@socketsecurity/lib 1.3.2 → 1.3.3

package/dist/packages/operations.js

@@ -1,306 +1,3 @@
 /* Socket Lib - Built with esbuild */
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var operations_exports = {};
-__export(operations_exports, {
-  extractPackage: () => extractPackage,
-  findPackageExtensions: () => findPackageExtensions,
-  getReleaseTag: () => getReleaseTag,
-  packPackage: () => packPackage,
-  readPackageJson: () => readPackageJson,
-  readPackageJsonSync: () => readPackageJsonSync,
-  resolveGitHubTgzUrl: () => resolveGitHubTgzUrl,
-  resolvePackageName: () => resolvePackageName,
-  resolveRegistryPackageName: () => resolveRegistryPackageName
-});
-module.exports = __toCommonJS(operations_exports);
-var import_packages = require("#constants/packages");
-var import_process = require("#constants/process");
-var import_socket = require("#constants/socket");
-var import_fs = require("../fs");
-var import_objects = require("../objects");
-var import_normalize = require("./normalize");
-var import_paths = require("./paths");
-var import_specs = require("./specs");
-const abortSignal = (0, import_process.getAbortSignal)();
-const packageExtensions = (0, import_packages.getPackageExtensions)();
-const packumentCache = (0, import_packages.getPackumentCache)();
-const pacoteCachePath = (0, import_packages.getPacoteCachePath)();
-let _cacache;
-// @__NO_SIDE_EFFECTS__
-function getCacache() {
-  if (_cacache === void 0) {
-    _cacache = require("../external/cacache");
-  }
-  return _cacache;
-}
-let _fetcher;
-// @__NO_SIDE_EFFECTS__
-function getFetcher() {
-  if (_fetcher === void 0) {
-    const makeFetchHappen = require("../external/make-fetch-happen");
-    _fetcher = makeFetchHappen.defaults({
-      cachePath: pacoteCachePath,
-      // Prefer-offline: Staleness checks for cached data will be bypassed, but
-      // missing data will be requested from the server.
-      // https://github.com/npm/make-fetch-happen?tab=readme-ov-file#--optscache
-      cache: "force-cache"
-    });
-  }
-  return _fetcher;
-}
-let _npmPackageArg;
-// @__NO_SIDE_EFFECTS__
-function getNpmPackageArg() {
-  if (_npmPackageArg === void 0) {
-    _npmPackageArg = require("../external/npm-package-arg");
-  }
-  return _npmPackageArg;
-}
-let _pack;
-// @__NO_SIDE_EFFECTS__
-function getPack() {
-  if (_pack === void 0) {
-    _pack = require("../external/libnpmpack");
-  }
-  return _pack;
-}
-let _PackageURL;
-// @__NO_SIDE_EFFECTS__
-function getPackageURL() {
-  if (_PackageURL === void 0) {
-    const packageUrlJs = require("../external/@socketregistry/packageurl-js");
-    _PackageURL = packageUrlJs.PackageURL;
-  }
-  return _PackageURL;
-}
-let _pacote;
-// @__NO_SIDE_EFFECTS__
-function getPacote() {
-  if (_pacote === void 0) {
-    _pacote = require("../external/pacote");
-  }
-  return _pacote;
-}
-let _semver;
-// @__NO_SIDE_EFFECTS__
-function getSemver() {
-  if (_semver === void 0) {
-    _semver = require("../external/semver");
-  }
-  return _semver;
-}
-// @__NO_SIDE_EFFECTS__
-async function extractPackage(pkgNameOrId, options, callback) {
-  let actualCallback = callback;
-  let actualOptions = options;
-  if (arguments.length === 2 && typeof options === "function") {
-    actualCallback = options;
-    actualOptions = void 0;
-  }
-  const { dest, tmpPrefix, ...extractOptions_ } = {
-    __proto__: null,
-    ...actualOptions
-  };
-  const extractOptions = {
-    packumentCache,
-    preferOffline: true,
-    ...extractOptions_
-  };
-  const pacote = /* @__PURE__ */ getPacote();
-  if (typeof dest === "string") {
-    await pacote.extract(pkgNameOrId, dest, extractOptions);
-    if (typeof actualCallback === "function") {
-      await actualCallback(dest);
-    }
-  } else {
-    const cacache = /* @__PURE__ */ getCacache();
-    await cacache.tmp.withTmp(
-      pacoteCachePath,
-      { tmpPrefix },
-      async (tmpDirPath) => {
-        await pacote.extract(pkgNameOrId, tmpDirPath, extractOptions);
-        if (typeof actualCallback === "function") {
-          await actualCallback(tmpDirPath);
-        }
-      }
-    );
-  }
-}
-// @__NO_SIDE_EFFECTS__
-function findPackageExtensions(pkgName, pkgVer) {
-  let result;
-  for (const entry of packageExtensions) {
-    const selector = String(entry[0]);
-    const ext = entry[1];
-    const lastAtSignIndex = selector.lastIndexOf("@");
-    const name = selector.slice(0, lastAtSignIndex);
-    if (pkgName === name) {
-      const semver = /* @__PURE__ */ getSemver();
-      const range = selector.slice(lastAtSignIndex + 1);
-      if (semver.satisfies(pkgVer, range)) {
-        if (result === void 0) {
-          result = {};
-        }
-        if (typeof ext === "object" && ext !== null) {
-          (0, import_objects.merge)(result, ext);
-        }
-      }
-    }
-  }
-  return result;
-}
-// @__NO_SIDE_EFFECTS__
-function getReleaseTag(spec) {
-  if (!spec) {
-    return "";
-  }
-  let atIndex = -1;
-  if (spec.startsWith("@")) {
-    atIndex = spec.indexOf("@", 1);
-  } else {
-    atIndex = spec.indexOf("@");
-  }
-  if (atIndex !== -1) {
-    return spec.slice(atIndex + 1);
-  }
-  return "";
-}
-// @__NO_SIDE_EFFECTS__
-async function packPackage(spec, options) {
-  const pack = /* @__PURE__ */ getPack();
-  return await pack(spec, {
-    __proto__: null,
-    signal: abortSignal,
-    ...options,
-    packumentCache,
-    preferOffline: true
-  });
-}
-// @__NO_SIDE_EFFECTS__
-async function readPackageJson(filepath, options) {
-  const { editable, normalize, throws, ...normalizeOptions } = {
-    __proto__: null,
-    ...options
-  };
-  const pkgJson = await (0, import_fs.readJson)((0, import_paths.resolvePackageJsonPath)(filepath), {
-    throws
-  });
-  if (pkgJson) {
-    if (editable) {
-      const { toEditablePackageJson } = require("./editable");
-      return await toEditablePackageJson(pkgJson, {
-        path: filepath,
-        normalize,
-        ...normalizeOptions
-      });
-    }
-    return normalize ? (0, import_normalize.normalizePackageJson)(pkgJson, normalizeOptions) : pkgJson;
-  }
-  return void 0;
-}
-// @__NO_SIDE_EFFECTS__
-function readPackageJsonSync(filepath, options) {
-  const { editable, normalize, throws, ...normalizeOptions } = {
-    __proto__: null,
-    ...options
-  };
-  const pkgJson = (0, import_fs.readJsonSync)((0, import_paths.resolvePackageJsonPath)(filepath), { throws });
-  if (pkgJson) {
-    if (editable) {
-      const { toEditablePackageJsonSync } = require("./editable");
-      return toEditablePackageJsonSync(pkgJson, {
-        path: filepath,
-        normalize,
-        ...normalizeOptions
-      });
-    }
-    return normalize ? (0, import_normalize.normalizePackageJson)(pkgJson, normalizeOptions) : pkgJson;
-  }
-  return void 0;
-}
-// @__NO_SIDE_EFFECTS__
-async function resolveGitHubTgzUrl(pkgNameOrId, where) {
-  const whereIsPkgJson = (0, import_objects.isObjectObject)(where);
-  const pkgJson = whereIsPkgJson ? where : await /* @__PURE__ */ readPackageJson(where, { normalize: true });
-  if (!pkgJson) {
-    return "";
-  }
-  const { version } = pkgJson;
-  const npmPackageArg = /* @__PURE__ */ getNpmPackageArg();
-  const parsedSpec = npmPackageArg(
-    pkgNameOrId,
-    whereIsPkgJson ? void 0 : where
-  );
-  const isTarballUrl = (0, import_specs.isGitHubTgzSpec)(parsedSpec);
-  if (isTarballUrl) {
-    return parsedSpec.saveSpec || "";
-  }
-  const isGitHubUrl = (0, import_specs.isGitHubUrlSpec)(parsedSpec);
-  const repository = pkgJson.repository;
-  const { project, user } = (isGitHubUrl ? parsedSpec.hosted : (0, import_specs.getRepoUrlDetails)(repository?.url)) || { project: "", user: "" };
-  if (user && project) {
-    let apiUrl = "";
-    if (isGitHubUrl) {
-      apiUrl = (0, import_specs.gitHubTagRefUrl)(user, project, parsedSpec.gitCommittish || "");
-    } else {
-      const fetcher = /* @__PURE__ */ getFetcher();
-      const versionStr = version;
-      apiUrl = (0, import_specs.gitHubTagRefUrl)(user, project, `v${versionStr}`);
-      if (!(await fetcher(apiUrl, { method: "head" })).ok) {
-        apiUrl = (0, import_specs.gitHubTagRefUrl)(user, project, versionStr);
-        if (!(await fetcher(apiUrl, { method: "head" })).ok) {
-          apiUrl = "";
-        }
-      }
-    }
-    if (apiUrl) {
-      const fetcher = /* @__PURE__ */ getFetcher();
-      const resp = await fetcher(apiUrl);
-      const json = await resp.json();
-      const sha = json?.object?.sha;
-      if (sha) {
-        return (0, import_specs.gitHubTgzUrl)(user, project, sha);
-      }
-    }
-  }
-  return "";
-}
-// @__NO_SIDE_EFFECTS__
-function resolvePackageName(purlObj, delimiter = "/") {
-  const { name, namespace } = purlObj;
-  return `${namespace ? `${namespace}${delimiter}` : ""}${name}`;
-}
-// @__NO_SIDE_EFFECTS__
-function resolveRegistryPackageName(pkgName) {
-  const purlObj = (/* @__PURE__ */ getPackageURL()).fromString(`pkg:npm/${pkgName}`);
-  return purlObj.namespace ? `${purlObj.namespace.slice(1)}${import_socket.REGISTRY_SCOPE_DELIMITER}${purlObj.name}` : pkgName;
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  extractPackage,
-  findPackageExtensions,
-  getReleaseTag,
-  packPackage,
-  readPackageJson,
-  readPackageJsonSync,
-  resolveGitHubTgzUrl,
-  resolvePackageName,
-  resolveRegistryPackageName
-});
+var y=Object.defineProperty;var q=Object.getOwnPropertyDescriptor;var $=Object.getOwnPropertyNames;var C=Object.prototype.hasOwnProperty;var A=(t,e)=>{for(var a in e)y(t,a,{get:e[a],enumerable:!0})},I=(t,e,a,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let r of $(e))!C.call(t,r)&&r!==a&&y(t,r,{get:()=>e[r],enumerable:!(n=q(e,r))||n.enumerable});return t};var L=t=>I(y({},"__esModule",{value:!0}),t);var oe={};A(oe,{extractPackage:()=>Q,findPackageExtensions:()=>V,getReleaseTag:()=>X,packPackage:()=>Z,readPackageJson:()=>T,readPackageJsonSync:()=>ee,resolveGitHubTgzUrl:()=>te,resolvePackageName:()=>ne,resolveRegistryPackageName:()=>ae});module.exports=L(oe);var m=require("#constants/packages"),z=require("#constants/process"),E=require("#constants/socket"),d=require("../fs"),k=require("../objects"),S=require("./normalize"),U=require("./paths"),s=require("./specs");const G=(0,z.getAbortSignal)(),M=(0,m.getPackageExtensions)(),H=(0,m.getPackumentCache)(),F=(0,m.getPacoteCachePath)();let b;function N(){return b===void 0&&(b=require("../external/cacache")),b}let x;function v(){return x===void 0&&(x=require("../external/make-fetch-happen").defaults({cachePath:F,cache:"force-cache"})),x}let _;function D(){return _===void 0&&(_=require("../external/npm-package-arg")),_}let O;function W(){return O===void 0&&(O=require("../external/libnpmpack")),O}let w;function Y(){return w===void 0&&(w=require("../external/@socketregistry/packageurl-js").PackageURL),w}let J;function B(){return J===void 0&&(J=require("../external/pacote")),J}let R;function K(){return R===void 0&&(R=require("../external/semver")),R}async function Q(t,e,a){let n=a,r=e;arguments.length===2&&typeof e=="function"&&(n=e,r=void 0);const{dest:i,tmpPrefix:o,...c}={__proto__:null,...r},u={packumentCache:H,preferOffline:!0,...c},g=B();typeof i=="string"?(await g.extract(t,i,u),typeof n=="function"&&await n(i)):await N().tmp.withTmp(F,{tmpPrefix:o},async p=>{await g.extract(t,p,u),typeof n=="function"&&await n(p)})}function V(t,e){let a;for(const n of M){const r=String(n[0]),i=n[1],o=r.lastIndexOf("@"),c=r.slice(0,o);if(t===c){const u=K(),g=r.slice(o+1);u.satisfies(e,g)&&(a===void 0&&(a={}),typeof i=="object"&&i!==null&&(0,k.merge)(a,i))}}return a}function X(t){if(!t)return"";let e=-1;return t.startsWith("@")?e=t.indexOf("@",1):e=t.indexOf("@"),e!==-1?t.slice(e+1):""}async function Z(t,e){return await W()(t,{__proto__:null,signal:G,...e,packumentCache:H,preferOffline:!0})}async function T(t,e){const{editable:a,normalize:n,throws:r,...i}={__proto__:null,...e},o=await(0,d.readJson)((0,U.resolvePackageJsonPath)(t),{throws:r});if(o){if(a){const{toEditablePackageJson:c}=require("./editable");return await c(o,{path:t,normalize:n,...i})}return n?(0,S.normalizePackageJson)(o,i):o}}function ee(t,e){const{editable:a,normalize:n,throws:r,...i}={__proto__:null,...e},o=(0,d.readJsonSync)((0,U.resolvePackageJsonPath)(t),{throws:r});if(o){if(a){const{toEditablePackageJsonSync:c}=require("./editable");return c(o,{path:t,normalize:n,...i})}return n?(0,S.normalizePackageJson)(o,i):o}}async function te(t,e){const a=(0,k.isObjectObject)(e),n=a?e:await T(e,{normalize:!0});if(!n)return"";const{version:r}=n,o=D()(t,a?void 0:e);if((0,s.isGitHubTgzSpec)(o))return o.saveSpec||"";const u=(0,s.isGitHubUrlSpec)(o),g=n.repository,{project:l,user:p}=(u?o.hosted:(0,s.getRepoUrlDetails)(g?.url))||{project:"",user:""};if(p&&l){let f="";if(u)f=(0,s.gitHubTagRefUrl)(p,l,o.gitCommittish||"");else{const P=v(),h=r;f=(0,s.gitHubTagRefUrl)(p,l,`v${h}`),(await P(f,{method:"head"})).ok||(f=(0,s.gitHubTagRefUrl)(p,l,h),(await P(f,{method:"head"})).ok||(f=""))}if(f){const j=(await(await v()(f)).json())?.object?.sha;if(j)return(0,s.gitHubTgzUrl)(p,l,j)}}return""}function ne(t,e="/"){const{name:a,namespace:n}=t;return`${n?`${n}${e}`:""}${a}`}function ae(t){const e=Y().fromString(`pkg:npm/${t}`);return e.namespace?`${e.namespace.slice(1)}${E.REGISTRY_SCOPE_DELIMITER}${e.name}`:t}0&&(module.exports={extractPackage,findPackageExtensions,getReleaseTag,packPackage,readPackageJson,readPackageJsonSync,resolveGitHubTgzUrl,resolvePackageName,resolveRegistryPackageName});
 //# sourceMappingURL=operations.js.map

package/dist/packages/operations.js.map

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../../src/packages/operations.ts"],
   "sourcesContent": ["/**\n * @fileoverview Package operations including extraction, packing, and I/O.\n */\n\nimport {\n  getPackageExtensions,\n  getPackumentCache,\n  getPacoteCachePath,\n} from '#constants/packages'\nimport { getAbortSignal } from '#constants/process'\nimport { REGISTRY_SCOPE_DELIMITER } from '#constants/socket'\n\nconst abortSignal = getAbortSignal()\nconst packageExtensions = getPackageExtensions()\nconst packumentCache = getPackumentCache()\nconst pacoteCachePath = getPacoteCachePath()\n\nimport { readJson, readJsonSync } from '../fs'\nimport { isObjectObject, merge } from '../objects'\nimport type {\n  ExtractOptions,\n  NormalizeOptions,\n  PackageJson,\n  PacoteOptions,\n  ReadPackageJsonOptions,\n} from '../packages'\nimport { normalizePackageJson } from './normalize'\nimport { resolvePackageJsonPath } from './paths'\nimport {\n  getRepoUrlDetails,\n  gitHubTagRefUrl,\n  gitHubTgzUrl,\n  isGitHubTgzSpec,\n  isGitHubUrlSpec,\n} from './specs'\n\nlet _cacache: typeof import('cacache') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getCacache() {\n  if (_cacache === undefined) {\n    _cacache = /*@__PURE__*/ require('../external/cacache')\n  }\n  return _cacache as typeof import('cacache')\n}\n\n// Type for make-fetch-happen fetcher function.\ntype MakeFetchHappenFetcher = ((\n  url: string,\n  opts?: unknown,\n) => Promise<Response>) & {\n  defaults: (opts: unknown) => MakeFetchHappenFetcher\n  delete: (url: string, opts?: unknown) => Promise<boolean>\n}\n\nlet _fetcher: MakeFetchHappenFetcher | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getFetcher() {\n  if (_fetcher === undefined) {\n    const makeFetchHappen =\n      /*@__PURE__*/ require('../external/make-fetch-happen')\n    _fetcher = makeFetchHappen.defaults({\n      cachePath: pacoteCachePath,\n      // Prefer-offline: Staleness checks for cached data will be bypassed, but\n      // missing data will be requested from the server.\n      // https://github.com/npm/make-fetch-happen?tab=readme-ov-file#--optscache\n      cache: 'force-cache',\n    })\n  }\n  return _fetcher as MakeFetchHappenFetcher\n}\n\nlet _npmPackageArg: typeof import('npm-package-arg') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getNpmPackageArg() {\n  if (_npmPackageArg === undefined) {\n    _npmPackageArg = /*@__PURE__*/ require('../external/npm-package-arg')\n  }\n  return _npmPackageArg as typeof import('npm-package-arg')\n}\n\nlet _pack: typeof import('../external/libnpmpack') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getPack() {\n  if (_pack === undefined) {\n    _pack = /*@__PURE__*/ require('../external/libnpmpack')\n  }\n  return _pack as typeof import('../external/libnpmpack')\n}\n\nlet _PackageURL:\n  | typeof import('@socketregistry/packageurl-js').PackageURL\n  | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getPackageURL() {\n  if (_PackageURL === undefined) {\n    // The 'packageurl-js' package is browser safe.\n    const packageUrlJs =\n      /*@__PURE__*/ require('../external/@socketregistry/packageurl-js')\n    _PackageURL = packageUrlJs.PackageURL\n  }\n  return _PackageURL as typeof import('@socketregistry/packageurl-js').PackageURL\n}\n\nlet _pacote: typeof import('pacote') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getPacote() {\n  if (_pacote === undefined) {\n    _pacote = /*@__PURE__*/ require('../external/pacote')\n  }\n  return _pacote as typeof import('pacote')\n}\n\nlet _semver: typeof import('semver') | undefined\n/*@__NO_SIDE_EFFECTS__*/\nfunction getSemver() {\n  if (_semver === undefined) {\n    // The 'semver' package is browser safe.\n    _semver = /*@__PURE__*/ require('../external/semver')\n  }\n  return _semver as typeof import('semver')\n}\n\n/**\n * Extract a package to a destination directory.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport async function extractPackage(\n  pkgNameOrId: string,\n  options?: ExtractOptions,\n  callback?: (destPath: string) => Promise<unknown>,\n): Promise<void> {\n  let actualCallback = callback\n  let actualOptions = options\n  // biome-ignore lint/complexity/noArguments: Function overload support.\n  if (arguments.length === 2 && typeof options === 'function') {\n    actualCallback = options\n    actualOptions = undefined\n  }\n  const { dest, tmpPrefix, ...extractOptions_ } = {\n    __proto__: null,\n    ...actualOptions,\n  } as ExtractOptions\n  const extractOptions = {\n    packumentCache,\n    preferOffline: true,\n    ...extractOptions_,\n  }\n  const pacote = getPacote()\n  if (typeof dest === 'string') {\n    await pacote.extract(pkgNameOrId, dest, extractOptions)\n    if (typeof actualCallback === 'function') {\n      await actualCallback(dest)\n    }\n  } else {\n    // The DefinitelyTyped types for cacache.tmp.withTmp are incorrect.\n    // It DOES returns a promise.\n    const cacache = getCacache()\n    await cacache.tmp.withTmp(\n      pacoteCachePath,\n      { tmpPrefix },\n      async (tmpDirPath: string) => {\n        await pacote.extract(pkgNameOrId, tmpDirPath, extractOptions)\n        if (typeof actualCallback === 'function') {\n          await actualCallback(tmpDirPath)\n        }\n      },\n    )\n  }\n}\n\n/**\n * Find package extensions for a given package.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function findPackageExtensions(\n  pkgName: string,\n  pkgVer: string,\n): unknown {\n  let result: unknown\n  for (const entry of packageExtensions) {\n    const selector = String(entry[0])\n    const ext = entry[1]\n    const lastAtSignIndex = selector.lastIndexOf('@')\n    const name = selector.slice(0, lastAtSignIndex)\n    if (pkgName === name) {\n      const semver = getSemver()\n      const range = selector.slice(lastAtSignIndex + 1)\n      if (semver.satisfies(pkgVer, range)) {\n        if (result === undefined) {\n          result = {}\n        }\n        if (typeof ext === 'object' && ext !== null) {\n          merge(result as object, ext)\n        }\n      }\n    }\n  }\n  return result\n}\n\n/**\n * Get the release tag for a version.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function getReleaseTag(spec: string): string {\n  if (!spec) {\n    return ''\n  }\n  // Handle scoped packages like @scope/package vs @scope/package@tag.\n  let atIndex = -1\n  if (spec.startsWith('@')) {\n    // Find the second @ for scoped packages.\n    atIndex = spec.indexOf('@', 1)\n  } else {\n    // Find the first @ for unscoped packages.\n    atIndex = spec.indexOf('@')\n  }\n  if (atIndex !== -1) {\n    return spec.slice(atIndex + 1)\n  }\n  return ''\n}\n\n/**\n * Pack a package tarball using pacote.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport async function packPackage(\n  spec: string,\n  options?: PacoteOptions,\n): Promise<unknown> {\n  const pack = getPack()\n  return await pack(spec, {\n    __proto__: null,\n    signal: abortSignal,\n    ...options,\n    packumentCache,\n    preferOffline: true,\n  } as PacoteOptions)\n}\n\n/**\n * Read and parse a package.json file asynchronously.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport async function readPackageJson(\n  filepath: string,\n  options?: ReadPackageJsonOptions,\n): Promise<PackageJson | undefined> {\n  const { editable, normalize, throws, ...normalizeOptions } = {\n    __proto__: null,\n    ...options,\n  } as ReadPackageJsonOptions\n  const pkgJson = (await readJson(resolvePackageJsonPath(filepath), {\n    throws,\n  })) as PackageJson | undefined\n  if (pkgJson) {\n    if (editable) {\n      // Import toEditablePackageJson to avoid circular dependency.\n      const { toEditablePackageJson } = require('./editable')\n      return await toEditablePackageJson(pkgJson, {\n        path: filepath,\n        normalize,\n        ...normalizeOptions,\n      })\n    }\n    return normalize ? normalizePackageJson(pkgJson, normalizeOptions) : pkgJson\n  }\n  return undefined\n}\n\n/**\n * Read and parse package.json from a file path synchronously.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function readPackageJsonSync(\n  filepath: string,\n  options?: NormalizeOptions & { editable?: boolean; throws?: boolean },\n): PackageJson | undefined {\n  const { editable, normalize, throws, ...normalizeOptions } = {\n    __proto__: null,\n    ...options,\n  } as NormalizeOptions & {\n    editable?: boolean\n    throws?: boolean\n    normalize?: boolean\n  }\n  const pkgJson = readJsonSync(resolvePackageJsonPath(filepath), { throws }) as\n    | PackageJson\n    | undefined\n  if (pkgJson) {\n    if (editable) {\n      // Import toEditablePackageJsonSync to avoid circular dependency.\n      const { toEditablePackageJsonSync } = require('./editable')\n      return toEditablePackageJsonSync(pkgJson, {\n        path: filepath,\n        normalize,\n        ...normalizeOptions,\n      })\n    }\n    return normalize ? normalizePackageJson(pkgJson, normalizeOptions) : pkgJson\n  }\n  return undefined\n}\n\n/**\n * Resolve GitHub tarball URL for a package specifier.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport async function resolveGitHubTgzUrl(\n  pkgNameOrId: string,\n  where?: unknown,\n): Promise<string> {\n  const whereIsPkgJson = isObjectObject(where)\n  const pkgJson = whereIsPkgJson\n    ? where\n    : await readPackageJson(where as string, { normalize: true })\n  if (!pkgJson) {\n    return ''\n  }\n  const { version } = pkgJson\n  const npmPackageArg = getNpmPackageArg()\n  const parsedSpec = npmPackageArg(\n    pkgNameOrId,\n    whereIsPkgJson ? undefined : (where as string),\n  )\n  const isTarballUrl = isGitHubTgzSpec(parsedSpec)\n  if (isTarballUrl) {\n    return parsedSpec.saveSpec || ''\n  }\n  const isGitHubUrl = isGitHubUrlSpec(parsedSpec)\n  const repository = pkgJson.repository as { url?: string }\n  const { project, user } = (isGitHubUrl\n    ? parsedSpec.hosted\n    : getRepoUrlDetails(repository?.url)) || { project: '', user: '' }\n\n  if (user && project) {\n    let apiUrl = ''\n    if (isGitHubUrl) {\n      apiUrl = gitHubTagRefUrl(user, project, parsedSpec.gitCommittish || '')\n    } else {\n      const fetcher = getFetcher()\n      const versionStr = version as string\n      // First try to resolve the sha for a tag starting with \"v\", e.g. v1.2.3.\n      apiUrl = gitHubTagRefUrl(user, project, `v${versionStr}`)\n      if (!(await fetcher(apiUrl, { method: 'head' })).ok) {\n        // If a sha isn't found, try again with the \"v\" removed, e.g. 1.2.3.\n        apiUrl = gitHubTagRefUrl(user, project, versionStr)\n        if (!(await fetcher(apiUrl, { method: 'head' })).ok) {\n          apiUrl = ''\n        }\n      }\n    }\n    if (apiUrl) {\n      const fetcher = getFetcher()\n      const resp = await fetcher(apiUrl)\n      const json = (await resp.json()) as { object?: { sha?: string } }\n      const sha = json?.object?.sha\n      if (sha) {\n        return gitHubTgzUrl(user, project, sha)\n      }\n    }\n  }\n  return ''\n}\n\n/**\n * Resolve full package name from a PURL object with custom delimiter.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function resolvePackageName(\n  purlObj: { name: string; namespace?: string },\n  delimiter: string = '/',\n): string {\n  const { name, namespace } = purlObj\n  return `${namespace ? `${namespace}${delimiter}` : ''}${name}`\n}\n\n/**\n * Convert npm package name to Socket registry format with delimiter.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function resolveRegistryPackageName(pkgName: string): string {\n  const purlObj = getPackageURL().fromString(`pkg:npm/${pkgName}`)\n  return purlObj.namespace\n    ? `${purlObj.namespace.slice(1)}${REGISTRY_SCOPE_DELIMITER}${purlObj.name}`\n    : pkgName\n}\n\n// Re-export types from lib/packages.\nexport type { PackageJson } from '../packages'\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,sBAIO;AACP,qBAA+B;AAC/B,oBAAyC;AAOzC,gBAAuC;AACvC,qBAAsC;AAQtC,uBAAqC;AACrC,mBAAuC;AACvC,mBAMO;AAtBP,MAAM,kBAAc,+BAAe;AACnC,MAAM,wBAAoB,sCAAqB;AAC/C,MAAM,qBAAiB,mCAAkB;AACzC,MAAM,sBAAkB,oCAAmB;AAqB3C,IAAI;AAAA;AAEJ,SAAS,aAAa;AACpB,MAAI,aAAa,QAAW;AAC1B,eAAyB,QAAQ,qBAAqB;AAAA,EACxD;AACA,SAAO;AACT;AAWA,IAAI;AAAA;AAEJ,SAAS,aAAa;AACpB,MAAI,aAAa,QAAW;AAC1B,UAAM,kBACU,QAAQ,+BAA+B;AACvD,eAAW,gBAAgB,SAAS;AAAA,MAClC,WAAW;AAAA;AAAA;AAAA;AAAA,MAIX,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAEJ,SAAS,mBAAmB;AAC1B,MAAI,mBAAmB,QAAW;AAChC,qBAA+B,QAAQ,6BAA6B;AAAA,EACtE;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAEJ,SAAS,UAAU;AACjB,MAAI,UAAU,QAAW;AACvB,YAAsB,QAAQ,wBAAwB;AAAA,EACxD;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAIJ,SAAS,gBAAgB;AACvB,MAAI,gBAAgB,QAAW;AAE7B,UAAM,eACU,QAAQ,2CAA2C;AACnE,kBAAc,aAAa;AAAA,EAC7B;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAEJ,SAAS,YAAY;AACnB,MAAI,YAAY,QAAW;AACzB,cAAwB,QAAQ,oBAAoB;AAAA,EACtD;AACA,SAAO;AACT;AAEA,IAAI;AAAA;AAEJ,SAAS,YAAY;AACnB,MAAI,YAAY,QAAW;AAEzB,cAAwB,QAAQ,oBAAoB;AAAA,EACtD;AACA,SAAO;AACT;AAAA;AAMA,eAAsB,eACpB,aACA,SACA,UACe;AACf,MAAI,iBAAiB;AACrB,MAAI,gBAAgB;AAEpB,MAAI,UAAU,WAAW,KAAK,OAAO,YAAY,YAAY;AAC3D,qBAAiB;AACjB,oBAAgB;AAAA,EAClB;AACA,QAAM,EAAE,MAAM,WAAW,GAAG,gBAAgB,IAAI;AAAA,IAC9C,WAAW;AAAA,IACX,GAAG;AAAA,EACL;AACA,QAAM,iBAAiB;AAAA,IACrB;AAAA,IACA,eAAe;AAAA,IACf,GAAG;AAAA,EACL;AACA,QAAM,SAAS,0BAAU;AACzB,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,OAAO,QAAQ,aAAa,MAAM,cAAc;AACtD,QAAI,OAAO,mBAAmB,YAAY;AACxC,YAAM,eAAe,IAAI;AAAA,IAC3B;AAAA,EACF,OAAO;AAGL,UAAM,UAAU,2BAAW;AAC3B,UAAM,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA,EAAE,UAAU;AAAA,MACZ,OAAO,eAAuB;AAC5B,cAAM,OAAO,QAAQ,aAAa,YAAY,cAAc;AAC5D,YAAI,OAAO,mBAAmB,YAAY;AACxC,gBAAM,eAAe,UAAU;AAAA,QACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAAA;AAMO,SAAS,sBACd,SACA,QACS;AACT,MAAI;AACJ,aAAW,SAAS,mBAAmB;AACrC,UAAM,WAAW,OAAO,MAAM,CAAC,CAAC;AAChC,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,kBAAkB,SAAS,YAAY,GAAG;AAChD,UAAM,OAAO,SAAS,MAAM,GAAG,eAAe;AAC9C,QAAI,YAAY,MAAM;AACpB,YAAM,SAAS,0BAAU;AACzB,YAAM,QAAQ,SAAS,MAAM,kBAAkB,CAAC;AAChD,UAAI,OAAO,UAAU,QAAQ,KAAK,GAAG;AACnC,YAAI,WAAW,QAAW;AACxB,mBAAS,CAAC;AAAA,QACZ;AACA,YAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,oCAAM,QAAkB,GAAG;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAAA;AAMO,SAAS,cAAc,MAAsB;AAClD,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI,UAAU;AACd,MAAI,KAAK,WAAW,GAAG,GAAG;AAExB,cAAU,KAAK,QAAQ,KAAK,CAAC;AAAA,EAC/B,OAAO;AAEL,cAAU,KAAK,QAAQ,GAAG;AAAA,EAC5B;AACA,MAAI,YAAY,IAAI;AAClB,WAAO,KAAK,MAAM,UAAU,CAAC;AAAA,EAC/B;AACA,SAAO;AACT;AAAA;AAMA,eAAsB,YACpB,MACA,SACkB;AAClB,QAAM,OAAO,wBAAQ;AACrB,SAAO,MAAM,KAAK,MAAM;AAAA,IACtB,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,GAAG;AAAA,IACH;AAAA,IACA,eAAe;AAAA,EACjB,CAAkB;AACpB;AAAA;AAMA,eAAsB,gBACpB,UACA,SACkC;AAClC,QAAM,EAAE,UAAU,WAAW,QAAQ,GAAG,iBAAiB,IAAI;AAAA,IAC3D,WAAW;AAAA,IACX,GAAG;AAAA,EACL;AACA,QAAM,UAAW,UAAM,wBAAS,qCAAuB,QAAQ,GAAG;AAAA,IAChE;AAAA,EACF,CAAC;AACD,MAAI,SAAS;AACX,QAAI,UAAU;AAEZ,YAAM,EAAE,sBAAsB,IAAI,QAAQ,YAAY;AACtD,aAAO,MAAM,sBAAsB,SAAS;AAAA,QAC1C,MAAM;AAAA,QACN;AAAA,QACA,GAAG;AAAA,MACL,CAAC;AAAA,IACH;AACA,WAAO,gBAAY,uCAAqB,SAAS,gBAAgB,IAAI;AAAA,EACvE;AACA,SAAO;AACT;AAAA;AAMO,SAAS,oBACd,UACA,SACyB;AACzB,QAAM,EAAE,UAAU,WAAW,QAAQ,GAAG,iBAAiB,IAAI;AAAA,IAC3D,WAAW;AAAA,IACX,GAAG;AAAA,EACL;AAKA,QAAM,cAAU,4BAAa,qCAAuB,QAAQ,GAAG,EAAE,OAAO,CAAC;AAGzE,MAAI,SAAS;AACX,QAAI,UAAU;AAEZ,YAAM,EAAE,0BAA0B,IAAI,QAAQ,YAAY;AAC1D,aAAO,0BAA0B,SAAS;AAAA,QACxC,MAAM;AAAA,QACN;AAAA,QACA,GAAG;AAAA,MACL,CAAC;AAAA,IACH;AACA,WAAO,gBAAY,uCAAqB,SAAS,gBAAgB,IAAI;AAAA,EACvE;AACA,SAAO;AACT;AAAA;AAMA,eAAsB,oBACpB,aACA,OACiB;AACjB,QAAM,qBAAiB,+BAAe,KAAK;AAC3C,QAAM,UAAU,iBACZ,QACA,MAAM,gCAAgB,OAAiB,EAAE,WAAW,KAAK,CAAC;AAC9D,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,gBAAgB,iCAAiB;AACvC,QAAM,aAAa;AAAA,IACjB;AAAA,IACA,iBAAiB,SAAa;AAAA,EAChC;AACA,QAAM,mBAAe,8BAAgB,UAAU;AAC/C,MAAI,cAAc;AAChB,WAAO,WAAW,YAAY;AAAA,EAChC;AACA,QAAM,kBAAc,8BAAgB,UAAU;AAC9C,QAAM,aAAa,QAAQ;AAC3B,QAAM,EAAE,SAAS,KAAK,KAAK,cACvB,WAAW,aACX,gCAAkB,YAAY,GAAG,MAAM,EAAE,SAAS,IAAI,MAAM,GAAG;AAEnE,MAAI,QAAQ,SAAS;AACnB,QAAI,SAAS;AACb,QAAI,aAAa;AACf,mBAAS,8BAAgB,MAAM,SAAS,WAAW,iBAAiB,EAAE;AAAA,IACxE,OAAO;AACL,YAAM,UAAU,2BAAW;AAC3B,YAAM,aAAa;AAEnB,mBAAS,8BAAgB,MAAM,SAAS,IAAI,UAAU,EAAE;AACxD,UAAI,EAAE,MAAM,QAAQ,QAAQ,EAAE,QAAQ,OAAO,CAAC,GAAG,IAAI;AAEnD,qBAAS,8BAAgB,MAAM,SAAS,UAAU;AAClD,YAAI,EAAE,MAAM,QAAQ,QAAQ,EAAE,QAAQ,OAAO,CAAC,GAAG,IAAI;AACnD,mBAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAQ;AACV,YAAM,UAAU,2BAAW;AAC3B,YAAM,OAAO,MAAM,QAAQ,MAAM;AACjC,YAAM,OAAQ,MAAM,KAAK,KAAK;AAC9B,YAAM,MAAM,MAAM,QAAQ;AAC1B,UAAI,KAAK;AACP,mBAAO,2BAAa,MAAM,SAAS,GAAG;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAAA;AAMO,SAAS,mBACd,SACA,YAAoB,KACZ;AACR,QAAM,EAAE,MAAM,UAAU,IAAI;AAC5B,SAAO,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,KAAK,EAAE,GAAG,IAAI;AAC9D;AAAA;AAMO,SAAS,2BAA2B,SAAyB;AAClE,QAAM,WAAU,8BAAc,GAAE,WAAW,WAAW,OAAO,EAAE;AAC/D,SAAO,QAAQ,YACX,GAAG,QAAQ,UAAU,MAAM,CAAC,CAAC,GAAG,sCAAwB,GAAG,QAAQ,IAAI,KACvE;AACN;",
-  "names": []
+  "mappings": ";4ZAAA,IAAAA,GAAA,GAAAC,EAAAD,GAAA,oBAAAE,EAAA,0BAAAC,EAAA,kBAAAC,EAAA,gBAAAC,EAAA,oBAAAC,EAAA,wBAAAC,GAAA,wBAAAC,GAAA,uBAAAC,GAAA,+BAAAC,KAAA,eAAAC,EAAAX,IAIA,IAAAY,EAIO,+BACPC,EAA+B,8BAC/BC,EAAyC,6BAOzCC,EAAuC,iBACvCC,EAAsC,sBAQtCC,EAAqC,uBACrCC,EAAuC,mBACvCC,EAMO,mBAtBP,MAAMC,KAAc,kBAAe,EAC7BC,KAAoB,wBAAqB,EACzCC,KAAiB,qBAAkB,EACnCC,KAAkB,sBAAmB,EAqB3C,IAAIC,EAEJ,SAASC,GAAa,CACpB,OAAID,IAAa,SACfA,EAAyB,QAAQ,qBAAqB,GAEjDA,CACT,CAWA,IAAIE,EAEJ,SAASC,GAAa,CACpB,OAAID,IAAa,SAGfA,EADgB,QAAQ,+BAA+B,EAC5B,SAAS,CAClC,UAAWH,EAIX,MAAO,aACT,CAAC,GAEIG,CACT,CAEA,IAAIE,EAEJ,SAASC,GAAmB,CAC1B,OAAID,IAAmB,SACrBA,EAA+B,QAAQ,6BAA6B,GAE/DA,CACT,CAEA,IAAIE,EAEJ,SAASC,GAAU,CACjB,OAAID,IAAU,SACZA,EAAsB,QAAQ,wBAAwB,GAEjDA,CACT,CAEA,IAAIE,EAIJ,SAASC,GAAgB,CACvB,OAAID,IAAgB,SAIlBA,EADgB,QAAQ,2CAA2C,EACxC,YAEtBA,CACT,CAEA,IAAIE,EAEJ,SAASC,GAAY,CACnB,OAAID,IAAY,SACdA,EAAwB,QAAQ,oBAAoB,GAE/CA,CACT,CAEA,IAAIE,EAEJ,SAASC,GAAY,CACnB,OAAID,IAAY,SAEdA,EAAwB,QAAQ,oBAAoB,GAE/CA,CACT,CAMA,eAAsBlC,EACpBoC,EACAC,EACAC,EACe,CACf,IAAIC,EAAiBD,EACjBE,EAAgBH,EAEhB,UAAU,SAAW,GAAK,OAAOA,GAAY,aAC/CE,EAAiBF,EACjBG,EAAgB,QAElB,KAAM,CAAE,KAAAC,EAAM,UAAAC,EAAW,GAAGC,CAAgB,EAAI,CAC9C,UAAW,KACX,GAAGH,CACL,EACMI,EAAiB,CACrB,eAAAxB,EACA,cAAe,GACf,GAAGuB,CACL,EACME,EAASZ,EAAU,EACrB,OAAOQ,GAAS,UAClB,MAAMI,EAAO,QAAQT,EAAaK,EAAMG,CAAc,EAClD,OAAOL,GAAmB,YAC5B,MAAMA,EAAeE,CAAI,GAM3B,MADgBlB,EAAW,EACb,IAAI,QAChBF,EACA,CAAE,UAAAqB,CAAU,EACZ,MAAOI,GAAuB,CAC5B,MAAMD,EAAO,QAAQT,EAAaU,EAAYF,CAAc,EACxD,OAAOL,GAAmB,YAC5B,MAAMA,EAAeO,CAAU,CAEnC,CACF,CAEJ,CAMO,SAAS7C,EACd8C,EACAC,EACS,CACT,IAAIC,EACJ,UAAWC,KAAS/B,EAAmB,CACrC,MAAMgC,EAAW,OAAOD,EAAM,CAAC,CAAC,EAC1BE,EAAMF,EAAM,CAAC,EACbG,EAAkBF,EAAS,YAAY,GAAG,EAC1CG,EAAOH,EAAS,MAAM,EAAGE,CAAe,EAC9C,GAAIN,IAAYO,EAAM,CACpB,MAAMC,EAASpB,EAAU,EACnBqB,EAAQL,EAAS,MAAME,EAAkB,CAAC,EAC5CE,EAAO,UAAUP,EAAQQ,CAAK,IAC5BP,IAAW,SACbA,EAAS,CAAC,GAER,OAAOG,GAAQ,UAAYA,IAAQ,SACrC,SAAMH,EAAkBG,CAAG,EAGjC,CACF,CACA,OAAOH,CACT,CAMO,SAAS/C,EAAcuD,EAAsB,CAClD,GAAI,CAACA,EACH,MAAO,GAGT,IAAIC,EAAU,GAQd,OAPID,EAAK,WAAW,GAAG,EAErBC,EAAUD,EAAK,QAAQ,IAAK,CAAC,EAG7BC,EAAUD,EAAK,QAAQ,GAAG,EAExBC,IAAY,GACPD,EAAK,MAAMC,EAAU,CAAC,EAExB,EACT,CAMA,eAAsBvD,EACpBsD,EACApB,EACkB,CAElB,OAAO,MADMR,EAAQ,EACH4B,EAAM,CACtB,UAAW,KACX,OAAQvC,EACR,GAAGmB,EACH,eAAAjB,EACA,cAAe,EACjB,CAAkB,CACpB,CAMA,eAAsBhB,EACpBuD,EACAtB,EACkC,CAClC,KAAM,CAAE,SAAAuB,EAAU,UAAAC,EAAW,OAAAC,EAAQ,GAAGC,CAAiB,EAAI,CAC3D,UAAW,KACX,GAAG1B,CACL,EACM2B,EAAW,QAAM,eAAS,0BAAuBL,CAAQ,EAAG,CAChE,OAAAG,CACF,CAAC,EACD,GAAIE,EAAS,CACX,GAAIJ,EAAU,CAEZ,KAAM,CAAE,sBAAAK,CAAsB,EAAI,QAAQ,YAAY,EACtD,OAAO,MAAMA,EAAsBD,EAAS,CAC1C,KAAML,EACN,UAAAE,EACA,GAAGE,CACL,CAAC,CACH,CACA,OAAOF,KAAY,wBAAqBG,EAASD,CAAgB,EAAIC,CACvE,CAEF,CAMO,SAAS3D,GACdsD,EACAtB,EACyB,CACzB,KAAM,CAAE,SAAAuB,EAAU,UAAAC,EAAW,OAAAC,EAAQ,GAAGC,CAAiB,EAAI,CAC3D,UAAW,KACX,GAAG1B,CACL,EAKM2B,KAAU,mBAAa,0BAAuBL,CAAQ,EAAG,CAAE,OAAAG,CAAO,CAAC,EAGzE,GAAIE,EAAS,CACX,GAAIJ,EAAU,CAEZ,KAAM,CAAE,0BAAAM,CAA0B,EAAI,QAAQ,YAAY,EAC1D,OAAOA,EAA0BF,EAAS,CACxC,KAAML,EACN,UAAAE,EACA,GAAGE,CACL,CAAC,CACH,CACA,OAAOF,KAAY,wBAAqBG,EAASD,CAAgB,EAAIC,CACvE,CAEF,CAMA,eAAsB1D,GACpB8B,EACA+B,EACiB,CACjB,MAAMC,KAAiB,kBAAeD,CAAK,EACrCH,EAAUI,EACZD,EACA,MAAM/D,EAAgB+D,EAAiB,CAAE,UAAW,EAAK,CAAC,EAC9D,GAAI,CAACH,EACH,MAAO,GAET,KAAM,CAAE,QAAAK,CAAQ,EAAIL,EAEdM,EADgB3C,EAAiB,EAErCS,EACAgC,EAAiB,OAAaD,CAChC,EAEA,MADqB,mBAAgBG,CAAU,EAE7C,OAAOA,EAAW,UAAY,GAEhC,MAAMC,KAAc,mBAAgBD,CAAU,EACxCE,EAAaR,EAAQ,WACrB,CAAE,QAAAS,EAAS,KAAAC,CAAK,GAAKH,EACvBD,EAAW,UACX,qBAAkBE,GAAY,GAAG,IAAM,CAAE,QAAS,GAAI,KAAM,EAAG,EAEnE,GAAIE,GAAQD,EAAS,CACnB,IAAIE,EAAS,GACb,GAAIJ,EACFI,KAAS,mBAAgBD,EAAMD,EAASH,EAAW,eAAiB,EAAE,MACjE,CACL,MAAMM,EAAUnD,EAAW,EACrBoD,EAAaR,EAEnBM,KAAS,mBAAgBD,EAAMD,EAAS,IAAII,CAAU,EAAE,GAClD,MAAMD,EAAQD,EAAQ,CAAE,OAAQ,MAAO,CAAC,GAAG,KAE/CA,KAAS,mBAAgBD,EAAMD,EAASI,CAAU,GAC5C,MAAMD,EAAQD,EAAQ,CAAE,OAAQ,MAAO,CAAC,GAAG,KAC/CA,EAAS,IAGf,CACA,GAAIA,EAAQ,CAIV,MAAMG,GADQ,MADD,MADGrD,EAAW,EACAkD,CAAM,GACR,KAAK,IACZ,QAAQ,IAC1B,GAAIG,EACF,SAAO,gBAAaJ,EAAMD,EAASK,CAAG,CAE1C,CACF,CACA,MAAO,EACT,CAMO,SAASvE,GACdwE,EACAC,EAAoB,IACZ,CACR,KAAM,CAAE,KAAA1B,EAAM,UAAA2B,CAAU,EAAIF,EAC5B,MAAO,GAAGE,EAAY,GAAGA,CAAS,GAAGD,CAAS,GAAK,EAAE,GAAG1B,CAAI,EAC9D,CAMO,SAAS9C,GAA2BuC,EAAyB,CAClE,MAAMgC,EAAUhD,EAAc,EAAE,WAAW,WAAWgB,CAAO,EAAE,EAC/D,OAAOgC,EAAQ,UACX,GAAGA,EAAQ,UAAU,MAAM,CAAC,CAAC,GAAG,0BAAwB,GAAGA,EAAQ,IAAI,GACvEhC,CACN",
+  "names": ["operations_exports", "__export", "extractPackage", "findPackageExtensions", "getReleaseTag", "packPackage", "readPackageJson", "readPackageJsonSync", "resolveGitHubTgzUrl", "resolvePackageName", "resolveRegistryPackageName", "__toCommonJS", "import_packages", "import_process", "import_socket", "import_fs", "import_objects", "import_normalize", "import_paths", "import_specs", "abortSignal", "packageExtensions", "packumentCache", "pacoteCachePath", "_cacache", "getCacache", "_fetcher", "getFetcher", "_npmPackageArg", "getNpmPackageArg", "_pack", "getPack", "_PackageURL", "getPackageURL", "_pacote", "getPacote", "_semver", "getSemver", "pkgNameOrId", "options", "callback", "actualCallback", "actualOptions", "dest", "tmpPrefix", "extractOptions_", "extractOptions", "pacote", "tmpDirPath", "pkgName", "pkgVer", "result", "entry", "selector", "ext", "lastAtSignIndex", "name", "semver", "range", "spec", "atIndex", "filepath", "editable", "normalize", "throws", "normalizeOptions", "pkgJson", "toEditablePackageJson", "toEditablePackageJsonSync", "where", "whereIsPkgJson", "version", "parsedSpec", "isGitHubUrl", "repository", "project", "user", "apiUrl", "fetcher", "versionStr", "sha", "purlObj", "delimiter", "namespace"]
 }

package/dist/packages/paths.js

@@ -1,55 +1,3 @@
 /* Socket Lib - Built with esbuild */
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var paths_exports = {};
-__export(paths_exports, {
-  resolvePackageJsonDirname: () => resolvePackageJsonDirname,
-  resolvePackageJsonPath: () => resolvePackageJsonPath
-});
-module.exports = __toCommonJS(paths_exports);
-var import_path = require("../path");
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
-// @__NO_SIDE_EFFECTS__
-function resolvePackageJsonDirname(filepath) {
-  if (filepath.endsWith("package.json")) {
-    const path = /* @__PURE__ */ getPath();
-    return (0, import_path.normalizePath)(path.dirname(filepath));
-  }
-  return (0, import_path.normalizePath)(filepath);
-}
-// @__NO_SIDE_EFFECTS__
-function resolvePackageJsonPath(filepath) {
-  if (filepath.endsWith("package.json")) {
-    return (0, import_path.normalizePath)(filepath);
-  }
-  const path = /* @__PURE__ */ getPath();
-  return (0, import_path.normalizePath)(path.join(filepath, "package.json"));
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  resolvePackageJsonDirname,
-  resolvePackageJsonPath
-});
+var a=Object.defineProperty;var u=Object.getOwnPropertyDescriptor;var c=Object.getOwnPropertyNames;var g=Object.prototype.hasOwnProperty;var h=(n,t)=>{for(var o in t)a(n,o,{get:t[o],enumerable:!0})},d=(n,t,o,s)=>{if(t&&typeof t=="object"||typeof t=="function")for(let e of c(t))!g.call(n,e)&&e!==o&&a(n,e,{get:()=>t[e],enumerable:!(s=u(t,e))||s.enumerable});return n};var f=n=>d(a({},"__esModule",{value:!0}),n);var P={};h(P,{resolvePackageJsonDirname:()=>m,resolvePackageJsonPath:()=>k});module.exports=f(P);var r=require("../path");let i;function p(){return i===void 0&&(i=require("node:path")),i}function m(n){return n.endsWith("package.json")?(0,r.normalizePath)(p().dirname(n)):(0,r.normalizePath)(n)}function k(n){return n.endsWith("package.json")?(0,r.normalizePath)(n):(0,r.normalizePath)(p().join(n,"package.json"))}0&&(module.exports={resolvePackageJsonDirname,resolvePackageJsonPath});
 //# sourceMappingURL=paths.js.map

package/dist/packages/paths.js.map

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../../src/packages/paths.ts"],
   "sourcesContent": ["/**\n * @fileoverview Package.json path resolution utilities.\n */\n\nimport { normalizePath } from '../path'\n\nlet _path: typeof import('path') | undefined\n/**\n * Get the path module.\n */\n/*@__NO_SIDE_EFFECTS__*/\nfunction getPath() {\n  if (_path === undefined) {\n    // Use non-'node:' prefixed require to avoid Webpack errors.\n\n    _path = /*@__PURE__*/ require('node:path')\n  }\n  return _path as typeof import('path')\n}\n\n/**\n * Resolve directory path from a package.json file path.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function resolvePackageJsonDirname(filepath: string): string {\n  if (filepath.endsWith('package.json')) {\n    const path = getPath()\n    return normalizePath(path.dirname(filepath))\n  }\n  return normalizePath(filepath)\n}\n\n/**\n * Resolve full path to package.json from a directory or file path.\n */\n/*@__NO_SIDE_EFFECTS__*/\nexport function resolvePackageJsonPath(filepath: string): string {\n  if (filepath.endsWith('package.json')) {\n    return normalizePath(filepath)\n  }\n  const path = getPath()\n  return normalizePath(path.join(filepath, 'package.json'))\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,kBAA8B;AAE9B,IAAI;AAAA;AAKJ,SAAS,UAAU;AACjB,MAAI,UAAU,QAAW;AAGvB,YAAsB,QAAQ,WAAW;AAAA,EAC3C;AACA,SAAO;AACT;AAAA;AAMO,SAAS,0BAA0B,UAA0B;AAClE,MAAI,SAAS,SAAS,cAAc,GAAG;AACrC,UAAM,OAAO,wBAAQ;AACrB,eAAO,2BAAc,KAAK,QAAQ,QAAQ,CAAC;AAAA,EAC7C;AACA,aAAO,2BAAc,QAAQ;AAC/B;AAAA;AAMO,SAAS,uBAAuB,UAA0B;AAC/D,MAAI,SAAS,SAAS,cAAc,GAAG;AACrC,eAAO,2BAAc,QAAQ;AAAA,EAC/B;AACA,QAAM,OAAO,wBAAQ;AACrB,aAAO,2BAAc,KAAK,KAAK,UAAU,cAAc,CAAC;AAC1D;",
-  "names": []
+  "mappings": ";4ZAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,+BAAAE,EAAA,2BAAAC,IAAA,eAAAC,EAAAJ,GAIA,IAAAK,EAA8B,mBAE9B,IAAIC,EAKJ,SAASC,GAAU,CACjB,OAAID,IAAU,SAGZA,EAAsB,QAAQ,WAAW,GAEpCA,CACT,CAMO,SAASJ,EAA0BM,EAA0B,CAClE,OAAIA,EAAS,SAAS,cAAc,KAE3B,iBADMD,EAAQ,EACK,QAAQC,CAAQ,CAAC,KAEtC,iBAAcA,CAAQ,CAC/B,CAMO,SAASL,EAAuBK,EAA0B,CAC/D,OAAIA,EAAS,SAAS,cAAc,KAC3B,iBAAcA,CAAQ,KAGxB,iBADMD,EAAQ,EACK,KAAKC,EAAU,cAAc,CAAC,CAC1D",
+  "names": ["paths_exports", "__export", "resolvePackageJsonDirname", "resolvePackageJsonPath", "__toCommonJS", "import_path", "_path", "getPath", "filepath"]
 }

package/dist/packages/provenance.js

@@ -1,180 +1,3 @@
 /* Socket Lib - Built with esbuild */
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var provenance_exports = {};
-__export(provenance_exports, {
-  fetchPackageProvenance: () => fetchPackageProvenance,
-  getProvenanceDetails: () => getProvenanceDetails
-});
-module.exports = __toCommonJS(provenance_exports);
-var import_agents = require("#constants/agents");
-var import_abort = require("../abort");
-var import_url = require("../url");
-const ArrayIsArray = Array.isArray;
-const SLSA_PROVENANCE_V0_2 = "https://slsa.dev/provenance/v0.2";
-const SLSA_PROVENANCE_V1_0 = "https://slsa.dev/provenance/v1";
-let _fetcher;
-// @__NO_SIDE_EFFECTS__
-function getFetcher() {
-  if (_fetcher === void 0) {
-    const makeFetchHappen = require("../external/make-fetch-happen");
-    const { getPacoteCachePath } = require("../constants/packages");
-    _fetcher = makeFetchHappen.defaults({
-      cachePath: getPacoteCachePath(),
-      // Prefer-offline: Staleness checks for cached data will be bypassed, but
-      // missing data will be requested from the server.
-      // https://github.com/npm/make-fetch-happen?tab=readme-ov-file#--optscache
-      cache: "force-cache"
-    });
-  }
-  return _fetcher;
-}
-function getAttestations(attestationData) {
-  const data = attestationData;
-  if (!data.attestations || !ArrayIsArray(data.attestations)) {
-    return [];
-  }
-  return data.attestations.filter((attestation) => {
-    const att = attestation;
-    return att.predicateType === SLSA_PROVENANCE_V0_2 || att.predicateType === SLSA_PROVENANCE_V1_0;
-  });
-}
-function findProvenance(attestations) {
-  for (const attestation of attestations) {
-    const att = attestation;
-    try {
-      let predicate = att.predicate;
-      if (!predicate && att.bundle?.dsseEnvelope?.payload) {
-        try {
-          const decodedPayload = Buffer.from(
-            att.bundle.dsseEnvelope.payload,
-            "base64"
-          ).toString("utf8");
-          const statement = JSON.parse(decodedPayload);
-          predicate = statement.predicate;
-        } catch {
-          continue;
-        }
-      }
-      const predicateData = predicate;
-      if (predicateData?.buildDefinition?.externalParameters) {
-        return {
-          predicate,
-          externalParameters: predicateData.buildDefinition.externalParameters
-        };
-      }
-    } catch {
-    }
-  }
-  return void 0;
-}
-function isTrustedPublisher(value) {
-  if (typeof value !== "string" || !value) {
-    return false;
-  }
-  let url = (0, import_url.parseUrl)(value);
-  let hostname = url?.hostname;
-  if (!url && value.includes("@")) {
-    const firstPart = value.split("@")[0];
-    if (firstPart) {
-      url = (0, import_url.parseUrl)(firstPart);
-    }
-    if (url) {
-      hostname = url.hostname;
-    }
-  }
-  if (!url) {
-    const httpsUrl = (0, import_url.parseUrl)(`https://${value}`);
-    if (httpsUrl) {
-      hostname = httpsUrl.hostname;
-    }
-  }
-  if (hostname) {
-    return hostname === "github.com" || hostname.endsWith(".github.com") || hostname === "gitlab.com" || hostname.endsWith(".gitlab.com");
-  }
-  return value.includes("github") || value.includes("gitlab");
-}
-function getProvenanceDetails(attestationData) {
-  const attestations = getAttestations(attestationData);
-  if (!attestations.length) {
-    return void 0;
-  }
-  const provenance = findProvenance(attestations);
-  if (!provenance) {
-    return { level: "attested" };
-  }
-  const provenanceData = provenance;
-  const { externalParameters, predicate } = provenanceData;
-  const def = predicate?.buildDefinition;
-  const workflow = externalParameters?.workflow;
-  const workflowRef = workflow?.ref || externalParameters?.workflow_ref;
-  const workflowUrl = externalParameters?.context;
-  const workflowPlatform = def?.buildType;
-  const repository = workflow?.repository || externalParameters?.repository;
-  const gitRef = externalParameters?.ref || workflow?.ref;
-  const commitSha = externalParameters?.sha;
-  const workflowRunId = externalParameters?.run_id;
-  const trusted = isTrustedPublisher(workflowRef) || isTrustedPublisher(workflowUrl) || isTrustedPublisher(workflowPlatform) || isTrustedPublisher(repository);
-  return {
-    commitSha,
-    gitRef,
-    level: trusted ? "trusted" : "attested",
-    repository,
-    workflowRef,
-    workflowUrl,
-    workflowPlatform,
-    workflowRunId
-  };
-}
-// @__NO_SIDE_EFFECTS__
-async function fetchPackageProvenance(pkgName, pkgVersion, options) {
-  const { signal, timeout = 1e4 } = {
-    __proto__: null,
-    ...options
-  };
-  if (signal?.aborted) {
-    return void 0;
-  }
-  const timeoutSignal = (0, import_abort.createTimeoutSignal)(timeout);
-  const compositeSignal = (0, import_abort.createCompositeAbortSignal)(signal, timeoutSignal);
-  const fetcher = /* @__PURE__ */ getFetcher();
-  try {
-    const response = await fetcher(
-      // The npm registry attestations API endpoint.
-      `${import_agents.NPM_REGISTRY_URL}/-/npm/v1/attestations/${encodeURIComponent(pkgName)}@${encodeURIComponent(pkgVersion)}`,
-      {
-        method: "GET",
-        signal: compositeSignal,
-        headers: {
-          "User-Agent": "socket-registry"
-        }
-      }
-    );
-    if (response.ok) {
-      return getProvenanceDetails(await response.json());
-    }
-  } catch {
-  }
-  return void 0;
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  fetchPackageProvenance,
-  getProvenanceDetails
-});
+var u=Object.defineProperty;var v=Object.getOwnPropertyDescriptor;var S=Object.getOwnPropertyNames;var A=Object.prototype.hasOwnProperty;var R=(e,t)=>{for(var n in t)u(e,n,{get:t[n],enumerable:!0})},x=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of S(t))!A.call(e,o)&&o!==n&&u(e,o,{get:()=>t[o],enumerable:!(r=v(t,o))||r.enumerable});return e};var E=e=>x(u({},"__esModule",{value:!0}),e);var V={};R(V,{fetchPackageProvenance:()=>I,getProvenanceDetails:()=>k});module.exports=E(V);var w=require("#constants/agents"),p=require("../abort"),d=require("../url");const T=Array.isArray,D="https://slsa.dev/provenance/v0.2",U="https://slsa.dev/provenance/v1";let l;function C(){if(l===void 0){const e=require("../external/make-fetch-happen"),{getPacoteCachePath:t}=require("../constants/packages");l=e.defaults({cachePath:t(),cache:"force-cache"})}return l}function N(e){const t=e;return!t.attestations||!T(t.attestations)?[]:t.attestations.filter(n=>{const r=n;return r.predicateType===D||r.predicateType===U})}function O(e){for(const t of e){const n=t;try{let r=n.predicate;if(!r&&n.bundle?.dsseEnvelope?.payload)try{const s=Buffer.from(n.bundle.dsseEnvelope.payload,"base64").toString("utf8");r=JSON.parse(s).predicate}catch{continue}const o=r;if(o?.buildDefinition?.externalParameters)return{predicate:r,externalParameters:o.buildDefinition.externalParameters}}catch{}}}function f(e){if(typeof e!="string"||!e)return!1;let t=(0,d.parseUrl)(e),n=t?.hostname;if(!t&&e.includes("@")){const r=e.split("@")[0];r&&(t=(0,d.parseUrl)(r)),t&&(n=t.hostname)}if(!t){const r=(0,d.parseUrl)(`https://${e}`);r&&(n=r.hostname)}return n?n==="github.com"||n.endsWith(".github.com")||n==="gitlab.com"||n.endsWith(".gitlab.com"):e.includes("github")||e.includes("gitlab")}function k(e){const t=N(e);if(!t.length)return;const n=O(t);if(!n)return{level:"attested"};const r=n,{externalParameters:o,predicate:s}=r,c=s?.buildDefinition,i=o?.workflow,a=i?.ref||o?.workflow_ref,m=o?.context,g=c?.buildType,h=i?.repository||o?.repository,y=o?.ref||i?.ref,P=o?.sha,b=o?.run_id,_=f(a)||f(m)||f(g)||f(h);return{commitSha:P,gitRef:y,level:_?"trusted":"attested",repository:h,workflowRef:a,workflowUrl:m,workflowPlatform:g,workflowRunId:b}}async function I(e,t,n){const{signal:r,timeout:o=1e4}={__proto__:null,...n};if(r?.aborted)return;const s=(0,p.createTimeoutSignal)(o),c=(0,p.createCompositeAbortSignal)(r,s),i=C();try{const a=await i(`${w.NPM_REGISTRY_URL}/-/npm/v1/attestations/${encodeURIComponent(e)}@${encodeURIComponent(t)}`,{method:"GET",signal:c,headers:{"User-Agent":"socket-registry"}});if(a.ok)return k(await a.json())}catch{}}0&&(module.exports={fetchPackageProvenance,getProvenanceDetails});
 //# sourceMappingURL=provenance.js.map