@socketsecurity/cli 0.14.94 → 0.14.96

package/dist/require/cli.js

@@ -12,54 +12,38 @@ function _socketInterop(e) {
 }
 
 const process$1 = require('node:process')
-const require$$0 = require('node:url')
-const ponyCause = _socketInterop(require('pony-cause'))
+const require$$0$2 = require('node:url')
 const vendor = require('./vendor.js')
 const debug = require('@socketsecurity/registry/lib/debug')
 const logger = require('@socketsecurity/registry/lib/logger')
 const assert = require('node:assert')
 const fs = require('node:fs/promises')
-const commonTags = _socketInterop(require('common-tags'))
 const strings = require('@socketsecurity/registry/lib/strings')
 const shadowNpmInject = require('./shadow-npm-inject.js')
 const constants = require('./constants.js')
-const colors = _socketInterop(require('yoctocolors-cjs'))
 const path$1 = require('node:path')
 const objects = require('@socketsecurity/registry/lib/objects')
 const path = require('@socketsecurity/registry/lib/path')
 const regexps = require('@socketsecurity/registry/lib/regexps')
-const yargsParse = _socketInterop(require('yargs-parser'))
 const words = require('@socketsecurity/registry/lib/words')
-const fs$1 = require('node:fs')
+const require$$0 = require('node:fs')
 const shadowBin = require('./shadow-bin.js')
 const prompts = require('@socketsecurity/registry/lib/prompts')
 const shadowNpmPaths = require('./shadow-npm-paths.js')
-const chalkTable = _socketInterop(require('chalk-table'))
 const require$$0$1 = require('node:util')
-const terminalLink = _socketInterop(require('terminal-link'))
 const arrays = require('@socketsecurity/registry/lib/arrays')
 const registry = require('@socketsecurity/registry')
 const npm = require('@socketsecurity/registry/lib/npm')
 const packages = require('@socketsecurity/registry/lib/packages')
 const spawn = require('@socketsecurity/registry/lib/spawn')
-const lockfile_fs = _socketInterop(require('@pnpm/lockfile.fs'))
-const lockfile_detectDepTypes = _socketInterop(
-  require('@pnpm/lockfile.detect-dep-types')
-)
-const browserslist = _socketInterop(require('browserslist'))
-const semver = _socketInterop(require('semver'))
-const which = _socketInterop(require('which'))
 const index_cjs = require('@socketregistry/hyrious__bun.lockb/index.cjs')
 const sorts = require('@socketsecurity/registry/lib/sorts')
 const registryConstants = require('@socketsecurity/registry/lib/constants')
 const isInteractive = require('@socketregistry/is-interactive/index.cjs')
-const npa = _socketInterop(require('npm-package-arg'))
-const tinyglobby = _socketInterop(require('tinyglobby'))
 const promises = require('@socketsecurity/registry/lib/promises')
-const yaml = _socketInterop(require('yaml'))
 
 function failMsgWithBadge(badge, msg) {
-  return `${colors.bgRed(colors.bold(colors.white(` ${badge}: `)))} ${colors.bold(msg)}`
+  return `${vendor.yoctocolorsCjsExports.bgRed(vendor.yoctocolorsCjsExports.bold(vendor.yoctocolorsCjsExports.white(` ${badge}: `)))} ${vendor.yoctocolorsCjsExports.bold(msg)}`
 }
 
 function handleUnsuccessfulApiResponse(_name, sockSdkError) {
@@ -362,7 +346,7 @@ function renderJson(data) {
   }
 }
 function renderMarkdown(data, days, repoSlug) {
-  return commonTags.stripIndents`
+  return vendor.stripIndents`
 # Socket Alert Analytics
 
 These are the Socket.dev stats are analytics for the ${repoSlug ? `${repoSlug} repo` : 'org'} of the past ${days} days
@@ -402,7 +386,7 @@ ${[
   ]
 ]
   .map(
-    ([title, table]) => commonTags.stripIndents`
+    ([title, table]) => vendor.stripIndents`
 ## ${title}
 
 ${table}
@@ -681,7 +665,7 @@ function handleBadInput(...checks) {
     // If the message has newlines then format the first line with the input
     // expectation and teh rest indented below it
     msg.push(
-      `  - ${lines[0]} (${d.test ? colors.green(d.pass) : colors.red(d.fail)})`
+      `  - ${lines[0]} (${d.test ? vendor.yoctocolorsCjsExports.green(d.pass) : vendor.yoctocolorsCjsExports.red(d.fail)})`
     )
     if (lines.length > 1) {
       msg.push(...lines.slice(1).map(str => `    ${str}`))
@@ -915,7 +899,7 @@ function emitBanner(name) {
   logger.logger.error(getAsciiHeader(name))
 }
 function getAsciiHeader(command) {
-  const cliVersion = '0.14.94:8a54136:2ee6cb06:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
+  const cliVersion = '0.14.96:b940b80:a8cd3de0:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
   const nodeVersion = process$1.version
   const apiToken = shadowNpmInject.getDefaultToken()
   const shownToken = apiToken ? getLastFiveOfApiToken(apiToken) : 'no'
@@ -1361,9 +1345,9 @@ async function runCycloneDX(yargvWithYes) {
   if (
     yargv.type !== YARN$1 &&
     nodejsPlatformTypes.has(yargv.type) &&
-    fs$1.existsSync(`./${YARN_LOCK}`)
+    require$$0.existsSync(`./${YARN_LOCK}`)
   ) {
-    if (fs$1.existsSync(`./${PACKAGE_LOCK_JSON}`)) {
+    if (require$$0.existsSync(`./${PACKAGE_LOCK_JSON}`)) {
       yargv.type = NPM$g
     } else {
       // Use synp to create a package-lock.json from the yarn.lock,
@@ -1389,12 +1373,14 @@ async function runCycloneDX(yargvWithYes) {
   ])
   if (cleanupPackageLock) {
     try {
-      await fs$1.promises.rm(`./${PACKAGE_LOCK_JSON}`)
+      await require$$0.promises.rm(`./${PACKAGE_LOCK_JSON}`)
     } catch {}
   }
   const fullOutputPath = path$1.join(process$1.cwd(), yargv.output)
-  if (fs$1.existsSync(fullOutputPath)) {
-    logger.logger.log(colors.cyanBright(`${yargv.output} created!`))
+  if (require$$0.existsSync(fullOutputPath)) {
+    logger.logger.log(
+      vendor.yoctocolorsCjsExports.cyanBright(`${yargv.output} created!`)
+    )
   }
 }
 function argvToArray(argv) {
@@ -1597,7 +1583,7 @@ async function run$I(argv, importMeta, { parentName }) {
 
   // TODO: Convert to meow.
   const yargv = {
-    ...yargsParse(argv, yargsConfig)
+    ...vendor.yargsParser(argv, yargsConfig)
   }
   const unknown = yargv._
   const { length: unknownLength } = unknown
@@ -2332,7 +2318,9 @@ async function outputCreateNewScan(data, outputKind) {
     logger.logger.log('')
     return
   }
-  const link = colors.underline(colors.cyan(`${data.html_report_url}`))
+  const link = vendor.yoctocolorsCjsExports.underline(
+    vendor.yoctocolorsCjsExports.cyan(`${data.html_report_url}`)
+  )
   logger.logger.log(`Available at: ${link}`)
   if (
     await prompts.confirm({
@@ -3327,35 +3315,35 @@ async function outputDependencies(data, { limit, offset, outputKind }) {
     columns: [
       {
         field: 'namespace',
-        name: colors.cyan('Namespace')
+        name: vendor.yoctocolorsCjsExports.cyan('Namespace')
       },
       {
         field: 'name',
-        name: colors.cyan('Name')
+        name: vendor.yoctocolorsCjsExports.cyan('Name')
       },
       {
         field: 'version',
-        name: colors.cyan('Version')
+        name: vendor.yoctocolorsCjsExports.cyan('Version')
       },
       {
         field: 'repository',
-        name: colors.cyan('Repository')
+        name: vendor.yoctocolorsCjsExports.cyan('Repository')
       },
       {
         field: 'branch',
-        name: colors.cyan('Branch')
+        name: vendor.yoctocolorsCjsExports.cyan('Branch')
       },
       {
         field: 'type',
-        name: colors.cyan('Type')
+        name: vendor.yoctocolorsCjsExports.cyan('Type')
       },
       {
         field: 'direct',
-        name: colors.cyan('Direct')
+        name: vendor.yoctocolorsCjsExports.cyan('Direct')
       }
     ]
   }
-  logger.logger.log(chalkTable(options, data.rows))
+  logger.logger.log(vendor.srcExports(options, data.rows))
 }
 
 async function handleDependencies({ limit, offset, outputKind }) {
@@ -3482,7 +3470,7 @@ async function fetchDiffScan({ after, before, orgSlug }) {
 async function outputDiffScan(result, { depth, file, outputKind }) {
   const dashboardUrl = result.diff_report_url
   const dashboardMessage = dashboardUrl
-    ? `\n View this diff scan in the Socket dashboard: ${colors.cyan(dashboardUrl)}`
+    ? `\n View this diff scan in the Socket dashboard: ${vendor.yoctocolorsCjsExports.cyan(dashboardUrl)}`
     : ''
 
   // When forcing json, or dumping to file, serialize to string such that it
@@ -3501,7 +3489,7 @@ async function outputDiffScan(result, { depth, file, outputKind }) {
     }
     if (file && file !== '-') {
       logger.logger.log(`Writing json to \`${file}\``)
-      fs$1.writeFile(file, JSON.stringify(result, null, 2), err => {
+      require$$0.writeFile(file, JSON.stringify(result, null, 2), err => {
         if (err) {
           logger.logger.fail(`Writing to \`${file}\` failed...`)
           logger.logger.error(err)
@@ -3820,7 +3808,6 @@ async function openGitHubPullRequest(
     if (!pat) {
       throw new Error('Missing SOCKET_SECURITY_GITHUB_PAT environment variable')
     }
-    const commitMsg = `chore: upgrade ${name} to ${version}`
     const url = `https://x-access-token:${pat}@github.com/${owner}/${repo}`
     await spawn.spawn('git', ['remote', 'set-url', 'origin', url], {
       cwd
@@ -3829,8 +3816,8 @@ async function openGitHubPullRequest(
     return await octokit.pulls.create({
       owner,
       repo,
-      title: commitMsg,
-      head: `${owner}:${branch}`,
+      title: `chore: upgrade ${name} to ${version}`,
+      head: branch,
       base: baseBranch,
       body: `[socket] Upgrade \`${name}\` to ${version}`
     })
@@ -4058,7 +4045,7 @@ async function getAlertsMapFromPnpmLockfile(lockfile, options_) {
     ...options.include
   }
   const { spinner } = options
-  const depTypes = lockfile_detectDepTypes.detectDepTypes(lockfile)
+  const depTypes = vendor.libExports$2.detectDepTypes(lockfile)
   const pkgIds = Object.keys(depTypes)
   let { length: remaining } = pkgIds
   const alertsByPkgId = new Map()
@@ -4260,7 +4247,7 @@ async function pnpmFix(
   pkgEnvDetails,
   { autoMerge, cwd, rangeStyle, spinner, test, testScript }
 ) {
-  const lockfile = await lockfile_fs.readWantedLockfile(cwd, {
+  const lockfile = await vendor.libExports$3.readWantedLockfile(cwd, {
     ignoreIncompatible: false
   })
   if (!lockfile) {
@@ -4509,7 +4496,7 @@ const binByAgent = new Map([
 async function getAgentExecPath(agent) {
   const binName = binByAgent.get(agent)
   return (
-    (await which(binName, {
+    (await vendor.libExports$1(binName, {
       nothrow: true
     })) ?? binName
   )
@@ -4521,7 +4508,7 @@ async function getAgentVersion(agentExecPath, cwd) {
       // Coerce version output into a valid semver version by passing it through
       // semver.coerce which strips leading v's, carets (^), comparators (<,<=,>,>=,=),
       // and tildes (~).
-      semver.coerce(
+      vendor.semverExports.coerce(
         // All package managers support the "--version" flag.
         (
           await spawn.spawn(agentExecPath, ['--version'], {
@@ -4615,7 +4602,7 @@ async function detectPackageEnvironment({
         cwd
       })
   const pkgPath =
-    pkgJsonPath && fs$1.existsSync(pkgJsonPath)
+    pkgJsonPath && require$$0.existsSync(pkgJsonPath)
       ? path$1.dirname(pkgJsonPath)
       : undefined
   const editablePkgJson = pkgPath
@@ -4669,7 +4656,7 @@ async function detectPackageEnvironment({
   // Lazily access constants.minimumVersionByAgent.
   const minSupportedAgentVersion = constants.minimumVersionByAgent.get(agent)
   const minSupportedNodeVersion = maintainedNodeVersions.last
-  const nodeVersion = semver.coerce(process$1.version)
+  const nodeVersion = vendor.semverExports.coerce(process$1.version)
   let lockSrc
   let pkgAgentRange
   let pkgNodeRange
@@ -4683,8 +4670,8 @@ async function detectPackageEnvironment({
       pkgAgentRange = engineAgentRange
       // Roughly check agent range as semver.coerce will strip leading
       // v's, carets (^), comparators (<,<=,>,>=,=), and tildes (~).
-      const coerced = semver.coerce(pkgAgentRange)
-      if (coerced && semver.lt(coerced, pkgMinAgentVersion)) {
+      const coerced = vendor.semverExports.coerce(pkgAgentRange)
+      if (coerced && vendor.semverExports.lt(coerced, pkgMinAgentVersion)) {
         pkgMinAgentVersion = coerced.version
       }
     }
@@ -4692,22 +4679,23 @@ async function detectPackageEnvironment({
       pkgNodeRange = engineNodeRange
       // Roughly check Node range as semver.coerce will strip leading
       // v's, carets (^), comparators (<,<=,>,>=,=), and tildes (~).
-      const coerced = semver.coerce(pkgNodeRange)
-      if (coerced && semver.lt(coerced, pkgMinNodeVersion)) {
+      const coerced = vendor.semverExports.coerce(pkgNodeRange)
+      if (coerced && vendor.semverExports.lt(coerced, pkgMinNodeVersion)) {
         pkgMinNodeVersion = coerced.version
       }
     }
     const browserslistQuery = pkgJson['browserslist']
     if (Array.isArray(browserslistQuery)) {
       // List Node targets in ascending version order.
-      const browserslistNodeTargets = browserslist(browserslistQuery)
+      const browserslistNodeTargets = vendor
+        .browserslistExports(browserslistQuery)
         .filter(v => /^node /i.test(v))
         .map(v => v.slice(5 /*'node '.length*/))
         .sort(sorts.naturalCompare)
       if (browserslistNodeTargets.length) {
         // browserslistNodeTargets[0] is the lowest Node target version.
-        const coerced = semver.coerce(browserslistNodeTargets[0])
-        if (coerced && semver.lt(coerced, pkgMinNodeVersion)) {
+        const coerced = vendor.semverExports.coerce(browserslistNodeTargets[0])
+        if (coerced && vendor.semverExports.lt(coerced, pkgMinNodeVersion)) {
           pkgMinNodeVersion = coerced.version
         }
       }
@@ -4723,17 +4711,20 @@ async function detectPackageEnvironment({
   // Does the system agent version meet our minimum supported agent version?
   const agentSupported =
     !!agentVersion &&
-    semver.satisfies(agentVersion, `>=${minSupportedAgentVersion}`)
+    vendor.semverExports.satisfies(
+      agentVersion,
+      `>=${minSupportedAgentVersion}`
+    )
 
   // Does the system Node version meet our minimum supported Node version?
-  const nodeSupported = semver.satisfies(
+  const nodeSupported = vendor.semverExports.satisfies(
     nodeVersion,
     `>=${minSupportedNodeVersion}`
   )
   const npmBuggyOverrides =
     agent === NPM$b &&
     !!agentVersion &&
-    semver.lt(agentVersion, NPM_BUGGY_OVERRIDES_PATCHED_VERSION$1)
+    vendor.semverExports.lt(agentVersion, NPM_BUGGY_OVERRIDES_PATCHED_VERSION$1)
   return {
     agent,
     agentExecPath,
@@ -4756,13 +4747,13 @@ async function detectPackageEnvironment({
     },
     pkgSupports: {
       // Does our minimum supported agent version meet the package's requirements?
-      agent: semver.satisfies(
+      agent: vendor.semverExports.satisfies(
         minSupportedAgentVersion,
         `>=${pkgMinAgentVersion}`
       ),
       // Does our supported Node versions meet the package's requirements?
       node: maintainedNodeVersions.some(v =>
-        semver.satisfies(v, `>=${pkgMinNodeVersion}`)
+        vendor.semverExports.satisfies(v, `>=${pkgMinNodeVersion}`)
       )
     }
   }
@@ -4910,12 +4901,12 @@ const config$z = {
     autoMerge: {
       type: 'boolean',
       default: false,
-      description: `Enable auto-merge for pull requests that Socket opens.\n                        See ${terminalLink('GitHub documentation', 'https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-auto-merge-for-pull-requests-in-your-repository')} for managing auto-merge for pull requests in your repository.`
+      description: `Enable auto-merge for pull requests that Socket opens.\n                        See ${vendor.terminalLinkExports('GitHub documentation', 'https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-auto-merge-for-pull-requests-in-your-repository')} for managing auto-merge for pull requests in your repository.`
     },
     rangeStyle: {
       type: 'string',
       default: 'preserve',
-      description: commonTags.stripIndent`
+      description: vendor.stripIndent`
       Define how updated dependency versions should be written in package.json.
       Available styles:
         *	caret - Use ^ range for compatible updates (e.g. ^1.2.3)
@@ -5024,11 +5015,11 @@ async function fetchPackageInfo(pkgName, pkgVersion, includeAllIssues) {
 const { NPM: NPM$9 } = registryConstants
 function formatScore$1(score) {
   if (score > 80) {
-    return colors.green(`${score}`)
+    return vendor.yoctocolorsCjsExports.green(`${score}`)
   } else if (score < 80 && score > 60) {
-    return colors.yellow(`${score}`)
+    return vendor.yoctocolorsCjsExports.yellow(`${score}`)
   }
-  return colors.red(`${score}`)
+  return vendor.yoctocolorsCjsExports.red(`${score}`)
 }
 function outputPackageIssuesDetails(packageData, outputMarkdown) {
   const issueDetails = packageData.filter(
@@ -5076,7 +5067,7 @@ function outputPackageInfo(
     return
   }
   if (outputKind === 'markdown') {
-    logger.logger.log(commonTags.stripIndents`
+    logger.logger.log(vendor.stripIndents`
       # Package report for ${pkgName}
 
       Package report card:
@@ -5133,8 +5124,8 @@ function outputPackageInfo(
   }
   if (outputKind !== 'markdown') {
     logger.logger.log(
-      colors.dim(
-        `\nOr rerun ${colors.italic(commandName)} using the ${colors.italic('--json')} flag to get full JSON output`
+      vendor.yoctocolorsCjsExports.dim(
+        `\nOr rerun ${vendor.yoctocolorsCjsExports.italic(commandName)} using the ${vendor.yoctocolorsCjsExports.italic('--json')} flag to get full JSON output`
       )
     )
   } else {
@@ -5265,7 +5256,7 @@ async function attemptLogin(apiBaseUrl, apiProxy) {
   apiProxy ??= shadowNpmInject.getConfigValue('apiProxy') ?? undefined
   const apiToken =
     (await prompts.password({
-      message: `Enter your ${terminalLink('Socket.dev API key', 'https://docs.socket.dev/docs/api-keys')} (leave blank for a public key)`
+      message: `Enter your ${vendor.terminalLinkExports('Socket.dev API key', 'https://docs.socket.dev/docs/api-keys')} (leave blank for a public key)`
     })) || SOCKET_PUBLIC_API_TOKEN
   // Lazily access constants.spinner.
   const { spinner } = constants
@@ -6011,7 +6002,7 @@ async function run$t(argv, importMeta, { parentName }) {
     subArgs.push('--verbose')
   }
   const dir = cwd
-  if (fs$1.existsSync(path$1.join(dir, 'build.sbt'))) {
+  if (require$$0.existsSync(path$1.join(dir, 'build.sbt'))) {
     logger.logger.log(
       'Detected a Scala sbt build, running default Scala generator...'
     )
@@ -6028,7 +6019,7 @@ async function run$t(argv, importMeta, { parentName }) {
     })
     return
   }
-  if (fs$1.existsSync(path$1.join(dir, 'gradlew'))) {
+  if (require$$0.existsSync(path$1.join(dir, 'gradlew'))) {
     logger.logger.log(
       'Detected a gradle build, running default gradle generator...'
     )
@@ -6542,7 +6533,7 @@ async function getWorkspaceGlobs(agent, pkgPath, editablePkgJson) {
       const yml = await shadowNpmInject.safeReadFile(workspacePath)
       if (yml) {
         try {
-          workspacePatterns = yaml.parse(yml)?.packages
+          workspacePatterns = vendor.distExports$1.parse(yml)?.packages
         } catch {}
         if (workspacePatterns) {
           break
@@ -7012,10 +7003,10 @@ async function addOverrides(pkgPath, pkgEnvDetails, options) {
   const depAliasMap = new Map()
   const depEntries = getDependencyEntries(editablePkgJson)
   const manifestEntries = manifestNpmOverrides.filter(({ 1: data }) =>
-    semver.satisfies(
+    vendor.semverExports.satisfies(
       // Roughly check Node range as semver.coerce will strip leading
       // v's, carets (^), comparators (<,<=,>,>=,=), and tildes (~).
-      semver.coerce(data.engines.node),
+      vendor.semverExports.coerce(data.engines.node),
       pkgEnvDetails.pkgRequirements.node
     )
   )
@@ -7023,7 +7014,7 @@ async function addOverrides(pkgPath, pkgEnvDetails, options) {
   // Chunk package names to process them in parallel 3 at a time.
   await promises.pEach(manifestEntries, 3, async ({ 1: data }) => {
     const { name: sockRegPkgName, package: origPkgName, version } = data
-    const major = semver.major(version)
+    const major = vendor.semverExports.major(version)
     const sockOverridePrefix = `${NPM$1}:${sockRegPkgName}@`
     const sockOverrideSpec = `${sockOverridePrefix}${pin ? version : `^${major}`}`
     for (const { 1: depObj } of depEntries) {
@@ -7047,7 +7038,8 @@ async function addOverrides(pkgPath, pkgEnvDetails, options) {
             thisSpec.startsWith(sockOverridePrefix) &&
             // Check the validity of the spec by passing it through npa and
             // seeing if it will coerce to a version.
-            semver.coerce(npa(thisSpec).rawSpec)?.version
+            vendor.semverExports.coerce(vendor.npaExports(thisSpec).rawSpec)
+              ?.version
           )
         ) {
           thisSpec = sockOverrideSpec
@@ -7104,20 +7096,22 @@ async function addOverrides(pkgPath, pkgEnvDetails, options) {
               if (thisSpec.startsWith(sockOverridePrefix)) {
                 if (
                   pin &&
-                  semver.major(
+                  vendor.semverExports.major(
                     // Check the validity of the spec by passing it through npa
                     // and seeing if it will coerce to a version. semver.coerce
                     // will strip leading v's, carets (^), comparators (<,<=,>,>=,=),
                     // and tildes (~). If not coerced to a valid version then
                     // default to the manifest entry version.
-                    semver.coerce(npa(thisSpec).rawSpec)?.version ?? version
+                    vendor.semverExports.coerce(
+                      vendor.npaExports(thisSpec).rawSpec
+                    )?.version ?? version
                   ) !== major
                 ) {
                   const otherVersion = (
                     await packages.fetchPackageManifest(thisSpec)
                   )?.version
                   if (otherVersion && otherVersion !== version) {
-                    newSpec = `${sockOverridePrefix}${pin ? otherVersion : `^${semver.major(otherVersion)}`}`
+                    newSpec = `${sockOverridePrefix}${pin ? otherVersion : `^${vendor.semverExports.major(otherVersion)}`}`
                   }
                 }
               } else {
@@ -7135,11 +7129,14 @@ async function addOverrides(pkgPath, pkgEnvDetails, options) {
     }
   })
   if (workspaceGlobs) {
-    const workspacePkgJsonPaths = await tinyglobby.glob(workspaceGlobs, {
-      absolute: true,
-      cwd: pkgPath,
-      ignore: ['**/node_modules/**', '**/bower_components/**']
-    })
+    const workspacePkgJsonPaths = await vendor.distExports.glob(
+      workspaceGlobs,
+      {
+        absolute: true,
+        cwd: pkgPath,
+        ignore: ['**/node_modules/**', '**/bower_components/**']
+      }
+    )
     // Chunk package names to process them in parallel 3 at a time.
     await promises.pEach(
       workspacePkgJsonPaths,
@@ -7376,7 +7373,7 @@ async function outputOrganizationList(data, outputKind = 'text') {
       }
       logger.logger.log('# Organizations\n')
       logger.logger.log(
-        `List of organizations associated with your API key, ending with: ${colors.italic(lastFiveOfApiToken)}\n`
+        `List of organizations associated with your API key, ending with: ${vendor.yoctocolorsCjsExports.italic(lastFiveOfApiToken)}\n`
       )
       logger.logger.log(
         `| Name${' '.repeat(mw1 - 4)} | ID${' '.repeat(mw2 - 2)} | Plan${' '.repeat(mw3 - 4)} |`
@@ -7396,12 +7393,12 @@ async function outputOrganizationList(data, outputKind = 'text') {
     }
     default: {
       logger.logger.log(
-        `List of organizations associated with your API key, ending with: ${colors.italic(lastFiveOfApiToken)}\n`
+        `List of organizations associated with your API key, ending with: ${vendor.yoctocolorsCjsExports.italic(lastFiveOfApiToken)}\n`
       )
       // Just dump
       for (const o of organizations) {
         logger.logger.log(
-          `- Name: ${colors.bold(o.name ?? 'undefined')}, ID: ${colors.bold(o.id)}, Plan: ${colors.bold(o.plan)}`
+          `- Name: ${vendor.yoctocolorsCjsExports.bold(o.name ?? 'undefined')}, ID: ${vendor.yoctocolorsCjsExports.bold(o.id)}, Plan: ${vendor.yoctocolorsCjsExports.bold(o.plan)}`
         )
       }
     }
@@ -8390,7 +8387,7 @@ function outputPurlsShallowScore(purls, packageData, outputKind) {
     return true // not found
   })
   if (outputKind === 'markdown') {
-    logger.logger.log(commonTags.stripIndents`
+    logger.logger.log(vendor.stripIndents`
       # Shallow Package Report
 
       This report contains the response for requesting data on some package url(s).
@@ -8404,14 +8401,16 @@ function outputPurlsShallowScore(purls, packageData, outputKind) {
     `)
     return
   }
-  logger.logger.log('\n' + colors.bold('Shallow Package Score') + '\n')
+  logger.logger.log(
+    '\n' + vendor.yoctocolorsCjsExports.bold('Shallow Package Score') + '\n'
+  )
   logger.logger.log(
     'Please note: The listed scores are ONLY for the package itself. It does NOT\n' +
       '             reflect the scores of any dependencies, transitive or otherwise.'
   )
   if (missing.length) {
     logger.logger.log(
-      `\nAt least one package had no response or the purl was not canonical:\n${missing.map(purl => '\n- ' + colors.bold(purl)).join('')}`
+      `\nAt least one package had no response or the purl was not canonical:\n${missing.map(purl => '\n- ' + vendor.yoctocolorsCjsExports.bold(purl)).join('')}`
     )
   }
   packageData.forEach(data => {
@@ -8431,7 +8430,7 @@ function formatReportCard(data, color) {
   const alertString = getAlertString(data.alerts, !color)
   const purl = 'pkg:' + data.type + '/' + data.name + '@' + data.version
   return [
-    'Package: ' + (color ? colors.bold(purl) : purl),
+    'Package: ' + (color ? vendor.yoctocolorsCjsExports.bold(purl) : purl),
     '',
     ...Object.entries(scoreResult).map(
       score =>
@@ -8447,16 +8446,18 @@ function formatScore(score, noColor = false, pad = false) {
     return padded
   }
   if (score >= 80) {
-    return colors.green(padded)
+    return vendor.yoctocolorsCjsExports.green(padded)
   }
   if (score >= 60) {
-    return colors.yellow(padded)
+    return vendor.yoctocolorsCjsExports.yellow(padded)
   }
-  return colors.red(padded)
+  return vendor.yoctocolorsCjsExports.red(padded)
 }
 function getAlertString(alerts, noColor = false) {
   if (!alerts?.length) {
-    return noColor ? `- Alerts: none!` : `- Alerts: ${colors.green('none')}!`
+    return noColor
+      ? `- Alerts: none!`
+      : `- Alerts: ${vendor.yoctocolorsCjsExports.green('none')}!`
   }
   const bad = alerts
     .filter(alert => alert.severity !== 'low' && alert.severity !== 'middle')
@@ -8486,22 +8487,32 @@ function getAlertString(alerts, noColor = false) {
     )
   }
   return (
-    `- Alerts (${colors.red(bad.length.toString())}/${colors.yellow(mid.length.toString())}/${low.length}):` +
+    `- Alerts (${vendor.yoctocolorsCjsExports.red(bad.length.toString())}/${vendor.yoctocolorsCjsExports.yellow(mid.length.toString())}/${low.length}):` +
     ' '.repeat(Math.max(0, 20 - colorless.length)) +
     '  ' +
     [
       bad
         .map(alert =>
-          colors.red(colors.dim(`[${alert.severity}] `) + alert.type)
+          vendor.yoctocolorsCjsExports.red(
+            vendor.yoctocolorsCjsExports.dim(`[${alert.severity}] `) +
+              alert.type
+          )
         )
         .join(', '),
       mid
         .map(alert =>
-          colors.yellow(colors.dim(`[${alert.severity}] `) + alert.type)
+          vendor.yoctocolorsCjsExports.yellow(
+            vendor.yoctocolorsCjsExports.dim(`[${alert.severity}] `) +
+              alert.type
+          )
         )
         .join(', '),
       low
-        .map(alert => colors.dim(`[${alert.severity}] `) + alert.type)
+        .map(
+          alert =>
+            vendor.yoctocolorsCjsExports.dim(`[${alert.severity}] `) +
+            alert.type
+        )
         .join(', ')
     ]
       .filter(Boolean)
@@ -9119,27 +9130,27 @@ async function outputListRepos(data, outputKind) {
     columns: [
       {
         field: 'id',
-        name: colors.magenta('ID')
+        name: vendor.yoctocolorsCjsExports.magenta('ID')
       },
       {
         field: 'name',
-        name: colors.magenta('Name')
+        name: vendor.yoctocolorsCjsExports.magenta('Name')
       },
       {
         field: 'visibility',
-        name: colors.magenta('Visibility')
+        name: vendor.yoctocolorsCjsExports.magenta('Visibility')
       },
       {
         field: 'default_branch',
-        name: colors.magenta('Default branch')
+        name: vendor.yoctocolorsCjsExports.magenta('Default branch')
       },
       {
         field: 'archived',
-        name: colors.magenta('Archived')
+        name: vendor.yoctocolorsCjsExports.magenta('Archived')
       }
     ]
   }
-  logger.logger.log(chalkTable(options, data.results))
+  logger.logger.log(vendor.srcExports(options, data.results))
 }
 
 async function handleListRepos({
@@ -9484,35 +9495,35 @@ async function outputViewRepo(data, outputKind) {
     columns: [
       {
         field: 'id',
-        name: colors.magenta('ID')
+        name: vendor.yoctocolorsCjsExports.magenta('ID')
       },
       {
         field: 'name',
-        name: colors.magenta('Name')
+        name: vendor.yoctocolorsCjsExports.magenta('Name')
       },
       {
         field: 'visibility',
-        name: colors.magenta('Visibility')
+        name: vendor.yoctocolorsCjsExports.magenta('Visibility')
       },
       {
         field: 'default_branch',
-        name: colors.magenta('Default branch')
+        name: vendor.yoctocolorsCjsExports.magenta('Default branch')
       },
       {
         field: 'homepage',
-        name: colors.magenta('Homepage')
+        name: vendor.yoctocolorsCjsExports.magenta('Homepage')
       },
       {
         field: 'archived',
-        name: colors.magenta('Archived')
+        name: vendor.yoctocolorsCjsExports.magenta('Archived')
       },
       {
         field: 'created_at',
-        name: colors.magenta('Created at')
+        name: vendor.yoctocolorsCjsExports.magenta('Created at')
       }
     ]
   }
-  logger.logger.log(chalkTable(options, [data]))
+  logger.logger.log(vendor.srcExports(options, [data]))
 }
 
 async function handleViewRepo(orgSlug, repoName, outputKind) {
@@ -10117,26 +10128,28 @@ async function outputListScans(data, outputKind) {
     columns: [
       {
         field: 'id',
-        name: colors.magenta('ID')
+        name: vendor.yoctocolorsCjsExports.magenta('ID')
       },
       {
         field: 'report_url',
-        name: colors.magenta('Scan URL')
+        name: vendor.yoctocolorsCjsExports.magenta('Scan URL')
       },
       {
         field: 'branch',
-        name: colors.magenta('Branch')
+        name: vendor.yoctocolorsCjsExports.magenta('Branch')
       },
       {
         field: 'created_at',
-        name: colors.magenta('Created at')
+        name: vendor.yoctocolorsCjsExports.magenta('Created at')
       }
     ]
   }
   const formattedResults = data.results.map(d => {
     return {
       id: d.id,
-      report_url: colors.underline(`${d.html_report_url}`),
+      report_url: vendor.yoctocolorsCjsExports.underline(
+        `${d.html_report_url}`
+      ),
       created_at: d.created_at
         ? new Date(d.created_at).toLocaleDateString('en-us', {
             year: 'numeric',
@@ -10147,7 +10160,7 @@ async function outputListScans(data, outputKind) {
       branch: d.branch
     }
   })
-  logger.logger.log(chalkTable(options, formattedResults))
+  logger.logger.log(vendor.srcExports(options, formattedResults))
 }
 
 async function handleListScans({
@@ -11148,7 +11161,7 @@ async function run$1(argv, importMeta, { parentName }) {
 }
 
 function addSocketWrapper(file) {
-  return fs$1.appendFile(
+  return require$$0.appendFile(
     file,
     'alias npm="socket npm"\nalias npx="socket npx"\n',
     err => {
@@ -11157,7 +11170,7 @@ function addSocketWrapper(file) {
       }
       // TODO: pretty sure you need to source the file or restart
       //       any terminal session before changes are reflected.
-      logger.logger.log(commonTags.stripIndents`
+      logger.logger.log(vendor.stripIndents`
 The alias was added to ${file}. Running 'npm install' will now be wrapped in Socket's "safe npm" 🎉
 If you want to disable it at any time, run \`socket wrapper --disable\`
 `)
@@ -11166,7 +11179,7 @@ If you want to disable it at any time, run \`socket wrapper --disable\`
 }
 
 function checkSocketWrapperSetup(file) {
-  const fileContent = fs$1.readFileSync(file, 'utf8')
+  const fileContent = require$$0.readFileSync(file, 'utf8')
   const linesWithSocketAlias = fileContent
     .split('\n')
     .filter(
@@ -11185,10 +11198,11 @@ async function postinstallWrapper() {
   // Lazily access constants.bashRcPath and constants.zshRcPath.
   const { bashRcPath, zshRcPath } = constants
   const socketWrapperEnabled =
-    (fs$1.existsSync(bashRcPath) && checkSocketWrapperSetup(bashRcPath)) ||
-    (fs$1.existsSync(zshRcPath) && checkSocketWrapperSetup(zshRcPath))
+    (require$$0.existsSync(bashRcPath) &&
+      checkSocketWrapperSetup(bashRcPath)) ||
+    (require$$0.existsSync(zshRcPath) && checkSocketWrapperSetup(zshRcPath))
   if (!socketWrapperEnabled) {
-    await installSafeNpm(commonTags.stripIndents`
+    await installSafeNpm(vendor.stripIndents`
       The Socket CLI is now successfully installed! 🎉
 
       To better protect yourself against supply-chain attacks, our "safe npm" wrapper can warn you about malicious packages whenever you run 'npm install'.
@@ -11213,10 +11227,10 @@ async function installSafeNpm(query) {
     // Lazily access constants.bashRcPath and constants.zshRcPath.
     const { bashRcPath, zshRcPath } = constants
     try {
-      if (fs$1.existsSync(bashRcPath)) {
+      if (require$$0.existsSync(bashRcPath)) {
         addSocketWrapper(bashRcPath)
       }
-      if (fs$1.existsSync(zshRcPath)) {
+      if (require$$0.existsSync(zshRcPath)) {
         addSocketWrapper(zshRcPath)
       }
     } catch (e) {
@@ -11228,7 +11242,7 @@ async function installSafeNpm(query) {
 }
 
 function removeSocketWrapper(file) {
-  return fs$1.readFile(file, 'utf8', function (err, data) {
+  return require$$0.readFile(file, 'utf8', function (err, data) {
     if (err) {
       logger.logger.fail('There was an error removing the alias:')
       logger.logger.error(err)
@@ -11240,7 +11254,7 @@ function removeSocketWrapper(file) {
         l => l !== 'alias npm="socket npm"' && l !== 'alias npx="socket npx"'
       )
     const updatedFileContent = linesWithoutSocketAlias.join('\n')
-    fs$1.writeFile(file, updatedFileContent, function (err) {
+    require$$0.writeFile(file, updatedFileContent, function (err) {
       if (err) {
         logger.logger.error(err)
         return
@@ -11328,21 +11342,27 @@ async function run(argv, importMeta, { parentName }) {
   // Lazily access constants.bashRcPath and constants.zshRcPath.
   const { bashRcPath, zshRcPath } = constants
   if (enable) {
-    if (fs$1.existsSync(bashRcPath) && !checkSocketWrapperSetup(bashRcPath)) {
+    if (
+      require$$0.existsSync(bashRcPath) &&
+      !checkSocketWrapperSetup(bashRcPath)
+    ) {
       addSocketWrapper(bashRcPath)
     }
-    if (fs$1.existsSync(zshRcPath) && !checkSocketWrapperSetup(zshRcPath)) {
+    if (
+      require$$0.existsSync(zshRcPath) &&
+      !checkSocketWrapperSetup(zshRcPath)
+    ) {
       addSocketWrapper(zshRcPath)
     }
   } else {
-    if (fs$1.existsSync(bashRcPath)) {
+    if (require$$0.existsSync(bashRcPath)) {
       removeSocketWrapper(bashRcPath)
     }
-    if (fs$1.existsSync(zshRcPath)) {
+    if (require$$0.existsSync(zshRcPath)) {
       removeSocketWrapper(zshRcPath)
     }
   }
-  if (!fs$1.existsSync(bashRcPath) && !fs$1.existsSync(zshRcPath)) {
+  if (!require$$0.existsSync(bashRcPath) && !require$$0.existsSync(zshRcPath)) {
     logger.logger.fail(
       'There was an issue setting up the alias in your bash profile'
     )
@@ -11356,7 +11376,7 @@ void (async () => {
   await vendor.updater({
     name: SOCKET_CLI_BIN_NAME,
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
-    version: '0.14.94',
+    version: '0.14.96',
     ttl: 86_400_000 /* 24 hours in milliseconds */
   })
   try {
@@ -11393,7 +11413,7 @@ void (async () => {
         argv: process$1.argv.slice(2),
         name: SOCKET_CLI_BIN_NAME,
         importMeta: {
-          url: `${require$$0.pathToFileURL(__filename)}`
+          url: `${require$$0$2.pathToFileURL(__filename)}`
         }
       }
     )
@@ -11411,8 +11431,8 @@ void (async () => {
       errorBody = e.body
     } else if (e instanceof Error) {
       errorTitle = 'Unexpected error'
-      errorMessage = ponyCause.messageWithCauses(e)
-      errorBody = ponyCause.stackWithCauses(e)
+      errorMessage = vendor.messageWithCauses(e)
+      errorBody = vendor.stackWithCauses(e)
     } else {
       errorTitle = 'Unexpected error with no details'
     }
@@ -11424,5 +11444,5 @@ void (async () => {
     await shadowNpmInject.captureException(e)
   }
 })()
-//# debugId=b5886abf-7fa0-44b9-8bda-b2bec382b60d
+//# debugId=98a204be-dc7b-4215-8459-2b077524373f
 //# sourceMappingURL=cli.js.map