@socketsecurity/lib 3.3.0 → 3.3.1

package/dist/external/@inquirer/confirm.js

@@ -3202,3 +3202,4 @@ var require_commonjs4 = __commonJS({
 
 // src/external/@inquirer/confirm.js
 module.exports = require_commonjs4();
+if (module.exports && module.exports.default && Object.keys(module.exports).length === 1) { module.exports = module.exports.default; }

package/dist/external/@inquirer/input.js

@@ -3226,3 +3226,4 @@ var require_commonjs4 = __commonJS({
 
 // src/external/@inquirer/input.js
 module.exports = require_commonjs4();
+if (module.exports && module.exports.default && Object.keys(module.exports).length === 1) { module.exports = module.exports.default; }

package/dist/external/@inquirer/password.js

@@ -3334,3 +3334,4 @@ var require_commonjs4 = __commonJS({
 
 // src/external/@inquirer/password.js
 module.exports = require_commonjs4();
+if (module.exports && module.exports.default && Object.keys(module.exports).length === 1) { module.exports = module.exports.default; }

package/dist/external/@inquirer/search.js

@@ -3331,3 +3331,4 @@ ${theme.style.description(selectedChoice.description)}` : ``;
 
 // src/external/@inquirer/search.js
 module.exports = require_commonjs4();
+if (module.exports && module.exports.default && Object.keys(module.exports).length === 1) { module.exports = module.exports.default; }

package/dist/external/@inquirer/select.js

@@ -3448,3 +3448,4 @@ ${page}${helpTipBottom}${choiceDescription}${ansi_escapes_1.default.cursorHide}`
 
 // src/external/@inquirer/select.js
 module.exports = require_commonjs4();
+if (module.exports && module.exports.default && Object.keys(module.exports).length === 1) { module.exports = module.exports.default; }

package/dist/lifecycle-script-names.d.ts

@@ -5,5 +5,4 @@
  * https://docs.npmjs.com/cli/v10/using-npm/scripts#life-cycle-scripts
  */
 declare const lifecycleScriptNames: Set<string>;
-export default lifecycleScriptNames;
-export { lifecycleScriptNames as 'module.exports' };
+export { lifecycleScriptNames };

package/dist/lifecycle-script-names.js

@@ -19,8 +19,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var lifecycle_script_names_exports = {};
 __export(lifecycle_script_names_exports, {
-  default: () => lifecycle_script_names_default,
-  "module.exports": () => lifecycleScriptNames
+  lifecycleScriptNames: () => lifecycleScriptNames
 });
 module.exports = __toCommonJS(lifecycle_script_names_exports);
 const lifecycleScriptNames = new Set(
@@ -39,8 +38,7 @@ const lifecycleScriptNames = new Set(
     ].map((n) => [`pre${n}`, n, `post${n}`])
   ].flat()
 );
-var lifecycle_script_names_default = lifecycleScriptNames;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  "module.exports": null
+  lifecycleScriptNames
 });

package/dist/maintained-node-versions.d.ts

@@ -4,5 +4,4 @@ declare const maintainedNodeVersions: readonly string[] & {
     next: string;
     previous: string;
 };
-export default maintainedNodeVersions;
-export { maintainedNodeVersions as 'module.exports' };
+export { maintainedNodeVersions };

package/dist/maintained-node-versions.js

@@ -19,8 +19,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var maintained_node_versions_exports = {};
 __export(maintained_node_versions_exports, {
-  default: () => maintained_node_versions_default,
-  "module.exports": () => maintainedNodeVersions
+  maintainedNodeVersions: () => maintainedNodeVersions
 });
 module.exports = __toCommonJS(maintained_node_versions_exports);
 const ObjectFreeze = Object.freeze;
@@ -36,8 +35,7 @@ const maintainedNodeVersions = ObjectFreeze(
     previous
   })
 );
-var maintained_node_versions_default = maintainedNodeVersions;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  "module.exports": null
+  maintainedNodeVersions
 });

package/dist/package-default-node-range.d.ts

@@ -1,3 +1,2 @@
 declare const packageDefaultNodeRange: string;
-export default packageDefaultNodeRange;
-export { packageDefaultNodeRange as 'module.exports' };
+export { packageDefaultNodeRange };

package/dist/package-default-node-range.js

@@ -19,15 +19,13 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_default_node_range_exports = {};
 __export(package_default_node_range_exports, {
-  default: () => package_default_node_range_default,
-  "module.exports": () => packageDefaultNodeRange
+  packageDefaultNodeRange: () => packageDefaultNodeRange
 });
 module.exports = __toCommonJS(package_default_node_range_exports);
-const maintainedNodeVersions = require("#lib/maintained-node-versions").default;
+const { maintainedNodeVersions } = require("#lib/maintained-node-versions");
 const semver = require("./external/semver");
 const packageDefaultNodeRange = `>=${semver.parse(maintainedNodeVersions.last).major}`;
-var package_default_node_range_default = packageDefaultNodeRange;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  "module.exports": null
+  packageDefaultNodeRange
 });

package/dist/package-default-socket-categories.d.ts

@@ -3,5 +3,4 @@
  */
 // Default category for new packages
 declare const packageDefaultSocketCategories: readonly string[];
-export default packageDefaultSocketCategories;
-export { packageDefaultSocketCategories as 'module.exports' };
+export { packageDefaultSocketCategories };

package/dist/package-default-socket-categories.js

@@ -19,13 +19,11 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_default_socket_categories_exports = {};
 __export(package_default_socket_categories_exports, {
-  default: () => package_default_socket_categories_default,
-  "module.exports": () => packageDefaultSocketCategories
+  packageDefaultSocketCategories: () => packageDefaultSocketCategories
 });
 module.exports = __toCommonJS(package_default_socket_categories_exports);
 const packageDefaultSocketCategories = Object.freeze(["cleanup"]);
-var package_default_socket_categories_default = packageDefaultSocketCategories;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  "module.exports": null
+  packageDefaultSocketCategories
 });

package/dist/package-extensions.d.ts

@@ -1,3 +1,2 @@
 declare const packageExtensions: readonly any[];
-export default packageExtensions;
-export { packageExtensions as 'module.exports' };
+export { packageExtensions };

package/dist/package-extensions.js

@@ -19,8 +19,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_extensions_exports = {};
 __export(package_extensions_exports, {
-  default: () => package_extensions_default,
-  "module.exports": () => packageExtensions
+  packageExtensions: () => packageExtensions
 });
 module.exports = __toCommonJS(package_extensions_exports);
 const { freeze: ObjectFreeze } = Object;
@@ -65,8 +64,7 @@ const packageExtensions = ObjectFreeze(
     return 0;
   })
 );
-var package_extensions_default = packageExtensions;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  "module.exports": null
+  packageExtensions
 });

package/dist/path.d.ts

@@ -162,6 +162,13 @@ export declare function isRelative(pathLike: string | Buffer | URL): boolean;
  * @param {string | Buffer | URL} pathLike - The path to normalize
  * @returns {string} The normalized path with forward slashes and collapsed segments
  *
+ * @security
+ * **WARNING**: This function resolves `..` patterns as part of normalization, which means
+ * paths like `/../etc/passwd` become `/etc/passwd`. When processing untrusted user input
+ * (HTTP requests, file uploads, URL parameters), you MUST validate for path traversal
+ * attacks BEFORE calling this function. Check for patterns like `..`, `%2e%2e`, `\..`,
+ * and other traversal encodings first.
+ *
  * @example
  * ```typescript
  * // Basic normalization
@@ -182,6 +189,10 @@ export declare function isRelative(pathLike: string | Buffer | URL): boolean;
  * normalizePath('..')                        // '..'
  * normalizePath('///foo///bar///')           // '/foo/bar'
  * normalizePath('foo/../..')                 // '..'
+ *
+ * // Security: Path traversal is resolved (intended behavior for trusted paths)
+ * normalizePath('/../etc/passwd')            // '/etc/passwd' ⚠️
+ * normalizePath('/safe/../../unsafe')        // '/unsafe' ⚠️
  * ```
  */
 /*@__NO_SIDE_EFFECTS__*/

package/dist/stdio/prompts.d.ts

@@ -98,6 +98,8 @@ export declare function createInquirerTheme(theme: Theme | ThemeName | unknown):
  */
 /*@__NO_SIDE_EFFECTS__*/
 export declare function wrapPrompt<T = unknown>(inquirerPrompt: (...args: unknown[]) => Promise<T>): (...args: unknown[]) => Promise<T | undefined>;
+// c8 ignore start - Third-party inquirer library requires and exports not testable in isolation.
+declare const checkboxRaw: any;
 declare const confirmRaw: any;
 declare const inputRaw: any;
 declare const passwordRaw: any;
@@ -105,6 +107,21 @@ declare const searchRaw: any;
 declare const selectRaw: any;
 declare const ActualSeparator: any;
 // c8 ignore stop
+/**
+ * Prompt to select multiple items from a list of choices.
+ * Wrapped with spinner handling and abort signal support.
+ *
+ * @example
+ * const choices = await checkbox({
+ *   message: 'Select options:',
+ *   choices: [
+ *     { name: 'Option 1', value: 'opt1' },
+ *     { name: 'Option 2', value: 'opt2' },
+ *     { name: 'Option 3', value: 'opt3' }
+ *   ]
+ * })
+ */
+export declare const checkbox: typeof checkboxRaw;
 /**
  * Prompt for a yes/no confirmation.
  * Wrapped with spinner handling and abort signal support.

package/dist/stdio/prompts.js

@@ -30,6 +30,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var prompts_exports = {};
 __export(prompts_exports, {
   Separator: () => ActualSeparator,
+  checkbox: () => checkbox,
   confirm: () => confirm,
   createInquirerTheme: () => createInquirerTheme,
   createSeparator: () => createSeparator,
@@ -140,17 +141,14 @@ function wrapPrompt(inquirerPrompt) {
     return typeof result === "string" ? result.trim() : result;
   };
 }
-const confirmExport = require("../external/@inquirer/confirm");
-const inputExport = require("../external/@inquirer/input");
-const passwordExport = require("../external/@inquirer/password");
-const searchExport = require("../external/@inquirer/search");
-const selectExport = require("../external/@inquirer/select");
-const confirmRaw = confirmExport.default ?? confirmExport;
-const inputRaw = inputExport.default ?? inputExport;
-const passwordRaw = passwordExport.default ?? passwordExport;
-const searchRaw = searchExport.default ?? searchExport;
-const selectRaw = selectExport.default ?? selectExport;
-const ActualSeparator = selectExport.Separator;
+const checkboxRaw = require("../external/@inquirer/checkbox");
+const confirmRaw = require("../external/@inquirer/confirm");
+const inputRaw = require("../external/@inquirer/input");
+const passwordRaw = require("../external/@inquirer/password");
+const searchRaw = require("../external/@inquirer/search");
+const selectRaw = require("../external/@inquirer/select");
+const ActualSeparator = selectRaw.Separator;
+const checkbox = /* @__PURE__ */ wrapPrompt(checkboxRaw);
 const confirm = /* @__PURE__ */ wrapPrompt(confirmRaw);
 const input = /* @__PURE__ */ wrapPrompt(inputRaw);
 const password = /* @__PURE__ */ wrapPrompt(passwordRaw);
@@ -162,6 +160,7 @@ function createSeparator(text) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   Separator,
+  checkbox,
   confirm,
   createInquirerTheme,
   createSeparator,

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "3.3.0",
+  "version": "3.3.1",
+  "packageManager": "pnpm@10.21.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
@@ -578,7 +579,8 @@
     "CHANGELOG.md"
   ],
   "engines": {
-    "node": ">=22"
+    "node": ">=22",
+    "pnpm": ">=10.21.0"
   },
   "sideEffects": false,
   "scripts": {
@@ -602,6 +604,7 @@
     "@biomejs/biome": "2.2.4",
     "@eslint/compat": "1.4.0",
     "@eslint/js": "9.38.0",
+    "@inquirer/checkbox": "4.3.1",
     "@inquirer/confirm": "5.1.16",
     "@inquirer/input": "4.2.2",
     "@inquirer/password": "4.0.18",
@@ -612,7 +615,7 @@
     "@socketregistry/is-unicode-supported": "1.0.5",
     "@socketregistry/packageurl-js": "1.3.5",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib-stable": "https://registry.npmjs.org/@socketsecurity/lib/-/lib-3.2.4.tgz",
+    "@socketsecurity/lib-stable": "https://registry.npmjs.org/@socketsecurity/lib/-/lib-3.3.0.tgz",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250920.1",
     "@vitest/coverage-v8": "4.0.3",

package/dist/external/@inquirer/core.js

@@ -1,4 +0,0 @@
-'use strict'
-
-// Failed to bundle @inquirer/core: Package "@inquirer/core" is not installed. Please install it with: pnpm add -D @inquirer/core
-throw new Error('Failed to bundle @inquirer/core')

package/dist/external/@inquirer/prompts.js

@@ -1,4 +0,0 @@
-'use strict'
-
-// Failed to bundle @inquirer/prompts: Package "@inquirer/prompts" is not installed. Please install it with: pnpm add -D @inquirer/prompts
-throw new Error('Failed to bundle @inquirer/prompts')