@socketsecurity/cli 0.14.34 → 0.14.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli",
-  "version": "0.14.34",
+  "version": "0.14.36",
   "description": "CLI tool for Socket.dev",
   "homepage": "http://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -22,18 +22,15 @@
   "exports": {
     "./bin/cli.js": {
       "types": "./dist/module-sync/cli.d.ts",
-      "module-sync": "./dist/module-sync/cli.js",
-      "require": "./dist/require/cli.js"
+      "default": "./dist/cli.js"
     },
     "./bin/npm-cli.js": {
       "types": "./dist/module-sync/npm-cli.d.ts",
-      "module-sync": "./dist/module-sync/npm-cli.js",
-      "require": "./dist/require/npm-cli.js"
+      "default": "./dist/npm-cli.js"
     },
     "./bin/npx-cli.js": {
       "types": "./dist/module-sync/npx-cli.d.ts",
-      "module-sync": "./dist/module-sync/npx-cli.js",
-      "require": "./dist/require/npx-cli.js"
+      "default": "./dist/npx-cli.js"
     },
     "./package.json": "./package.json",
     "./translations.json": "./translations.json"
@@ -60,22 +57,23 @@
   },
   "dependencies": {
     "@apideck/better-ajv-errors": "^0.3.6",
-    "@cyclonedx/cdxgen": "^11.0.5",
+    "@cyclonedx/cdxgen": "^11.0.7",
     "@npmcli/promise-spawn": "^8.0.2",
-    "@socketregistry/hyrious__bun.lockb": "1.0.5",
-    "@socketregistry/yocto-spinner": "^1.0.1",
+    "@socketregistry/hyrious__bun.lockb": "1.0.6",
+    "@socketregistry/yocto-spinner": "^1.0.2",
     "@socketsecurity/config": "^2.1.3",
-    "@socketsecurity/registry": "^1.0.51",
+    "@socketsecurity/registry": "^1.0.56",
     "@socketsecurity/sdk": "^1.3.0",
     "blessed": "^0.1.81",
     "blessed-contrib": "^4.11.0",
-    "browserslist": "4.24.2",
+    "browserslist": "4.24.3",
     "chalk-table": "^1.0.2",
+    "cmd-shim": "^7.0.0",
     "has-flag": "^4.0.0",
     "hpagent": "^1.2.0",
     "ignore": "^6.0.2",
     "micromatch": "^4.0.8",
-    "npm-package-arg": "^12.0.0",
+    "npm-package-arg": "^12.0.1",
     "pony-cause": "^2.1.11",
     "semver": "^7.6.3",
     "synp": "^1.9.14",
@@ -90,24 +88,24 @@
     "@babel/plugin-proposal-export-default-from": "^7.25.9",
     "@babel/plugin-syntax-dynamic-import": "^7.8.3",
     "@babel/plugin-transform-export-namespace-from": "^7.25.9",
-    "@babel/plugin-transform-modules-commonjs": "^7.26.3",
     "@babel/plugin-transform-runtime": "^7.25.9",
     "@babel/preset-env": "^7.26.0",
     "@babel/preset-typescript": "^7.26.0",
     "@babel/runtime": "^7.26.0",
     "@eslint/compat": "^1.2.4",
-    "@eslint/js": "^9.16.0",
-    "@rollup/plugin-commonjs": "^28.0.1",
+    "@eslint/js": "^9.17.0",
+    "@rollup/plugin-commonjs": "^28.0.2",
     "@rollup/plugin-json": "^6.1.0",
-    "@rollup/plugin-node-resolve": "^15.3.0",
-    "@rollup/plugin-replace": "^6.0.1",
-    "@rollup/pluginutils": "^5.1.3",
+    "@rollup/plugin-node-resolve": "^16.0.0",
+    "@rollup/plugin-replace": "^6.0.2",
+    "@rollup/pluginutils": "^5.1.4",
     "@tapjs/run": "^4.0.1",
     "@types/blessed": "^0.1.25",
+    "@types/cmd-shim": "^5.0.2",
     "@types/micromatch": "^4.0.9",
     "@types/mocha": "^10.0.10",
     "@types/mock-fs": "^4.13.4",
-    "@types/node": "^22.10.1",
+    "@types/node": "^22.10.2",
     "@types/npmcli__arborist": "^5.6.11",
     "@types/npmcli__promise-spawn": "^6.0.3",
     "@types/proc-log": "^3.0.4",
@@ -115,28 +113,28 @@
     "@types/update-notifier": "^6.0.8",
     "@types/which": "^3.0.4",
     "@types/yargs-parser": "^21.0.3",
-    "@typescript-eslint/eslint-plugin": "^8.17.0",
-    "@typescript-eslint/parser": "^8.17.0",
-    "c8": "^10.1.2",
+    "@typescript-eslint/eslint-plugin": "^8.18.1",
+    "@typescript-eslint/parser": "^8.18.1",
+    "c8": "^10.1.3",
     "custompatch": "^1.0.28",
-    "eslint": "^9.16.0",
+    "eslint": "^9.17.0",
     "eslint-import-resolver-oxc": "^0.6.0",
     "eslint-plugin-depend": "^0.12.0",
-    "eslint-plugin-import-x": "^4.5.0",
-    "eslint-plugin-n": "^17.14.0",
+    "eslint-plugin-import-x": "^4.6.1",
+    "eslint-plugin-n": "^17.15.0",
     "eslint-plugin-sort-destructure-keys": "^2.0.0",
     "eslint-plugin-unicorn": "^56.0.1",
     "husky": "^9.1.7",
     "is-interactive": "^2.0.0",
     "is-unicode-supported": "^2.1.0",
-    "knip": "^5.39.2",
-    "magic-string": "^0.30.14",
+    "knip": "^5.41.1",
+    "magic-string": "^0.30.17",
     "meow": "^13.2.0",
     "mock-fs": "^5.4.1",
     "nock": "^13.5.6",
-    "npm-run-all2": "^7.0.1",
+    "npm-run-all2": "^7.0.2",
     "open": "^10.1.0",
-    "oxlint": "0.14.1",
+    "oxlint": "0.15.3",
     "prettier": "3.4.2",
     "read-package-up": "^11.0.0",
     "rollup": "4.28.1",
@@ -145,7 +143,7 @@
     "tiny-updater": "^3.5.2",
     "type-coverage": "^2.29.7",
     "typescript": "5.4.5",
-    "typescript-eslint": "^8.17.0",
+    "typescript-eslint": "^8.18.1",
     "unplugin-purge-polyfills": "^0.0.7"
   },
   "overrides": {
@@ -204,6 +202,7 @@
   "files": [
     "bin/**",
     "dist/**",
+    "shadow-bin/**",
     "translations.json"
   ]
 }

package/shadow-bin/npm

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+'use strict'
+
+require(`../bin/npm-cli.js`)

package/shadow-bin/npx

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+'use strict'
+
+require(`../bin/npx-cli.js`)

package/bin/shadow/module-sync/npm

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-'use strict'
-require('../../dist/module-sync/npm-cli.js')

package/bin/shadow/module-sync/npx

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-'use strict'
-require('../../dist/module-sync/npx-cli.js')

package/bin/shadow/require/npm

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-'use strict'
-require('../../dist/require/npm-cli.js')

package/bin/shadow/require/npx

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-'use strict'
-require('../../dist/require/npx-cli.js')

package/dist/module-sync/link.d.ts

@@ -1,2 +0,0 @@
-declare function installLinks(realDirname: string, binName: 'npm' | 'npx'): string;
-export { installLinks };

package/dist/module-sync/link.js

@@ -1,54 +0,0 @@
-'use strict';
-
-function _socketInterop(e) {
-  let c = 0
-  for (const k in e ?? {}) {
-    c = c === 0 && k === 'default' ? 1 : 0
-    if (!c) break
-  }
-  return c ? e.default : e
-}
-
-var require$$0 = require('node:fs');
-var require$$1 = require('node:path');
-var require$$4 = _socketInterop(require('which'));
-
-var link = {};
-
-Object.defineProperty(link, "__esModule", {
-  value: true
-});
-link.installLinks = installLinks;
-var _nodeFs = require$$0;
-var _nodePath = require$$1;
-var _which = require$$4;
-function installLinks(realDirname, binName) {
-  const realShadowBinDir = realDirname;
-  // find package manager being shadowed by this process
-  const bins = _which.sync(binName, {
-    all: true
-  });
-  let shadowIndex = -1;
-  const binPath = bins.find((binPath, i) => {
-    if ((0, _nodeFs.realpathSync)(_nodePath.dirname(binPath)) === realShadowBinDir) {
-      shadowIndex = i;
-      return false;
-    }
-    return true;
-  });
-  const isWin = process.platform === 'win32';
-  if (isWin && binPath) {
-    return binPath;
-  }
-  if (!binPath) {
-    console.error(`Socket unable to locate ${binName}; ensure it is available in the PATH environment variable`);
-    process.exit(127);
-  }
-  if (shadowIndex === -1) {
-    const binDir = _nodePath.join(realDirname);
-    process.env['PATH'] = `${binDir}${isWin ? ';' : ':'}${process.env['PATH']}`;
-  }
-  return binPath;
-}
-
-exports.link = link;

package/dist/module-sync/npm-cli.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/module-sync/npm-cli.js

@@ -1,101 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-function _socketInterop(e) {
-  let c = 0
-  for (const k in e ?? {}) {
-    c = c === 0 && k === 'default' ? 1 : 0
-    if (!c) break
-  }
-  return c ? e.default : e
-}
-
-var vendor = require('./vendor.js');
-var require$$0 = require('node:fs');
-var require$$1 = require('node:path');
-var require$$1$1 = _socketInterop(require('@npmcli/promise-spawn'));
-var constants = require('./constants.js');
-var link = require('./link.js');
-var pathResolve = require('./path-resolve.js');
-
-var npmCli$2 = {};
-
-var npmCli$1 = {};
-
-var _nodeFs = require$$0;
-var _nodePath = require$$1;
-var _promiseSpawn = require$$1$1;
-var _constants = constants.constants;
-var _link = link.link;
-var _pathResolve = pathResolve.pathResolve;
-const {
-  distPath,
-  execPath,
-  shadowBinPath
-} = _constants;
-const npmPath = (0, _link.installLinks)(shadowBinPath, 'npm');
-const injectionPath = _nodePath.join(distPath, 'npm-injection.js');
-
-// Adding the `--quiet` and `--no-progress` flags when the `proc-log` module
-// is found to fix a UX issue when running the command with recent versions of
-// npm (input swallowed by the standard npm spinner)
-const npmArgs = process.argv.slice(2);
-if (npmArgs.includes('install') && !npmArgs.includes('--no-progress') && !npmArgs.includes('--quiet')) {
-  const npmEntrypoint = (0, _nodeFs.realpathSync)(npmPath);
-  const npmRootPath = (0, _pathResolve.findRoot)(_nodePath.dirname(npmEntrypoint));
-  if (npmRootPath === undefined) {
-    process.exit(127);
-  }
-  const npmDepPath = _nodePath.join(npmRootPath, 'node_modules');
-  let procLog;
-  try {
-    procLog = require(_nodePath.join(npmDepPath, 'proc-log/lib/index.js')).log;
-  } catch {}
-  if (procLog) {
-    npmArgs.push('--no-progress', '--quiet');
-  }
-}
-process.exitCode = 1;
-const spawnPromise = _promiseSpawn(execPath, [
-// Lazily access constants.nodeNoWarningsFlags.
-..._constants.nodeNoWarningsFlags, '--require', injectionPath, npmPath, ...npmArgs], {
-  stdio: 'inherit'
-});
-spawnPromise.process.on('exit', (code, signal) => {
-  if (signal) {
-    process.kill(process.pid, signal);
-  } else if (code !== null) {
-    process.exit(code);
-  }
-});
-
-(function (exports) {
-
-	var _interopRequireWildcard = vendor.interopRequireWildcard.default;
-	Object.defineProperty(exports, "__esModule", {
-	  value: true
-	});
-	var _exportNames = {};
-	Object.defineProperty(exports, "default", {
-	  enumerable: true,
-	  get: function () {
-	    return _npmCli.default;
-	  }
-	});
-	var _npmCli = _interopRequireWildcard(npmCli$1, true);
-	Object.keys(_npmCli).forEach(function (key) {
-	  if (key === "default" || key === "__esModule") return;
-	  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-	  if (key in exports && exports[key] === _npmCli[key]) return;
-	  Object.defineProperty(exports, key, {
-	    enumerable: true,
-	    get: function () {
-	      return _npmCli[key];
-	    }
-	  });
-	}); 
-} (npmCli$2));
-
-var npmCli = /*@__PURE__*/vendor.getDefaultExportFromCjs(npmCli$2);
-
-module.exports = npmCli;

package/dist/module-sync/npx-cli.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/module-sync/npx-cli.js

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-function _socketInterop(e) {
-  let c = 0
-  for (const k in e ?? {}) {
-    c = c === 0 && k === 'default' ? 1 : 0
-    if (!c) break
-  }
-  return c ? e.default : e
-}
-
-var vendor = require('./vendor.js');
-var require$$1 = require('node:path');
-var require$$1$1 = _socketInterop(require('@npmcli/promise-spawn'));
-var constants = require('./constants.js');
-var link = require('./link.js');
-
-var npxCli$2 = {};
-
-var npxCli$1 = {};
-
-var _nodePath = require$$1;
-var _promiseSpawn = require$$1$1;
-var _constants = constants.constants;
-var _link = link.link;
-const {
-  distPath,
-  execPath,
-  shadowBinPath
-} = _constants;
-const npxPath = (0, _link.installLinks)(shadowBinPath, 'npx');
-const injectionPath = _nodePath.join(distPath, 'npm-injection.js');
-process.exitCode = 1;
-const spawnPromise = _promiseSpawn(execPath, [
-// Lazily access constants.nodeNoWarningsFlags.
-..._constants.nodeNoWarningsFlags, '--require', injectionPath, npxPath, ...process.argv.slice(2)], {
-  stdio: 'inherit'
-});
-spawnPromise.process.on('exit', (code, signal) => {
-  if (signal) {
-    process.kill(process.pid, signal);
-  } else if (code !== null) {
-    process.exit(code);
-  }
-});
-
-(function (exports) {
-
-	var _interopRequireWildcard = vendor.interopRequireWildcard.default;
-	Object.defineProperty(exports, "__esModule", {
-	  value: true
-	});
-	var _exportNames = {};
-	Object.defineProperty(exports, "default", {
-	  enumerable: true,
-	  get: function () {
-	    return _npxCli.default;
-	  }
-	});
-	var _npxCli = _interopRequireWildcard(npxCli$1, true);
-	Object.keys(_npxCli).forEach(function (key) {
-	  if (key === "default" || key === "__esModule") return;
-	  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-	  if (key in exports && exports[key] === _npxCli[key]) return;
-	  Object.defineProperty(exports, key, {
-	    enumerable: true,
-	    get: function () {
-	      return _npxCli[key];
-	    }
-	  });
-	}); 
-} (npxCli$2));
-
-var npxCli = /*@__PURE__*/vendor.getDefaultExportFromCjs(npxCli$2);
-
-module.exports = npxCli;

package/dist/module-sync/vendor.js

@@ -1,70 +0,0 @@
-'use strict';
-
-function getDefaultExportFromCjs (x) {
-	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
-}
-
-var interopRequireWildcard = {};
-
-var _typeof$1 = {};
-
-Object.defineProperty(_typeof$1, "__esModule", {
-  value: true
-});
-_typeof$1.default = _typeof;
-function _typeof(o) {
-  "@babel/helpers - typeof";
-
-  return _typeof$1.default = _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) {
-    return typeof o;
-  } : function (o) {
-    return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o;
-  }, _typeof(o);
-}
-
-Object.defineProperty(interopRequireWildcard, "__esModule", {
-  value: true
-});
-interopRequireWildcard.default = _interopRequireWildcard;
-var _typeof2 = _typeof$1;
-function _getRequireWildcardCache(e) {
-  if ("function" != typeof WeakMap) return null;
-  var r = new WeakMap(),
-    t = new WeakMap();
-  return (_getRequireWildcardCache = function _getRequireWildcardCache(e) {
-    return e ? t : r;
-  })(e);
-}
-function _interopRequireWildcard(e, r) {
-  if (!r && e && e.__esModule) return e;
-  if (null === e || "object" != (0, _typeof2.default)(e) && "function" != typeof e) return {
-    "default": e
-  };
-  var t = _getRequireWildcardCache(r);
-  if (t && t.has(e)) return t.get(e);
-  var n = {
-      __proto__: null
-    },
-    a = Object.defineProperty && Object.getOwnPropertyDescriptor;
-  for (var u in e) if ("default" !== u && {}.hasOwnProperty.call(e, u)) {
-    var i = a ? Object.getOwnPropertyDescriptor(e, u) : null;
-    i && (i.get || i.set) ? Object.defineProperty(n, u, i) : n[u] = e[u];
-  }
-  return n["default"] = e, t && t.set(e, n), n;
-}
-
-var interopRequireDefault = {};
-
-Object.defineProperty(interopRequireDefault, "__esModule", {
-  value: true
-});
-interopRequireDefault.default = _interopRequireDefault;
-function _interopRequireDefault(e) {
-  return e && e.__esModule ? e : {
-    "default": e
-  };
-}
-
-exports.getDefaultExportFromCjs = getDefaultExportFromCjs;
-exports.interopRequireDefault = interopRequireDefault;
-exports.interopRequireWildcard = interopRequireWildcard;

package/dist/require/link.js

@@ -1,54 +0,0 @@
-'use strict';
-
-function _socketInterop(e) {
-  let c = 0
-  for (const k in e ?? {}) {
-    c = c === 0 && k === 'default' ? 1 : 0
-    if (!c) break
-  }
-  return c ? e.default : e
-}
-
-var require$$0 = require('node:fs');
-var require$$1 = require('node:path');
-var require$$4 = _socketInterop(require('which'));
-
-var link = {};
-
-Object.defineProperty(link, "__esModule", {
-  value: true
-});
-link.installLinks = installLinks;
-var _nodeFs = require$$0;
-var _nodePath = require$$1;
-var _which = require$$4;
-function installLinks(realDirname, binName) {
-  const realShadowBinDir = realDirname;
-  // find package manager being shadowed by this process
-  const bins = _which.sync(binName, {
-    all: true
-  });
-  let shadowIndex = -1;
-  const binPath = bins.find((binPath, i) => {
-    if ((0, _nodeFs.realpathSync)(_nodePath.dirname(binPath)) === realShadowBinDir) {
-      shadowIndex = i;
-      return false;
-    }
-    return true;
-  });
-  const isWin = process.platform === 'win32';
-  if (isWin && binPath) {
-    return binPath;
-  }
-  if (!binPath) {
-    console.error(`Socket unable to locate ${binName}; ensure it is available in the PATH environment variable`);
-    process.exit(127);
-  }
-  if (shadowIndex === -1) {
-    const binDir = _nodePath.join(realDirname);
-    process.env['PATH'] = `${binDir}${isWin ? ';' : ':'}${process.env['PATH']}`;
-  }
-  return binPath;
-}
-
-exports.link = link;

package/dist/require/npm-cli.js

@@ -1,101 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-function _socketInterop(e) {
-  let c = 0
-  for (const k in e ?? {}) {
-    c = c === 0 && k === 'default' ? 1 : 0
-    if (!c) break
-  }
-  return c ? e.default : e
-}
-
-var vendor = require('./vendor.js');
-var require$$0 = require('node:fs');
-var require$$1 = require('node:path');
-var require$$1$1 = _socketInterop(require('@npmcli/promise-spawn'));
-var constants = require('./constants.js');
-var link = require('./link.js');
-var pathResolve = require('./path-resolve.js');
-
-var npmCli$2 = {};
-
-var npmCli$1 = {};
-
-var _nodeFs = require$$0;
-var _nodePath = require$$1;
-var _promiseSpawn = require$$1$1;
-var _constants = constants.constants;
-var _link = link.link;
-var _pathResolve = pathResolve.pathResolve;
-const {
-  distPath,
-  execPath,
-  shadowBinPath
-} = _constants;
-const npmPath = (0, _link.installLinks)(shadowBinPath, 'npm');
-const injectionPath = _nodePath.join(distPath, 'npm-injection.js');
-
-// Adding the `--quiet` and `--no-progress` flags when the `proc-log` module
-// is found to fix a UX issue when running the command with recent versions of
-// npm (input swallowed by the standard npm spinner)
-const npmArgs = process.argv.slice(2);
-if (npmArgs.includes('install') && !npmArgs.includes('--no-progress') && !npmArgs.includes('--quiet')) {
-  const npmEntrypoint = (0, _nodeFs.realpathSync)(npmPath);
-  const npmRootPath = (0, _pathResolve.findRoot)(_nodePath.dirname(npmEntrypoint));
-  if (npmRootPath === undefined) {
-    process.exit(127);
-  }
-  const npmDepPath = _nodePath.join(npmRootPath, 'node_modules');
-  let procLog;
-  try {
-    procLog = require(_nodePath.join(npmDepPath, 'proc-log/lib/index.js')).log;
-  } catch {}
-  if (procLog) {
-    npmArgs.push('--no-progress', '--quiet');
-  }
-}
-process.exitCode = 1;
-const spawnPromise = _promiseSpawn(execPath, [
-// Lazily access constants.nodeNoWarningsFlags.
-..._constants.nodeNoWarningsFlags, '--require', injectionPath, npmPath, ...npmArgs], {
-  stdio: 'inherit'
-});
-spawnPromise.process.on('exit', (code, signal) => {
-  if (signal) {
-    process.kill(process.pid, signal);
-  } else if (code !== null) {
-    process.exit(code);
-  }
-});
-
-(function (exports) {
-
-	var _interopRequireWildcard = vendor.interopRequireWildcard.default;
-	Object.defineProperty(exports, "__esModule", {
-	  value: true
-	});
-	var _exportNames = {};
-	Object.defineProperty(exports, "default", {
-	  enumerable: true,
-	  get: function () {
-	    return _npmCli.default;
-	  }
-	});
-	var _npmCli = _interopRequireWildcard(npmCli$1, true);
-	Object.keys(_npmCli).forEach(function (key) {
-	  if (key === "default" || key === "__esModule") return;
-	  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
-	  if (key in exports && exports[key] === _npmCli[key]) return;
-	  Object.defineProperty(exports, key, {
-	    enumerable: true,
-	    get: function () {
-	      return _npmCli[key];
-	    }
-	  });
-	}); 
-} (npmCli$2));
-
-var npmCli = /*@__PURE__*/vendor.getDefaultExportFromCjs(npmCli$2);
-
-module.exports = npmCli;