@socketsecurity/lib 3.3.0 → 3.3.2

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.2](https://github.com/SocketDev/socket-lib/releases/tag/v3.3.2) - 2025-11-13
+
+### Changed
+
+- **dlx**: Install package dependencies after download
+- **external**: Optimize npm package bundle sizes (~3MB reduction)
+
+## [3.3.1](https://github.com/SocketDev/socket-lib/releases/tag/v3.3.1) - 2025-11-11
+
+### Added
+
+- Added `SOCKET_DOCS_CONTACT_URL` constant for documentation contact support page
+- Added `checkbox` prompt support
+
 ## [3.3.0](https://github.com/SocketDev/socket-lib/releases/tag/v3.3.0) - 2025-11-07
 
 ### Added

package/README.md

@@ -2,11 +2,12 @@
 
 [![Socket Badge](https://socket.dev/api/badge/npm/package/@socketsecurity/lib)](https://socket.dev/npm/package/@socketsecurity/lib)
 [![CI](https://github.com/SocketDev/socket-lib/actions/workflows/ci.yml/badge.svg)](https://github.com/SocketDev/socket-lib/actions/workflows/ci.yml)
-![Coverage](https://img.shields.io/badge/coverage-83.02%25-brightgreen)
+![Coverage](https://img.shields.io/badge/coverage-83.06%25-brightgreen)
 
 [![Follow @SocketSecurity](https://img.shields.io/twitter/follow/SocketSecurity?style=social)](https://twitter.com/SocketSecurity)
+[![Follow @socket.dev on Bluesky](https://img.shields.io/badge/Follow-@socket.dev-1DA1F2?style=social&logo=bluesky)](https://bsky.app/profile/socket.dev)
 
-Core library for Socket.dev tools.
+Core library for [Socket.dev](https://socket.dev/) tools.
 
 ## Install
 

package/dist/agent.d.ts

@@ -5,7 +5,6 @@ import type { SpawnOptions } from './spawn';
  * SECURITY: Uses array-based arguments to prevent command injection. All elements
  * in the args array are properly escaped by Node.js when passed to spawn().
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function execNpm(args: string[], options?: SpawnOptions | undefined): import("./spawn").PromiseSpawnResult;
 export interface PnpmOptions extends SpawnOptions {
     allowLockfileUpdate?: boolean;
@@ -16,7 +15,6 @@ export interface PnpmOptions extends SpawnOptions {
  * SECURITY: Uses array-based arguments to prevent command injection. All elements
  * in the args array are properly escaped by Node.js when passed to execBin().
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function execPnpm(args: string[], options?: PnpmOptions | undefined): Promise<{
     cmd: string;
     args: string[] | readonly string[];
@@ -31,7 +29,6 @@ export declare function execPnpm(args: string[], options?: PnpmOptions | undefin
  * SECURITY: Uses array-based arguments to prevent command injection. All elements
  * in the args array are properly escaped by Node.js when passed to execBin().
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function execYarn(args: string[], options?: import('./spawn').SpawnOptions): Promise<{
     cmd: string;
     args: string[] | readonly string[];
@@ -91,7 +88,6 @@ export declare const isPnpmLoglevelFlag: typeof isNpmLoglevelFlag;
 export interface ExecScriptOptions extends SpawnOptions {
     prepost?: boolean | undefined;
 }
-/*@__NO_SIDE_EFFECTS__*/
 export declare function execScript(scriptName: string, args?: string[] | readonly string[] | ExecScriptOptions | undefined, options?: ExecScriptOptions | undefined): Promise<{
     cmd: string;
     args: string[] | readonly string[];

package/dist/agent.js

@@ -74,7 +74,6 @@ const yarnInstallLikeCommands = /* @__PURE__ */ new Set([
   "unlink",
   "import"
 ]);
-// @__NO_SIDE_EFFECTS__
 function execNpm(args, options) {
   const useDebug = (0, import_debug.isDebug)();
   const terminatorPos = args.indexOf("--");
@@ -113,7 +112,6 @@ function execNpm(args, options) {
     }
   );
 }
-// @__NO_SIDE_EFFECTS__
 function execPnpm(args, options) {
   const { allowLockfileUpdate, ...extBinOpts } = {
     __proto__: null,
@@ -147,7 +145,6 @@ function execPnpm(args, options) {
     extBinOpts
   );
 }
-// @__NO_SIDE_EFFECTS__
 function execYarn(args, options) {
   const useDebug = (0, import_debug.isDebug)();
   const terminatorPos = args.indexOf("--");
@@ -213,7 +210,6 @@ function isPnpmInstallCommand(cmdArg) {
   return pnpmInstallCommands.has(cmdArg);
 }
 const isPnpmLoglevelFlag = isNpmLoglevelFlag;
-// @__NO_SIDE_EFFECTS__
 function execScript(scriptName, args, options) {
   let resolvedOptions;
   let resolvedArgs;
@@ -239,7 +235,7 @@ function execScript(scriptName, args, options) {
     { cwd }
   );
   if (pnpmLockPath) {
-    return /* @__PURE__ */ execPnpm(["run", scriptName, ...resolvedArgs], spawnOptions);
+    return execPnpm(["run", scriptName, ...resolvedArgs], spawnOptions);
   }
   const packageLockPath = (0, import_fs.findUpSync)(
     /*@__INLINE__*/
@@ -247,7 +243,7 @@ function execScript(scriptName, args, options) {
     { cwd }
   );
   if (packageLockPath) {
-    return /* @__PURE__ */ execNpm(["run", scriptName, ...resolvedArgs], spawnOptions);
+    return execNpm(["run", scriptName, ...resolvedArgs], spawnOptions);
   }
   const yarnLockPath = (0, import_fs.findUpSync)(
     /*@__INLINE__*/
@@ -255,7 +251,7 @@ function execScript(scriptName, args, options) {
     { cwd }
   );
   if (yarnLockPath) {
-    return /* @__PURE__ */ execYarn(["run", scriptName, ...resolvedArgs], spawnOptions);
+    return execYarn(["run", scriptName, ...resolvedArgs], spawnOptions);
   }
   return (0, import_spawn.spawn)(
     /* @__PURE__ */ require("#constants/node").getExecPath(),

package/dist/constants/node.js

@@ -49,7 +49,7 @@ function getNodeMajorVersion() {
 let _maintainedNodeVersions;
 function getMaintainedNodeVersions() {
   if (_maintainedNodeVersions === void 0) {
-    _maintainedNodeVersions = require("#lib/maintained-node-versions").default;
+    _maintainedNodeVersions = require("#lib/maintained-node-versions").maintainedNodeVersions;
   }
   return _maintainedNodeVersions;
 }

package/dist/constants/packages.d.ts

@@ -4,16 +4,23 @@ export declare const AT_LATEST = "@latest";
 export declare const LATEST = "latest";
 export declare const PACKAGE_DEFAULT_VERSION = "1.0.0";
 // Package default Node range.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPackageDefaultNodeRange(): string | undefined;
 // Package default Socket categories.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPackageDefaultSocketCategories(): readonly string[];
 // Package extensions.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPackageExtensions(): Iterable<[string, unknown]>;
 // NPM lifecycle event.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNpmLifecycleEvent(): string | undefined;
 // Lifecycle script names.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getLifecycleScriptNames(): string[];
 // Packument cache.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPackumentCache(): Map<string, unknown>;
 // Pacote cache path.
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPacoteCachePath(): string;

package/dist/constants/packages.js

@@ -43,41 +43,48 @@ const PACKAGE = "package";
 const AT_LATEST = "@latest";
 const LATEST = "latest";
 const PACKAGE_DEFAULT_VERSION = "1.0.0";
+// @__NO_SIDE_EFFECTS__
 function getPackageDefaultNodeRange() {
   if (_packageDefaultNodeRange === void 0) {
-    _packageDefaultNodeRange = require("#lib/package-default-node-range").default;
+    _packageDefaultNodeRange = require("#lib/package-default-node-range").packageDefaultNodeRange;
   }
   return _packageDefaultNodeRange;
 }
+// @__NO_SIDE_EFFECTS__
 function getPackageDefaultSocketCategories() {
   if (_packageDefaultSocketCategories === void 0) {
-    _packageDefaultSocketCategories = require("#lib/package-default-socket-categories").default;
+    _packageDefaultSocketCategories = require("#lib/package-default-socket-categories").packageDefaultSocketCategories;
   }
   return _packageDefaultSocketCategories;
 }
+// @__NO_SIDE_EFFECTS__
 function getPackageExtensions() {
   if (_packageExtensions === void 0) {
-    const exts = require("#lib/package-extensions").default;
-    _packageExtensions = Object.entries(exts);
+    const { packageExtensions } = require("#lib/package-extensions");
+    _packageExtensions = Object.entries(packageExtensions);
   }
   return _packageExtensions;
 }
+// @__NO_SIDE_EFFECTS__
 function getNpmLifecycleEvent() {
   return (0, import_npm.getNpmLifecycleEvent)();
 }
+// @__NO_SIDE_EFFECTS__
 function getLifecycleScriptNames() {
   if (_lifecycleScriptNames === void 0) {
-    const scriptNamesSet = require("#lib/lifecycle-script-names").default;
-    _lifecycleScriptNames = Array.from(scriptNamesSet);
+    const { lifecycleScriptNames } = require("#lib/lifecycle-script-names");
+    _lifecycleScriptNames = Array.from(lifecycleScriptNames);
   }
   return _lifecycleScriptNames;
 }
+// @__NO_SIDE_EFFECTS__
 function getPackumentCache() {
   if (_packumentCache === void 0) {
     _packumentCache = /* @__PURE__ */ new Map();
   }
   return _packumentCache;
 }
+// @__NO_SIDE_EFFECTS__
 function getPacoteCachePath() {
   if (_pacoteCachePath === void 0) {
     try {

package/dist/constants/socket.d.ts

@@ -14,6 +14,7 @@ export declare const SOCKET_API_TOKENS_URL = "https://socket.dev/dashboard/setti
 export declare const SOCKET_PRICING_URL = "https://socket.dev/pricing";
 export declare const SOCKET_STATUS_URL = "https://status.socket.dev";
 export declare const SOCKET_DOCS_URL = "https://docs.socket.dev";
+export declare const SOCKET_DOCS_CONTACT_URL = "https://docs.socket.dev/docs/contact-support";
 // Socket.dev scopes.
 export declare const SOCKET_REGISTRY_SCOPE = "@socketregistry";
 export declare const SOCKET_SECURITY_SCOPE = "@socketsecurity";

package/dist/constants/socket.js

@@ -29,6 +29,7 @@ __export(socket_exports, {
   SOCKET_CONTACT_URL: () => SOCKET_CONTACT_URL,
   SOCKET_DASHBOARD_URL: () => SOCKET_DASHBOARD_URL,
   SOCKET_DLX_APP_NAME: () => SOCKET_DLX_APP_NAME,
+  SOCKET_DOCS_CONTACT_URL: () => SOCKET_DOCS_CONTACT_URL,
   SOCKET_DOCS_URL: () => SOCKET_DOCS_URL,
   SOCKET_FIREWALL_APP_NAME: () => SOCKET_FIREWALL_APP_NAME,
   SOCKET_GITHUB_ORG: () => SOCKET_GITHUB_ORG,
@@ -57,6 +58,7 @@ const SOCKET_API_TOKENS_URL = "https://socket.dev/dashboard/settings/api-tokens"
 const SOCKET_PRICING_URL = "https://socket.dev/pricing";
 const SOCKET_STATUS_URL = "https://status.socket.dev";
 const SOCKET_DOCS_URL = "https://docs.socket.dev";
+const SOCKET_DOCS_CONTACT_URL = "https://docs.socket.dev/docs/contact-support";
 const SOCKET_REGISTRY_SCOPE = "@socketregistry";
 const SOCKET_SECURITY_SCOPE = "@socketsecurity";
 const SOCKET_OVERRIDE_SCOPE = "@socketoverride";
@@ -85,6 +87,7 @@ const REGISTRY_SCOPE_DELIMITER = "__";
   SOCKET_CONTACT_URL,
   SOCKET_DASHBOARD_URL,
   SOCKET_DLX_APP_NAME,
+  SOCKET_DOCS_CONTACT_URL,
   SOCKET_DOCS_URL,
   SOCKET_FIREWALL_APP_NAME,
   SOCKET_GITHUB_ORG,

package/dist/dlx-package.js

@@ -75,6 +75,14 @@ function getPacote() {
   }
   return _pacote;
 }
+let _arborist;
+// @__NO_SIDE_EFFECTS__
+function getArborist() {
+  if (_arborist === void 0) {
+    _arborist = require("./external/@npmcli/arborist");
+  }
+  return _arborist;
+}
 const rangeOperatorsRegExp = /[~^><=xX* ]|\|\|/;
 function parsePackageSpec(spec) {
   try {
@@ -141,6 +149,25 @@ Ensure the filesystem is writable or set SOCKET_DLX_DIR to a writable location.`
           // Use consistent pacote cache path (respects npm cache locations when available).
           cache: pacoteCachePath || import_path.default.join(packageDir, ".cache")
         });
+        const Arborist = /* @__PURE__ */ getArborist();
+        const arb = new Arborist({
+          path: installedDir,
+          cache: pacoteCachePath || import_path.default.join(packageDir, ".cache"),
+          // Skip devDependencies (production-only like npx).
+          omit: ["dev"],
+          // Security: Skip install/preinstall/postinstall scripts to prevent arbitrary code execution.
+          ignoreScripts: true,
+          // Security: Enable binary links (needed for dlx to execute the package binary).
+          binLinks: true,
+          // Suppress funding messages (unneeded for ephemeral dlx installs).
+          fund: false,
+          // Skip audit (unneeded for ephemeral dlx installs).
+          audit: false,
+          // Suppress output (unneeded for ephemeral dlx installs).
+          silent: true
+        });
+        await arb.buildIdealTree();
+        await arb.reify({ save: false });
       } catch (e) {
         const code = e.code;
         if (code === "E404" || code === "ETARGET") {

package/dist/env/ci.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getCI(): boolean;

package/dist/env/ci.js

@@ -24,6 +24,7 @@ __export(ci_exports, {
 module.exports = __toCommonJS(ci_exports);
 var import_helpers = require("#env/helpers");
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getCI() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("CI"));
 }

package/dist/env/debug.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getDebug(): string | undefined;

package/dist/env/debug.js

@@ -23,6 +23,7 @@ __export(debug_exports, {
 });
 module.exports = __toCommonJS(debug_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getDebug() {
   return (0, import_rewire.getEnvValue)("DEBUG");
 }

package/dist/env/github.d.ts

@@ -2,39 +2,47 @@
  * GITHUB_API_URL environment variable.
  * GitHub API URL (e.g., https://api.github.com).
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubApiUrl(): string | undefined;
 /**
  * GITHUB_BASE_REF environment variable.
  * GitHub pull request base branch.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubBaseRef(): string | undefined;
 /**
  * GITHUB_REF_NAME environment variable.
  * GitHub branch or tag name.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubRefName(): string | undefined;
 /**
  * GITHUB_REF_TYPE environment variable.
  * GitHub ref type (branch or tag).
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubRefType(): string | undefined;
 /**
  * GITHUB_REPOSITORY environment variable.
  * GitHub repository name in owner/repo format.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubRepository(): string | undefined;
 /**
  * GITHUB_SERVER_URL environment variable.
  * GitHub server URL (e.g., https://github.com).
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubServerUrl(): string | undefined;
 /**
  * GITHUB_TOKEN environment variable.
  * GitHub authentication token for API access.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGithubToken(): string | undefined;
 /**
  * GH_TOKEN environment variable.
  * Alternative GitHub authentication token for API access (used by GitHub CLI).
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getGhToken(): string | undefined;

package/dist/env/github.js

@@ -30,27 +30,35 @@ __export(github_exports, {
 });
 module.exports = __toCommonJS(github_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getGithubApiUrl() {
   return (0, import_rewire.getEnvValue)("GITHUB_API_URL");
 }
+// @__NO_SIDE_EFFECTS__
 function getGithubBaseRef() {
   return (0, import_rewire.getEnvValue)("GITHUB_BASE_REF");
 }
+// @__NO_SIDE_EFFECTS__
 function getGithubRefName() {
   return (0, import_rewire.getEnvValue)("GITHUB_REF_NAME");
 }
+// @__NO_SIDE_EFFECTS__
 function getGithubRefType() {
   return (0, import_rewire.getEnvValue)("GITHUB_REF_TYPE");
 }
+// @__NO_SIDE_EFFECTS__
 function getGithubRepository() {
   return (0, import_rewire.getEnvValue)("GITHUB_REPOSITORY");
 }
+// @__NO_SIDE_EFFECTS__
 function getGithubServerUrl() {
   return (0, import_rewire.getEnvValue)("GITHUB_SERVER_URL");
 }
+// @__NO_SIDE_EFFECTS__
 function getGithubToken() {
   return (0, import_rewire.getEnvValue)("GITHUB_TOKEN");
 }
+// @__NO_SIDE_EFFECTS__
 function getGhToken() {
   return (0, import_rewire.getEnvValue)("GH_TOKEN");
 }

package/dist/env/helpers.d.ts

@@ -1,6 +1,9 @@
 /**
  * @fileoverview Environment variable type conversion helpers.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function envAsBoolean(value: string | undefined): boolean;
+/*@__NO_SIDE_EFFECTS__*/
 export declare function envAsNumber(value: string | undefined): number;
+/*@__NO_SIDE_EFFECTS__*/
 export declare function envAsString(value: string | undefined): string;

package/dist/env/helpers.js

@@ -24,6 +24,7 @@ __export(helpers_exports, {
   envAsString: () => envAsString
 });
 module.exports = __toCommonJS(helpers_exports);
+// @__NO_SIDE_EFFECTS__
 function envAsBoolean(value) {
   if (!value) {
     return false;
@@ -31,6 +32,7 @@ function envAsBoolean(value) {
   const lower = value.toLowerCase();
   return lower === "true" || lower === "1" || lower === "yes";
 }
+// @__NO_SIDE_EFFECTS__
 function envAsNumber(value) {
   if (!value) {
     return 0;
@@ -38,6 +40,7 @@ function envAsNumber(value) {
   const num = Number(value);
   return Number.isNaN(num) ? 0 : num;
 }
+// @__NO_SIDE_EFFECTS__
 function envAsString(value) {
   return value || "";
 }

package/dist/env/home.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getHome(): string | undefined;

package/dist/env/home.js

@@ -23,6 +23,7 @@ __export(home_exports, {
 });
 module.exports = __toCommonJS(home_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getHome() {
   return (0, import_rewire.getEnvValue)("HOME");
 }

package/dist/env/locale.d.ts

@@ -2,14 +2,17 @@
  * LANG environment variable.
  * System locale and language settings.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getLang(): string | undefined;
 /**
  * LC_ALL environment variable.
  * Override for all locale settings.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getLcAll(): string | undefined;
 /**
  * LC_MESSAGES environment variable.
  * Locale setting for message translations.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getLcMessages(): string | undefined;

package/dist/env/locale.js

@@ -25,12 +25,15 @@ __export(locale_exports, {
 });
 module.exports = __toCommonJS(locale_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getLang() {
   return (0, import_rewire.getEnvValue)("LANG");
 }
+// @__NO_SIDE_EFFECTS__
 function getLcAll() {
   return (0, import_rewire.getEnvValue)("LC_ALL");
 }
+// @__NO_SIDE_EFFECTS__
 function getLcMessages() {
   return (0, import_rewire.getEnvValue)("LC_MESSAGES");
 }

package/dist/env/node-auth-token.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNodeAuthToken(): string | undefined;

package/dist/env/node-auth-token.js

@@ -23,6 +23,7 @@ __export(node_auth_token_exports, {
 });
 module.exports = __toCommonJS(node_auth_token_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getNodeAuthToken() {
   return (0, import_rewire.getEnvValue)("NODE_AUTH_TOKEN");
 }

package/dist/env/node-env.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNodeEnv(): string | undefined;

package/dist/env/node-env.js

@@ -23,6 +23,7 @@ __export(node_env_exports, {
 });
 module.exports = __toCommonJS(node_env_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getNodeEnv() {
   return (0, import_rewire.getEnvValue)("NODE_ENV");
 }

package/dist/env/npm.d.ts

@@ -2,24 +2,29 @@
  * npm_config_registry environment variable.
  * NPM registry URL configured by package managers.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNpmConfigRegistry(): string | undefined;
 /**
  * npm_config_user_agent environment variable.
  * User agent string set by npm/pnpm/yarn package managers.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNpmConfigUserAgent(): string | undefined;
 /**
  * npm_lifecycle_event environment variable.
  * The name of the npm lifecycle event that's currently running.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNpmLifecycleEvent(): string | undefined;
 /**
  * NPM_REGISTRY environment variable.
  * NPM registry URL override.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNpmRegistry(): string | undefined;
 /**
  * NPM_TOKEN environment variable.
  * Authentication token for NPM registry access.
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getNpmToken(): string | undefined;

package/dist/env/npm.js

@@ -27,18 +27,23 @@ __export(npm_exports, {
 });
 module.exports = __toCommonJS(npm_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getNpmConfigRegistry() {
   return (0, import_rewire.getEnvValue)("npm_config_registry");
 }
+// @__NO_SIDE_EFFECTS__
 function getNpmConfigUserAgent() {
   return (0, import_rewire.getEnvValue)("npm_config_user_agent");
 }
+// @__NO_SIDE_EFFECTS__
 function getNpmLifecycleEvent() {
   return (0, import_rewire.getEnvValue)("npm_lifecycle_event");
 }
+// @__NO_SIDE_EFFECTS__
 function getNpmRegistry() {
   return (0, import_rewire.getEnvValue)("NPM_REGISTRY");
 }
+// @__NO_SIDE_EFFECTS__
 function getNpmToken() {
   return (0, import_rewire.getEnvValue)("NPM_TOKEN");
 }

package/dist/env/package-manager.d.ts

@@ -27,6 +27,7 @@ export type PackageManagerType = 'npm' | 'pnpm' | 'yarn' | 'bun' | null;
  * detectPackageManager() // null
  * ```
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function detectPackageManager(): PackageManagerType;
 /**
  * Get the package manager name and version from user agent.
@@ -38,6 +39,7 @@ export declare function detectPackageManager(): PackageManagerType;
  * // { name: 'pnpm', version: '8.15.1' }
  * ```
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPackageManagerInfo(): {
     name: string;
     version: string;
@@ -55,4 +57,5 @@ export declare function getPackageManagerInfo(): {
  * // yarn: "yarn/1.22.19 npm/? node/v20.11.0 darwin arm64"
  * ```
  */
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPackageManagerUserAgent(): string | undefined;

package/dist/env/package-manager.js

@@ -25,8 +25,9 @@ __export(package_manager_exports, {
 });
 module.exports = __toCommonJS(package_manager_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function detectPackageManager() {
-  const userAgent = getPackageManagerUserAgent();
+  const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();
   if (userAgent) {
     const match = userAgent.match(/^(npm|pnpm|yarn|bun)\//);
     if (match) {
@@ -50,8 +51,9 @@ function detectPackageManager() {
   }
   return null;
 }
+// @__NO_SIDE_EFFECTS__
 function getPackageManagerInfo() {
-  const userAgent = getPackageManagerUserAgent();
+  const userAgent = /* @__PURE__ */ getPackageManagerUserAgent();
   if (!userAgent) {
     return null;
   }
@@ -64,6 +66,7 @@ function getPackageManagerInfo() {
   }
   return null;
 }
+// @__NO_SIDE_EFFECTS__
 function getPackageManagerUserAgent() {
   return (0, import_rewire.getEnvValue)("npm_config_user_agent");
 }

package/dist/env/path.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPath(): string | undefined;

package/dist/env/path.js

@@ -23,6 +23,7 @@ __export(path_exports, {
 });
 module.exports = __toCommonJS(path_exports);
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getPath() {
   return (0, import_rewire.getEnvValue)("PATH");
 }

package/dist/env/pre-commit.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getPreCommit(): boolean;

package/dist/env/pre-commit.js

@@ -24,6 +24,7 @@ __export(pre_commit_exports, {
 module.exports = __toCommonJS(pre_commit_exports);
 var import_helpers = require("#env/helpers");
 var import_rewire = require("#env/rewire");
+// @__NO_SIDE_EFFECTS__
 function getPreCommit() {
   return (0, import_helpers.envAsBoolean)((0, import_rewire.getEnvValue)("PRE_COMMIT"));
 }

package/dist/env/shell.d.ts

@@ -1 +1,2 @@
+/*@__NO_SIDE_EFFECTS__*/
 export declare function getShell(): string | undefined;