@socketsecurity/lib 3.2.8 → 3.3.1

package/dist/logger.js

@@ -88,6 +88,9 @@ const LOG_SYMBOLS = /* @__PURE__ */ (() => {
     const stepColor = theme.colors.step;
     target.fail = /* @__PURE__ */ applyColor(supported ? "\u2716" : "\xD7", errorColor, colors);
     target.info = /* @__PURE__ */ applyColor(supported ? "\u2139" : "i", infoColor, colors);
+    target.reason = colors.dim(
+      /* @__PURE__ */ applyColor(supported ? "\u2234" : ":.", warningColor, colors)
+    );
     target.step = /* @__PURE__ */ applyColor(supported ? "\u2192" : ">", stepColor, colors);
     target.success = /* @__PURE__ */ applyColor(supported ? "\u2714" : "\u221A", successColor, colors);
     target.warn = /* @__PURE__ */ applyColor(supported ? "\u26A0" : "\u203C", warningColor, colors);
@@ -239,6 +242,26 @@ class Logger {
       this.#options = { __proto__: null };
     }
   }
+  /**
+   * Apply a console method with indentation.
+   * @private
+   */
+  #apply(methodName, args, stream) {
+    const con = this.#getConsole();
+    const text = args.at(0);
+    const hasText = typeof text === "string";
+    const targetStream = stream || (methodName === "log" ? "stdout" : "stderr");
+    const indent = this.#getIndent(targetStream);
+    const logArgs = hasText ? [(0, import_strings.applyLinePrefix)(text, { prefix: indent }), ...args.slice(1)] : args;
+    ReflectApply(
+      con[methodName],
+      con,
+      logArgs
+    );
+    this[lastWasBlankSymbol](hasText && (0, import_strings.isBlankString)(logArgs[0]), targetStream);
+    this[incLogCallCountSymbol]();
+    return this;
+  }
   /**
    * Get the Console instance for this logger, creating it lazily on first access.
    *
@@ -270,70 +293,20 @@ class Logger {
     return con;
   }
   /**
-   * Gets a logger instance bound exclusively to stderr.
-   *
-   * All logging operations on this instance will write to stderr only.
-   * Indentation is tracked separately from stdout. The instance is
-   * cached and reused on subsequent accesses.
-   *
-   * @returns A logger instance bound to stderr
-   *
-   * @example
-   * ```typescript
-   * // Write errors to stderr
-   * logger.stderr.error('Configuration invalid')
-   * logger.stderr.warn('Using fallback settings')
-   *
-   * // Indent only affects stderr
-   * logger.stderr.indent()
-   * logger.stderr.error('Nested error details')
-   * logger.stderr.dedent()
-   * ```
+   * Get indentation for a specific stream.
+   * @private
    */
-  get stderr() {
-    if (!this.#stderrLogger) {
-      const ctorArgs = privateConstructorArgs.get(this) ?? [];
-      const instance = new Logger(...ctorArgs);
-      instance.#parent = this;
-      instance.#boundStream = "stderr";
-      instance.#options = { __proto__: null, ...this.#options };
-      instance.#theme = this.#theme;
-      this.#stderrLogger = instance;
-    }
-    return this.#stderrLogger;
+  #getIndent(stream) {
+    const root = this.#getRoot();
+    return stream === "stderr" ? root.#stderrIndention : root.#stdoutIndention;
   }
   /**
-   * Gets a logger instance bound exclusively to stdout.
-   *
-   * All logging operations on this instance will write to stdout only.
-   * Indentation is tracked separately from stderr. The instance is
-   * cached and reused on subsequent accesses.
-   *
-   * @returns A logger instance bound to stdout
-   *
-   * @example
-   * ```typescript
-   * // Write normal output to stdout
-   * logger.stdout.log('Processing started')
-   * logger.stdout.log('Items processed: 42')
-   *
-   * // Indent only affects stdout
-   * logger.stdout.indent()
-   * logger.stdout.log('Detailed output')
-   * logger.stdout.dedent()
-   * ```
+   * Get lastWasBlank state for a specific stream.
+   * @private
    */
-  get stdout() {
-    if (!this.#stdoutLogger) {
-      const ctorArgs = privateConstructorArgs.get(this) ?? [];
-      const instance = new Logger(...ctorArgs);
-      instance.#parent = this;
-      instance.#boundStream = "stdout";
-      instance.#options = { __proto__: null, ...this.#options };
-      instance.#theme = this.#theme;
-      this.#stdoutLogger = instance;
-    }
-    return this.#stdoutLogger;
+  #getLastWasBlank(stream) {
+    const root = this.#getRoot();
+    return stream === "stderr" ? root.#stderrLastWasBlank : root.#stdoutLastWasBlank;
   }
   /**
    * Get the root logger (for accessing shared indentation state).
@@ -342,14 +315,6 @@ class Logger {
   #getRoot() {
     return this.#parent || this;
   }
-  /**
-   * Get the resolved theme for this logger instance.
-   * Returns instance theme if set, otherwise falls back to context theme.
-   * @private
-   */
-  #getTheme() {
-    return this.#theme ?? (0, import_context.getTheme)();
-  }
   /**
    * Get logger-specific symbols using the resolved theme.
    * @private
@@ -362,18 +327,28 @@ class Logger {
       __proto__: null,
       fail: /* @__PURE__ */ applyColor(supported ? "\u2716" : "\xD7", theme.colors.error, colors),
       info: /* @__PURE__ */ applyColor(supported ? "\u2139" : "i", theme.colors.info, colors),
+      reason: colors.dim(
+        /* @__PURE__ */ applyColor(supported ? "\u2234" : ":.", theme.colors.warning, colors)
+      ),
       step: /* @__PURE__ */ applyColor(supported ? "\u2192" : ">", theme.colors.step, colors),
       success: /* @__PURE__ */ applyColor(supported ? "\u2714" : "\u221A", theme.colors.success, colors),
       warn: /* @__PURE__ */ applyColor(supported ? "\u26A0" : "\u203C", theme.colors.warning, colors)
     };
   }
   /**
-   * Get indentation for a specific stream.
+   * Get the target stream for this logger instance.
    * @private
    */
-  #getIndent(stream) {
-    const root = this.#getRoot();
-    return stream === "stderr" ? root.#stderrIndention : root.#stdoutIndention;
+  #getTargetStream() {
+    return this.#boundStream || "stderr";
+  }
+  /**
+   * Get the resolved theme for this logger instance.
+   * Returns instance theme if set, otherwise falls back to context theme.
+   * @private
+   */
+  #getTheme() {
+    return this.#theme ?? (0, import_context.getTheme)();
   }
   /**
    * Set indentation for a specific stream.
@@ -387,14 +362,6 @@ class Logger {
       root.#stdoutIndention = value;
     }
   }
-  /**
-   * Get lastWasBlank state for a specific stream.
-   * @private
-   */
-  #getLastWasBlank(stream) {
-    const root = this.#getRoot();
-    return stream === "stderr" ? root.#stderrLastWasBlank : root.#stdoutLastWasBlank;
-  }
   /**
    * Set lastWasBlank state for a specific stream.
    * @private
@@ -407,39 +374,12 @@ class Logger {
       root.#stdoutLastWasBlank = value;
     }
   }
-  /**
-   * Get the target stream for this logger instance.
-   * @private
-   */
-  #getTargetStream() {
-    return this.#boundStream || "stderr";
-  }
-  /**
-   * Apply a console method with indentation.
-   * @private
-   */
-  #apply(methodName, args, stream) {
-    const con = this.#getConsole();
-    const text = args.at(0);
-    const hasText = typeof text === "string";
-    const targetStream = stream || (methodName === "log" ? "stdout" : "stderr");
-    const indent = this.#getIndent(targetStream);
-    const logArgs = hasText ? [(0, import_strings.applyLinePrefix)(text, { prefix: indent }), ...args.slice(1)] : args;
-    ReflectApply(
-      con[methodName],
-      con,
-      logArgs
-    );
-    this[lastWasBlankSymbol](hasText && (0, import_strings.isBlankString)(logArgs[0]), targetStream);
-    this[incLogCallCountSymbol]();
-    return this;
-  }
   /**
    * Strip log symbols from the start of text.
    * @private
    */
   #stripSymbols(text) {
-    return text.replace(/^[✖✗×⚠‼✔✓√ℹ→]\uFE0F?\s*/u, "");
+    return text.replace(/^(?:[✖✗×⚠‼✔✓√ℹ→∴]|:.)[\uFE0F\s]*/u, "");
   }
   /**
    * Apply a method with a symbol prefix.
@@ -468,6 +408,72 @@ class Logger {
     this[incLogCallCountSymbol]();
     return this;
   }
+  /**
+   * Gets a logger instance bound exclusively to stderr.
+   *
+   * All logging operations on this instance will write to stderr only.
+   * Indentation is tracked separately from stdout. The instance is
+   * cached and reused on subsequent accesses.
+   *
+   * @returns A logger instance bound to stderr
+   *
+   * @example
+   * ```typescript
+   * // Write errors to stderr
+   * logger.stderr.error('Configuration invalid')
+   * logger.stderr.warn('Using fallback settings')
+   *
+   * // Indent only affects stderr
+   * logger.stderr.indent()
+   * logger.stderr.error('Nested error details')
+   * logger.stderr.dedent()
+   * ```
+   */
+  get stderr() {
+    if (!this.#stderrLogger) {
+      const ctorArgs = privateConstructorArgs.get(this) ?? [];
+      const instance = new Logger(...ctorArgs);
+      instance.#parent = this;
+      instance.#boundStream = "stderr";
+      instance.#options = { __proto__: null, ...this.#options };
+      instance.#theme = this.#theme;
+      this.#stderrLogger = instance;
+    }
+    return this.#stderrLogger;
+  }
+  /**
+   * Gets a logger instance bound exclusively to stdout.
+   *
+   * All logging operations on this instance will write to stdout only.
+   * Indentation is tracked separately from stderr. The instance is
+   * cached and reused on subsequent accesses.
+   *
+   * @returns A logger instance bound to stdout
+   *
+   * @example
+   * ```typescript
+   * // Write normal output to stdout
+   * logger.stdout.log('Processing started')
+   * logger.stdout.log('Items processed: 42')
+   *
+   * // Indent only affects stdout
+   * logger.stdout.indent()
+   * logger.stdout.log('Detailed output')
+   * logger.stdout.dedent()
+   * ```
+   */
+  get stdout() {
+    if (!this.#stdoutLogger) {
+      const ctorArgs = privateConstructorArgs.get(this) ?? [];
+      const instance = new Logger(...ctorArgs);
+      instance.#parent = this;
+      instance.#boundStream = "stdout";
+      instance.#options = { __proto__: null, ...this.#options };
+      instance.#theme = this.#theme;
+      this.#stdoutLogger = instance;
+    }
+    return this.#stdoutLogger;
+  }
   /**
    * Gets the total number of log calls made on this logger instance.
    *
@@ -545,6 +551,46 @@ class Logger {
     this[lastWasBlankSymbol](false);
     return value ? this : this[incLogCallCountSymbol]();
   }
+  /**
+   * Clears the current line in the terminal.
+   *
+   * Moves the cursor to the beginning of the line and clears all content.
+   * Works in both TTY and non-TTY environments. Useful for clearing
+   * progress indicators created with `progress()`.
+   *
+   * The stream to clear (stderr or stdout) depends on whether the logger
+   * is stream-bound.
+   *
+   * @returns The logger instance for chaining
+   *
+   * @example
+   * ```typescript
+   * logger.progress('Loading...')
+   * // ... do work ...
+   * logger.clearLine()
+   * logger.success('Loaded')
+   *
+   * // Clear multiple progress updates
+   * for (const file of files) {
+   *   logger.progress(`Processing ${file}`)
+   *   processFile(file)
+   *   logger.clearLine()
+   * }
+   * logger.success('All files processed')
+   * ```
+   */
+  clearLine() {
+    const con = this.#getConsole();
+    const stream = this.#getTargetStream();
+    const streamObj = stream === "stderr" ? con._stderr : con._stdout;
+    if (streamObj.isTTY) {
+      streamObj.cursorTo(0);
+      streamObj.clearLine(0);
+    } else {
+      streamObj.write("\r\x1B[K");
+    }
+    return this;
+  }
   /**
    * Clears the visible terminal screen.
    *
@@ -719,6 +765,30 @@ class Logger {
     this[lastWasBlankSymbol](false);
     return this[incLogCallCountSymbol]();
   }
+  /**
+   * Logs a completion message with a success symbol (alias for `success()`).
+   *
+   * Provides semantic clarity when marking something as "done". Does NOT
+   * automatically clear the current line - call `clearLine()` first if
+   * needed after using `progress()`.
+   *
+   * @param args - Message and additional arguments to log
+   * @returns The logger instance for chaining
+   *
+   * @example
+   * ```typescript
+   * logger.done('Task completed')
+   *
+   * // After progress indicator
+   * logger.progress('Processing...')
+   * // ... do work ...
+   * logger.clearLine()
+   * logger.done('Processing complete')
+   * ```
+   */
+  done(...args) {
+    return this.#symbolApply("success", args);
+  }
   /**
    * Logs an error message to stderr.
    *
@@ -961,6 +1031,62 @@ class Logger {
   logNewline() {
     return this.#getLastWasBlank("stdout") ? this : this.log("");
   }
+  /**
+   * Shows a progress indicator that can be cleared with `clearLine()`.
+   *
+   * Displays a simple status message with a '∴' prefix. Does not include
+   * animation or spinner. Intended to be cleared once the operation completes.
+   * The output stream (stderr or stdout) depends on whether the logger is
+   * stream-bound.
+   *
+   * @param text - The progress message to display
+   * @returns The logger instance for chaining
+   *
+   * @example
+   * ```typescript
+   * logger.progress('Processing files...')
+   * // ... do work ...
+   * logger.clearLine()
+   * logger.success('Files processed')
+   *
+   * // Stream-specific progress
+   * logger.stdout.progress('Loading...')
+   * // ... do work ...
+   * logger.stdout.clearLine()
+   * logger.stdout.log('Done')
+   * ```
+   */
+  progress(text) {
+    const con = this.#getConsole();
+    const stream = this.#getTargetStream();
+    const streamObj = stream === "stderr" ? con._stderr : con._stdout;
+    streamObj.write(`\u2234 ${text}`);
+    this[lastWasBlankSymbol](false);
+    return this;
+  }
+  /**
+   * Logs a reasoning/working message with a dimmed yellow therefore symbol.
+   *
+   * Automatically prefixes the message with `LOG_SYMBOLS.reason` (dimmed yellow ∴).
+   * Useful for showing intermediate reasoning, logic steps, or "working" output
+   * that leads to a conclusion. Always outputs to stderr. If the message starts
+   * with an existing symbol, it will be stripped and replaced.
+   *
+   * @param args - Message and additional arguments to log
+   * @returns The logger instance for chaining
+   *
+   * @example
+   * ```typescript
+   * logger.step('Analyzing package security')
+   * logger.reason('Found 3 direct dependencies')
+   * logger.reason('Checking 47 transitive dependencies')
+   * logger.reason('Risk score: 8.5/10')
+   * logger.fail('Package blocked due to high risk')
+   * ```
+   */
+  reason(...args) {
+    return this.#symbolApply("reason", args);
+  }
   /**
    * Resets all indentation to zero.
    *
@@ -1083,30 +1209,6 @@ class Logger {
   success(...args) {
     return this.#symbolApply("success", args);
   }
-  /**
-   * Logs a completion message with a success symbol (alias for `success()`).
-   *
-   * Provides semantic clarity when marking something as "done". Does NOT
-   * automatically clear the current line - call `clearLine()` first if
-   * needed after using `progress()`.
-   *
-   * @param args - Message and additional arguments to log
-   * @returns The logger instance for chaining
-   *
-   * @example
-   * ```typescript
-   * logger.done('Task completed')
-   *
-   * // After progress indicator
-   * logger.progress('Processing...')
-   * // ... do work ...
-   * logger.clearLine()
-   * logger.done('Processing complete')
-   * ```
-   */
-  done(...args) {
-    return this.#symbolApply("success", args);
-  }
   /**
    * Displays data in a table format.
    *
@@ -1305,79 +1407,6 @@ class Logger {
     this[lastWasBlankSymbol](false);
     return this;
   }
-  /**
-   * Shows a progress indicator that can be cleared with `clearLine()`.
-   *
-   * Displays a simple status message with a '∴' prefix. Does not include
-   * animation or spinner. Intended to be cleared once the operation completes.
-   * The output stream (stderr or stdout) depends on whether the logger is
-   * stream-bound.
-   *
-   * @param text - The progress message to display
-   * @returns The logger instance for chaining
-   *
-   * @example
-   * ```typescript
-   * logger.progress('Processing files...')
-   * // ... do work ...
-   * logger.clearLine()
-   * logger.success('Files processed')
-   *
-   * // Stream-specific progress
-   * logger.stdout.progress('Loading...')
-   * // ... do work ...
-   * logger.stdout.clearLine()
-   * logger.stdout.log('Done')
-   * ```
-   */
-  progress(text) {
-    const con = this.#getConsole();
-    const stream = this.#getTargetStream();
-    const streamObj = stream === "stderr" ? con._stderr : con._stdout;
-    streamObj.write(`\u2234 ${text}`);
-    this[lastWasBlankSymbol](false);
-    return this;
-  }
-  /**
-   * Clears the current line in the terminal.
-   *
-   * Moves the cursor to the beginning of the line and clears all content.
-   * Works in both TTY and non-TTY environments. Useful for clearing
-   * progress indicators created with `progress()`.
-   *
-   * The stream to clear (stderr or stdout) depends on whether the logger
-   * is stream-bound.
-   *
-   * @returns The logger instance for chaining
-   *
-   * @example
-   * ```typescript
-   * logger.progress('Loading...')
-   * // ... do work ...
-   * logger.clearLine()
-   * logger.success('Loaded')
-   *
-   * // Clear multiple progress updates
-   * for (const file of files) {
-   *   logger.progress(`Processing ${file}`)
-   *   processFile(file)
-   *   logger.clearLine()
-   * }
-   * logger.success('All files processed')
-   * ```
-   */
-  clearLine() {
-    const con = this.#getConsole();
-    const stream = this.#getTargetStream();
-    const streamObj = stream === "stderr" ? con._stderr : con._stdout;
-    if (streamObj.isTTY) {
-      streamObj.cursorTo(0);
-      streamObj.clearLine(0);
-    } else {
-      streamObj.write("\r\x1B[K");
-    }
-    return this;
-  }
 }
 let _prototypeInitialized = false;
 function ensurePrototypeInitialized() {

package/dist/maintained-node-versions.d.ts

@@ -1,7 +1,7 @@
-declare const _default: readonly string[] & {
+declare const maintainedNodeVersions: readonly string[] & {
     current: string;
     last: string;
     next: string;
     previous: string;
 };
-export default _default;
+export { maintainedNodeVersions };

package/dist/maintained-node-versions.js

@@ -18,13 +18,16 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var maintained_node_versions_exports = {};
-/* module.exports will be set at end of file */
+__export(maintained_node_versions_exports, {
+  maintainedNodeVersions: () => maintainedNodeVersions
+});
+module.exports = __toCommonJS(maintained_node_versions_exports);
 const ObjectFreeze = Object.freeze;
 const next = "25.0.0";
 const current = "22.20.0";
 const previous = "20.19.5";
 const last = "18.20.8";
-var maintained_node_versions_default = ObjectFreeze(
+const maintainedNodeVersions = ObjectFreeze(
   Object.assign([last, previous, current, next], {
     current,
     last,
@@ -32,5 +35,7 @@ var maintained_node_versions_default = ObjectFreeze(
     previous
   })
 );
-
-module.exports = maintained_node_versions_default;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  maintainedNodeVersions
+});

package/dist/objects.js

@@ -40,7 +40,7 @@ __export(objects_exports, {
   toSortedObjectFromEntries: () => toSortedObjectFromEntries
 });
 module.exports = __toCommonJS(objects_exports);
-var import_core = require("./constants/core");
+var import_core = require("#constants/core");
 var import_arrays = require("./arrays");
 var import_sorts = require("./sorts");
 const ObjectDefineProperties = Object.defineProperties;

package/dist/package-default-node-range.d.ts

@@ -1,2 +1,2 @@
-declare const _default: string;
-export default _default;
+declare const packageDefaultNodeRange: string;
+export { packageDefaultNodeRange };

package/dist/package-default-node-range.js

@@ -18,9 +18,14 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_default_node_range_exports = {};
-/* module.exports will be set at end of file */
-const maintainedNodeVersions = require("./maintained-node-versions");
+__export(package_default_node_range_exports, {
+  packageDefaultNodeRange: () => packageDefaultNodeRange
+});
+module.exports = __toCommonJS(package_default_node_range_exports);
+const { maintainedNodeVersions } = require("#lib/maintained-node-versions");
 const semver = require("./external/semver");
-var package_default_node_range_default = `>=${semver.parse(maintainedNodeVersions.last).major}`;
-
-module.exports = package_default_node_range_default;
+const packageDefaultNodeRange = `>=${semver.parse(maintainedNodeVersions.last).major}`;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  packageDefaultNodeRange
+});

package/dist/package-default-socket-categories.d.ts

@@ -1,2 +1,6 @@
-declare const _default: readonly string[];
-export default _default;
+/**
+ * @fileoverview Default Socket security categories for packages.
+ */
+// Default category for new packages
+declare const packageDefaultSocketCategories: readonly string[];
+export { packageDefaultSocketCategories };

package/dist/package-default-socket-categories.js

@@ -18,7 +18,12 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_default_socket_categories_exports = {};
-/* module.exports will be set at end of file */
-var package_default_socket_categories_default = Object.freeze(["cleanup"]);
-
-module.exports = package_default_socket_categories_default;
+__export(package_default_socket_categories_exports, {
+  packageDefaultSocketCategories: () => packageDefaultSocketCategories
+});
+module.exports = __toCommonJS(package_default_socket_categories_exports);
+const packageDefaultSocketCategories = Object.freeze(["cleanup"]);
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  packageDefaultSocketCategories
+});

package/dist/package-extensions.d.ts

@@ -1,2 +1,2 @@
-declare const _default: readonly any[];
-export default _default;
+declare const packageExtensions: readonly any[];
+export { packageExtensions };

package/dist/package-extensions.js

@@ -18,10 +18,13 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_extensions_exports = {};
-/* module.exports will be set at end of file */
+__export(package_extensions_exports, {
+  packageExtensions: () => packageExtensions
+});
+module.exports = __toCommonJS(package_extensions_exports);
 const { freeze: ObjectFreeze } = Object;
 const yarnPkgExtensions = require("./external/@yarnpkg/extensions");
-var package_extensions_default = ObjectFreeze(
+const packageExtensions = ObjectFreeze(
   [
     yarnPkgExtensions.packageExtensions,
     [
@@ -61,5 +64,7 @@ var package_extensions_default = ObjectFreeze(
     return 0;
   })
 );
-
-module.exports = package_extensions_default;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  packageExtensions
+});

package/dist/packages/exports.js

@@ -27,7 +27,7 @@ __export(exports_exports, {
   resolvePackageJsonEntryExports: () => resolvePackageJsonEntryExports
 });
 module.exports = __toCommonJS(exports_exports);
-var import_core = require("../constants/core");
+var import_core = require("#constants/core");
 var import_arrays = require("../arrays");
 var import_objects = require("../objects");
 // @__NO_SIDE_EFFECTS__