) {
+  let d
+  if (e) {
+    let c = 0
+    for (const k in e) {
+      d = c++ === 0 && k === 'default' ? e[k] : void 0
+      if (!d) break
+    }
+  }
+  return d ?? e
+}
+
+var vendor = _interop(require('./vendor.js'));
+var require$$8$2 = _interop(require('node:url'));
+var require$$1$2 = _interop(require('yoctocolors-cjs'));
+var require$$4$1 = _interop(require('pony-cause'));
+var require$$0 = _interop(require('node:fs'));
+var require$$1 = _interop(require('node:path'));
+var require$$1$1 = _interop(require('@npmcli/promise-spawn'));
+var require$$4 = _interop(require('yargs-parser'));
+var require$$5 = _interop(require('@socketsecurity/registry/lib/words'));
+var constants = _interop(require('./constants.js'));
+var require$$3 = _interop(require('@socketregistry/yocto-spinner'));
+var sdk = _interop(require('./sdk.js'));
+var require$$1$3 = _interop(require('@inquirer/confirm'));
+var require$$1$4 = _interop(require('@inquirer/password'));
+var require$$3$1 = _interop(require('@inquirer/select'));
+var require$$1$5 = _interop(require('node:fs/promises'));
+var require$$5$2 = _interop(require('npm-package-arg'));
+var require$$4$2 = _interop(require('semver'));
+var require$$8$1 = _interop(require('tinyglobby'));
+var require$$9 = _interop(require('yaml'));
+var require$$10 = _interop(require('@socketsecurity/registry'));
+var require$$7 = _interop(require('@socketsecurity/registry/lib/objects'));
+var require$$8 = _interop(require('@socketsecurity/registry/lib/packages'));
+var require$$13 = _interop(require('@socketsecurity/registry/lib/promises'));
+var require$$14 = _interop(require('@socketsecurity/registry/lib/regexps'));
+var require$$4$3 = _interop(require('@socketsecurity/registry/lib/strings'));
+var require$$2 = _interop(require('browserslist'));
+var require$$4$4 = _interop(require('which'));
+var require$$5$1 = _interop(require('@socketregistry/hyrious__bun.lockb'));
+var require$$3$2 = _interop(require('@socketsecurity/registry/lib/constants'));
+var require$$2$1 = _interop(require('@apideck/better-ajv-errors'));
+var require$$6 = _interop(require('@socketsecurity/config'));
+var pathResolve = _interop(require('./path-resolve.js'));
+var require$$1$6 = _interop(require('node:os'));
+var require$$3$3 = _interop(require('node:readline'));
+var require$$0$1 = _interop(require('node:process'));
+var require$$2$2 = _interop(require('node:readline/promises'));
+var require$$2$3 = _interop(require('chalk-table'));
+var require$$2$4 = _interop(require('blessed/lib/widgets/screen'));
+var require$$3$4 = _interop(require('blessed-contrib/lib/widget/charts/bar'));
+var require$$4$5 = _interop(require('blessed-contrib/lib/layout/grid'));
+var require$$5$3 = _interop(require('blessed-contrib/lib/widget/charts/line'));
+var require$$0$2 = _interop(require('node:util'));
+var require$$2$5 = _interop(require('blessed-contrib/lib/widget/table'));
 
 var cli$2 = {};
 
@@ -62,7 +76,7 @@ var _promiseSpawn$6 = require$$1$1;
 var _yoctocolorsCjs$j = require$$1$2;
 var _yargsParser = require$$4;
 var _words$1 = require$$5;
-var _constants$6 = constants.constants;
+var _constants$8 = constants.constants;
 const {
   execPath
 } = process;
@@ -191,7 +205,7 @@ cdxgen.cdxgen = {
         // Use synp to create a package-lock.json from the yarn.lock,
         // based on the node_modules folder, for a more accurate SBOM.
         try {
-          await _promiseSpawn$6(execPath, [await _nodeFs$3.promises.realpath(_constants$6.synpBinPath), '--source-file', './yarn.lock'], {
+          await _promiseSpawn$6(execPath, [await _nodeFs$3.promises.realpath(_constants$8.synpBinPath), '--source-file', './yarn.lock'], {
             shell: true
           });
           yargv.type = 'npm';
@@ -202,7 +216,7 @@ cdxgen.cdxgen = {
     if (yargv.output === undefined) {
       yargv.output = 'socket-cdx.json';
     }
-    await _promiseSpawn$6(execPath, [await _nodeFs$3.promises.realpath(_constants$6.cdxgenBinPath), ...argvToArray(yargv)], {
+    await _promiseSpawn$6(execPath, [await _nodeFs$3.promises.realpath(_constants$8.cdxgenBinPath), ...argvToArray(yargv)], {
       env: {
         NODE_ENV: '',
         SBOM_SIGN_ALGORITHM,
@@ -291,7 +305,7 @@ apiHelpers.queryAPI = queryAPI;
 var _yoctocolorsCjs$i = require$$1$2;
 var _ponyCause$4 = require$$4$1;
 var _errors$l = sdk.errors;
-var _constants$5 = constants.constants;
+var _constants$7 = constants.constants;
 function handleUnsuccessfulApiResponse(_name, result, spinner) {
   // SocketSdkErrorType['error'] is not typed.
   const resultErrorMessage = result.error?.message;
@@ -322,7 +336,7 @@ async function handleAPIError(code) {
   }
 }
 async function queryAPI(path, apiKey) {
-  return await fetch(`${_constants$5.API_V0_URL}/${path}`, {
+  return await fetch(`${_constants$7.API_V0_URL}/${path}`, {
     method: 'GET',
     headers: {
       Authorization: `Basic ${btoa(`${apiKey}:${apiKey}`)}`
@@ -441,6 +455,7 @@ info$1.info = void 0;
 var _yoctocolorsCjs$h = require$$1$2;
 var _meow$p = _interopRequireDefault$q(vendor.build);
 var _yoctoSpinner$l = require$$3;
+var _constants$6 = constants.constants;
 var _flags$k = flags$1;
 var _apiHelpers$i = apiHelpers;
 var _colorOrMarkdown$3 = sdk.colorOrMarkdown;
@@ -525,7 +540,7 @@ function setupCommand$m(name, description, argv, importMeta) {
 async function fetchPackageData(pkgName, pkgVersion, {
   includeAllIssues
 }, spinner) {
-  const socketSdk = await (0, _sdk$j.setupSdk)((0, _sdk$j.getDefaultKey)() || _sdk$j.FREE_API_KEY);
+  const socketSdk = await (0, _sdk$j.setupSdk)((0, _sdk$j.getDefaultKey)() ?? _constants$6.SOCKET_PUBLIC_API_KEY);
   const result = await (0, _apiHelpers$i.handleApiCall)(socketSdk.getIssuesByNPMPackage(pkgName, pkgVersion), 'looking up package');
   const scoreResult = await (0, _apiHelpers$i.handleApiCall)(socketSdk.getScoreByNPMPackage(pkgName, pkgVersion), 'looking up package score');
   if (result.success === false) {
@@ -638,11 +653,14 @@ Object.defineProperty(login, "__esModule", {
   value: true
 });
 login.login = void 0;
-var _prompts$1 = require$$1$3;
+var _confirm = require$$1$3;
+var _password = require$$1$4;
+var _select$1 = require$$3$1;
 var _isInteractive = _interopRequireDefault$p(vendor.isInteractive);
 var _meow$o = _interopRequireDefault$p(vendor.build);
 var _yoctoSpinner$k = require$$3;
 var _terminalLink = _interopRequireDefault$p(vendor.terminalLink);
+var _constants$5 = constants.constants;
 var _errors$j = sdk.errors;
 var _formatting$l = formatting;
 var _sdk$i = sdk.sdk;
@@ -698,9 +716,9 @@ login.login = {
     if (!(0, _isInteractive.default)()) {
       throw new _errors$j.InputError('Cannot prompt for credentials in a non-interactive shell');
     }
-    const apiKey = (await (0, _prompts$1.password)({
+    const apiKey = (await _password({
       message: `Enter your ${(0, _terminalLink.default)('Socket.dev API key', 'https://docs.socket.dev/docs/api-keys')} (leave blank for a public key)`
-    })) || _sdk$i.FREE_API_KEY;
+    })) || _constants$5.SOCKET_PUBLIC_API_KEY;
     let apiBaseUrl = cli.flags['apiBaseUrl'];
     apiBaseUrl ??= (0, _settings$1.getSetting)('apiBaseUrl') ?? undefined;
     let apiProxy = cli.flags['apiProxy'];
@@ -727,7 +745,7 @@ login.login = {
     }));
     let enforcedOrgs = [];
     if (enforcedChoices.length > 1) {
-      const id = await (0, _prompts$1.select)({
+      const id = await _select$1({
         message: "Which organization's policies should Socket enforce system-wide?",
         choices: enforcedChoices.concat({
           name: 'None',
@@ -739,7 +757,7 @@ login.login = {
         enforcedOrgs = [id];
       }
     } else if (enforcedChoices.length) {
-      const confirmOrg = await (0, _prompts$1.confirm)({
+      const confirmOrg = await _confirm({
         message: `Should Socket enforce ${enforcedChoices[0]?.name}'s security policies system-wide?`,
         default: true
       });
@@ -929,12 +947,12 @@ var _nodePath$2 = require$$1;
 var _promiseSpawn$3 = require$$1$1;
 var _browserslist = require$$2;
 var _semver$1 = require$$4$2;
-var _which = require$$4$3;
+var _which = require$$4$4;
 var _hyrious__bun = require$$5$1;
-var _constants$2 = require$$3$1;
+var _constants$2 = require$$3$2;
 var _objects$2 = require$$7;
 var _packages$1 = require$$8;
-var _strings$1 = require$$9;
+var _strings$1 = require$$4$3;
 var _fs$1 = fs;
 const AGENTS = packageManagerDetector.AGENTS = ['bun', 'npm', 'pnpm', 'yarn/berry', 'yarn/classic', 'vlt'];
 const {
@@ -1117,7 +1135,7 @@ Object.defineProperty(optimize$1, "__esModule", {
   value: true
 });
 optimize$1.optimize = void 0;
-var _promises$2 = require$$1$4;
+var _promises$2 = require$$1$5;
 var _nodePath$1 = require$$1;
 var _promiseSpawn$2 = require$$1$1;
 var _meow$m = _interopRequireDefault$n(vendor.build);
@@ -1125,13 +1143,13 @@ var _npmPackageArg = require$$5$2;
 var _yoctoSpinner$i = require$$3;
 var _semver = require$$4$2;
 var _tinyglobby = require$$8$1;
-var _yaml = require$$9$1;
+var _yaml = require$$9;
 var _registry = require$$10;
 var _objects$1 = require$$7;
 var _packages = require$$8;
 var _promises2 = require$$13;
 var _regexps = require$$14;
-var _strings = require$$9;
+var _strings = require$$4$3;
 var _words = require$$5;
 var _constants$1 = constants.constants;
 var _flags$j = flags$1;
@@ -1822,13 +1840,18 @@ const optimize = optimize$1.optimize = {
       try {
         if (isNpm) {
           const wrapperPath = _nodePath$1.join(_constants$1.distPath, 'npm-cli.js');
-          await _promiseSpawn$2(process.execPath, [wrapperPath, 'install', '--silent'], {
+          const npmSpawnOptions = {
             stdio: 'ignore',
             env: {
               ...process.env,
               [_constants$1.UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE]: '1'
             }
-          });
+          };
+          await _promiseSpawn$2(process.execPath, [wrapperPath, 'install', '--silent'], npmSpawnOptions);
+          // TODO: This is a temporary workaround for an `npm ci` bug where it
+          // will error out after Socket Optimize generates a lock file. More
+          // investigation is needed.
+          await _promiseSpawn$2(process.execPath, [wrapperPath, 'install', '--silent', '--ignore-scripts', '--package-lock-only'], npmSpawnOptions);
         } else {
           // All package managers support the "install" command.
           await _promiseSpawn$2(agentExecPath, ['install'], {
@@ -2547,8 +2570,8 @@ Object.defineProperty(wrapper$1, "__esModule", {
 });
 wrapper$1.wrapper = void 0;
 var _nodeFs$1 = require$$0;
-var _nodeOs = require$$1$5;
-var _nodeReadline = require$$3$2;
+var _nodeOs = require$$1$6;
+var _nodeReadline = require$$3$3;
 var _meow$f = _interopRequireDefault$g(vendor.build);
 var _flags$d = flags$1;
 var _formatting$e = formatting;
@@ -3370,11 +3393,12 @@ scan.scan = {
 var auditLog$1 = {};
 
 var _interopRequireDefault$a = vendor.interopRequireDefault.default;
+var _interopRequireWildcard$1 = vendor.interopRequireWildcard.default;
 Object.defineProperty(auditLog$1, "__esModule", {
   value: true
 });
 auditLog$1.auditLog = void 0;
-var _prompts = require$$1$3;
+var _select = _interopRequireWildcard$1(require$$3$1, true);
 var _yoctocolorsCjs$9 = require$$1$2;
 var _meow$9 = _interopRequireDefault$a(vendor.build);
 var _yoctoSpinner$9 = require$$3;
@@ -3496,11 +3520,11 @@ async function fetchOrgAuditLog(orgSlug, input, spinner, apiKey) {
       })} - ${d.user_email} - ${d.type} - ${d.ip_address} - ${d.user_agent}`;
       data.push({
         name
-      }, new _prompts.Separator());
+      }, new _select.Separator());
       logDetails[name] = JSON.stringify(d.payload);
     }
   }
-  console.log(logDetails[await (0, _prompts.select)({
+  console.log(logDetails[await (0, _select.default)({
     message: input.type ? `\n Audit log for: ${orgSlug} with type: ${input.type}\n` : `\n Audit log for: ${orgSlug}\n`,
     choices: data,
     pageSize: 30
@@ -4265,10 +4289,10 @@ Object.defineProperty(analytics$1, "__esModule", {
   value: true
 });
 analytics$1.analytics = void 0;
-var _promises = require$$1$4;
+var _promises = require$$1$5;
 var _screen$1 = require$$2$4;
-var _bar = require$$3$3;
-var _grid = require$$4$4;
+var _bar = require$$3$4;
+var _grid = require$$4$5;
 var _line = require$$5$3;
 var _meow$2 = _interopRequireDefault$3(vendor.build);
 var _yoctocolorsCjs$2 = require$$1$2;

package/dist/require/constants.d.ts

@@ -3,6 +3,7 @@ declare const API_V0_URL = "https://api.socket.dev/v0";
 declare const DIST_TYPE: string;
 declare const LOOP_SENTINEL = 1000000;
 declare const NPM_REGISTRY_URL = "https://registry.npmjs.org";
+declare const SOCKET_PUBLIC_API_KEY = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
 declare const SOCKET_CLI_ISSUES_URL = "https://github.com/SocketDev/socket-cli/issues";
 declare const UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE = "UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE";
 declare const ENV: Readonly<{
@@ -17,4 +18,4 @@ declare const cdxgenBinPath: string;
 declare const distPath: string;
 declare const shadowBinPath: string;
 declare const synpBinPath: string;
-export { SUPPORTS_SYNC_ESM, API_V0_URL, DIST_TYPE, LOOP_SENTINEL, NPM_REGISTRY_URL, SOCKET_CLI_ISSUES_URL, UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE, ENV, rootPath, rootDistPath, rootBinPath, rootPkgJsonPath, nmBinPath, cdxgenBinPath, distPath, shadowBinPath, synpBinPath };
+export { SUPPORTS_SYNC_ESM, API_V0_URL, DIST_TYPE, LOOP_SENTINEL, NPM_REGISTRY_URL, SOCKET_PUBLIC_API_KEY, SOCKET_CLI_ISSUES_URL, UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE, ENV, rootPath, rootDistPath, rootBinPath, rootPkgJsonPath, nmBinPath, cdxgenBinPath, distPath, shadowBinPath, synpBinPath };