@socketsecurity/cli 1.3.0 → 1.4.0

package/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.4.0](https://github.com/SocketDev/socket-cli/releases/tag/v1.4.0) - 2026-09-29
+
+### Changed
+- Updated the Coana CLI to v `15.11.4`.
+
 ## [1.3.0](https://github.com/SocketDev/socket-cli/releases/tag/v1.3.0) - 2026-09-29
 
 ### Added

package/README.md

@@ -1,8 +1,8 @@
 # Socket CLI
 
 [![Socket Badge](https://socket.dev/api/badge/npm/package/socket)](https://socket.dev/npm/package/socket)
-[![Follow @SocketSecurity](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.3.0/assets/fleet/badge-follow-x.svg)](https://twitter.com/SocketSecurity)
-[![Follow @socket.dev on Bluesky](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.3.0/assets/fleet/badge-follow-bluesky.svg)](https://bsky.app/profile/socket.dev)
+[![Follow @SocketSecurity](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.4.0/assets/fleet/badge-follow-x.svg)](https://twitter.com/SocketSecurity)
+[![Follow @socket.dev on Bluesky](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.4.0/assets/fleet/badge-follow-bluesky.svg)](https://bsky.app/profile/socket.dev)
 
 CLI for [Socket.dev](https://socket.dev) — scan dependencies, audit packages, apply security patches, and gate installs from your terminal or CI. This is the 1.x line of the published `socket` package on npm.
 
@@ -171,8 +171,8 @@ MIT
 <br/>
 <div align="center">
   <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.3.0/assets/fleet/socket-combomark-dark.svg">
-    <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.3.0/assets/fleet/socket-combomark-light.svg">
-    <img width="324" height="104" alt="Socket" src="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.3.0/assets/fleet/socket-combomark-light.svg">
+    <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.4.0/assets/fleet/socket-combomark-dark.svg">
+    <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.4.0/assets/fleet/socket-combomark-light.svg">
+    <img width="324" height="104" alt="Socket" src="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.4.0/assets/fleet/socket-combomark-light.svg">
   </picture>
 </div>

package/dist/cli.js

@@ -2693,7 +2693,11 @@ function assembleFacts(parsed, opts = {}) {
     finalNodes
   } = mergeByCoordinate(perRoot);
   const tool = parsed.tool || 'gradle';
-  const components = buildComponents(finalNodes);
+  const projectsByGav = new Map();
+  for (const p of parsed.projects.values()) {
+    projectsByGav.set(gav(p.group, p.name, p.version), p);
+  }
+  const components = buildComponents(finalNodes, projectsByGav);
   const projects = opts.emitProjects === false ? [] : buildProjects(parsed, directByRoot, perRoot);
   const metadata = {
     format: 'socket-facts-sbom',
@@ -2714,7 +2718,7 @@ function assembleFacts(parsed, opts = {}) {
   return {
     facts,
     report: buildReport(parsed),
-    artifactPaths: buildArtifactPaths(finalNodes, [...parsed.projects.values()], perRoot, fileExists)
+    artifactPaths: buildArtifactPaths(finalNodes, [...parsed.projects.values()], projectsByGav, perRoot, fileExists)
   };
 }
 function gav(group, name, version) {
@@ -2802,7 +2806,7 @@ function mergeByCoordinate(perRoot) {
     directByRoot
   };
 }
-function buildComponents(finalNodes) {
+function buildComponents(finalNodes, projectsByGav) {
   return [...finalNodes.keys()].sort().map(id => {
     const fn = finalNodes.get(id);
     const c = fn.coord;
@@ -2833,6 +2837,9 @@ function buildComponents(finalNodes) {
     if (!fn.prod) {
       comp.dev = true;
     }
+    if (projectsByGav.has(gav(c.group, c.name, c.version ?? ''))) {
+      comp.firstParty = true;
+    }
     if (fn.children.size) {
       comp.dependencies = [...fn.children].sort();
     }
@@ -2923,14 +2930,7 @@ function buildClasspathByProject(projects, perRoot) {
     1: ids
   }) => [key, [...ids].sort()]));
 }
-function buildArtifactPaths(finalNodes, projects, perRoot, fileExists) {
-  const projectsByGav = new Map();
-  for (const p of projects) {
-    projectsByGav.set(gav(p.group, p.name, p.version), {
-      sources: p.sources,
-      targets: p.targets
-    });
-  }
+function buildArtifactPaths(finalNodes, projects, projectsByGav, perRoot, fileExists) {
   const targetsByCoord = new Map();
   const targetsByGav = new Map();
   const sourcesByCoord = new Map();
@@ -24406,5 +24406,5 @@ process.on('unhandledRejection', async (reason, promise) => {
   // eslint-disable-next-line n/no-process-exit
   process.exit(1);
 });
-//# debugId=17ab66d3-57bb-403b-bee0-b3ebdf61ab9a
+//# debugId=df6cd218-d465-449e-b81a-890e662d0baf
 //# sourceMappingURL=cli.js.map