@socketsecurity/lib 3.4.0 → 4.0.0

package/dist/packages/isolation.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var isolation_exports = {};
 __export(isolation_exports, {
@@ -24,17 +34,12 @@ __export(isolation_exports, {
 module.exports = __toCommonJS(isolation_exports);
 var import_fs = require("fs");
 var import_platform = require("#constants/platform");
-var import_path = require("../path");
+var import_node_path = __toESM(require("node:path"));
+var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
+var import_spawn = require("../spawn");
+var import_normalize = require("../paths/normalize");
 var import_operations = require("./operations");
-var import_paths = require("#lib/paths");
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
+var import_socket = require("../paths/socket");
 const FS_CP_OPTIONS = {
   dereference: true,
   errorOnExist: false,
@@ -44,8 +49,7 @@ const FS_CP_OPTIONS = {
   ...import_platform.WIN32 ? { maxRetries: 3, retryDelay: 100 } : {}
 };
 async function resolveRealPath(pathStr) {
-  const path = /* @__PURE__ */ getPath();
-  return await import_fs.promises.realpath(pathStr).catch(() => path.resolve(pathStr));
+  return await import_fs.promises.realpath(pathStr).catch(() => import_node_path.default.resolve(pathStr));
 }
 async function mergePackageJson(pkgJsonPath, originalPkgJson) {
   const pkgJson = JSON.parse(await import_fs.promises.readFile(pkgJsonPath, "utf8"));
@@ -53,16 +57,15 @@ async function mergePackageJson(pkgJsonPath, originalPkgJson) {
   return mergedPkgJson;
 }
 async function isolatePackage(packageSpec, options) {
-  const path = /* @__PURE__ */ getPath();
   const opts = { __proto__: null, ...options };
   const { imports, install, onPackageJson, sourcePath: optSourcePath } = opts;
   let sourcePath = optSourcePath;
   let packageName;
   let spec;
-  if ((0, import_path.isPath)(packageSpec)) {
-    const trimmedPath = (0, import_path.trimLeadingDotSlash)(packageSpec);
-    const pathToResolve = (0, import_path.isAbsolute)(trimmedPath) ? trimmedPath : packageSpec;
-    sourcePath = path.resolve(pathToResolve);
+  if ((0, import_normalize.isPath)(packageSpec)) {
+    const trimmedPath = (0, import_normalize.trimLeadingDotSlash)(packageSpec);
+    const pathToResolve = (0, import_normalize.isAbsolute)(trimmedPath) ? trimmedPath : packageSpec;
+    sourcePath = import_node_path.default.resolve(pathToResolve);
     if (!(0, import_fs.existsSync)(sourcePath)) {
       throw new Error(`Source path does not exist: ${sourcePath}`);
     }
@@ -72,8 +75,7 @@ async function isolatePackage(packageSpec, options) {
     }
     packageName = pkgJson.name;
   } else {
-    const npa = require("../external/npm-package-arg");
-    const parsed = npa(packageSpec);
+    const parsed = (0, import_npm_package_arg.default)(packageSpec);
     packageName = parsed.name;
     if (parsed.type === "directory" || parsed.type === "file") {
       sourcePath = parsed.fetchSpec;
@@ -96,15 +98,15 @@ async function isolatePackage(packageSpec, options) {
   }
   const sanitizedName = packageName.replace(/[@/]/g, "-");
   const tempDir = await import_fs.promises.mkdtemp(
-    path.join((0, import_paths.getOsTmpDir)(), `socket-test-${sanitizedName}-`)
+    import_node_path.default.join((0, import_socket.getOsTmpDir)(), `socket-test-${sanitizedName}-`)
   );
-  const packageTempDir = path.join(tempDir, sanitizedName);
+  const packageTempDir = import_node_path.default.join(tempDir, sanitizedName);
   await import_fs.promises.mkdir(packageTempDir, { recursive: true });
   let installedPath;
   let originalPackageJson;
   if (spec) {
     await import_fs.promises.writeFile(
-      path.join(packageTempDir, "package.json"),
+      import_node_path.default.join(packageTempDir, "package.json"),
       JSON.stringify(
         {
           name: "test-temp",
@@ -118,15 +120,14 @@ async function isolatePackage(packageSpec, options) {
     if (install) {
       await install(packageTempDir);
     } else {
-      const { spawn } = require("../spawn");
       const packageInstallSpec = spec.startsWith("https://") ? spec : `${packageName}@${spec}`;
-      await spawn("pnpm", ["add", packageInstallSpec], {
+      await (0, import_spawn.spawn)("pnpm", ["add", packageInstallSpec], {
         cwd: packageTempDir,
         shell: import_platform.WIN32,
         stdio: "pipe"
       });
     }
-    installedPath = path.join(packageTempDir, "node_modules", packageName);
+    installedPath = import_node_path.default.join(packageTempDir, "node_modules", packageName);
     originalPackageJson = await (0, import_operations.readPackageJson)(installedPath, {
       normalize: true
     });
@@ -141,17 +142,17 @@ async function isolatePackage(packageSpec, options) {
     if (!sourcePath) {
       throw new Error("sourcePath is required when no version spec provided");
     }
-    const scopedPath = packageName.startsWith("@") ? path.join(
+    const scopedPath = packageName.startsWith("@") ? import_node_path.default.join(
       packageTempDir,
       "node_modules",
       packageName.split("/")[0] ?? ""
-    ) : path.join(packageTempDir, "node_modules");
+    ) : import_node_path.default.join(packageTempDir, "node_modules");
     await import_fs.promises.mkdir(scopedPath, { recursive: true });
-    installedPath = path.join(packageTempDir, "node_modules", packageName);
+    installedPath = import_node_path.default.join(packageTempDir, "node_modules", packageName);
     await import_fs.promises.cp(sourcePath, installedPath, FS_CP_OPTIONS);
   }
   if (onPackageJson || originalPackageJson) {
-    const pkgJsonPath = path.join(installedPath, "package.json");
+    const pkgJsonPath = import_node_path.default.join(installedPath, "package.json");
     const mergedPkgJson = await mergePackageJson(
       pkgJsonPath,
       originalPackageJson
@@ -162,8 +163,7 @@ async function isolatePackage(packageSpec, options) {
   if (install) {
     await install(installedPath);
   } else {
-    const { spawn } = require("../spawn");
-    await spawn("pnpm", ["install"], {
+    await (0, import_spawn.spawn)("pnpm", ["install"], {
       cwd: installedPath,
       shell: import_platform.WIN32,
       stdio: "pipe"
@@ -172,7 +172,7 @@ async function isolatePackage(packageSpec, options) {
   const exports2 = imports ? { __proto__: null } : void 0;
   if (imports) {
     for (const { 0: key, 1: specifier } of Object.entries(imports)) {
-      const fullPath = path.join(installedPath, specifier);
+      const fullPath = import_node_path.default.join(installedPath, specifier);
       exports2[key] = require(fullPath);
     }
   }

package/dist/packages/licenses.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var licenses_exports = {};
 __export(licenses_exports, {
@@ -31,36 +41,15 @@ __export(licenses_exports, {
 module.exports = __toCommonJS(licenses_exports);
 var import_core = require("#constants/core");
 var import_licenses = require("#constants/licenses");
+var import_node_path = __toESM(require("node:path"));
+var import_spdx_correct = __toESM(require("../external/spdx-correct"));
+var import_spdx_expression_parse = __toESM(require("../external/spdx-expression-parse"));
 var import_objects = require("../objects");
-var import_path = require("../path");
+var import_normalize = require("../paths/normalize");
 const copyLeftLicenses = (0, import_licenses.getCopyLeftLicenses)();
 const BINARY_OPERATION_NODE_TYPE = "BinaryOperation";
 const LICENSE_NODE_TYPE = "License";
 const fileReferenceRegExp = /^SEE LICEN[CS]E IN (.+)$/;
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
-let _spdxCorrect;
-// @__NO_SIDE_EFFECTS__
-function getSpdxCorrect() {
-  if (_spdxCorrect === void 0) {
-    _spdxCorrect = require("../external/spdx-correct");
-  }
-  return _spdxCorrect;
-}
-let _spdxExpParse;
-// @__NO_SIDE_EFFECTS__
-function getSpdxExpParse() {
-  if (_spdxExpParse === void 0) {
-    _spdxExpParse = require("../external/spdx-expression-parse");
-  }
-  return _spdxExpParse;
-}
 // @__NO_SIDE_EFFECTS__
 function collectIncompatibleLicenses(licenseNodes) {
   const result = [];
@@ -130,14 +119,12 @@ function createLicenseNode(rawNode) {
 }
 // @__NO_SIDE_EFFECTS__
 function parseSpdxExp(spdxExp) {
-  const spdxExpParse = /* @__PURE__ */ getSpdxExpParse();
   try {
-    return spdxExpParse(spdxExp);
+    return (0, import_spdx_expression_parse.default)(spdxExp);
   } catch {
   }
-  const spdxCorrect = /* @__PURE__ */ getSpdxCorrect();
-  const corrected = spdxCorrect(spdxExp);
-  return corrected ? spdxExpParse(corrected) : void 0;
+  const corrected = (0, import_spdx_correct.default)(spdxExp);
+  return corrected ? (0, import_spdx_expression_parse.default)(corrected) : void 0;
 }
 // @__NO_SIDE_EFFECTS__
 function resolvePackageLicenses(licenseFieldValue, where) {
@@ -146,11 +133,10 @@ function resolvePackageLicenses(licenseFieldValue, where) {
   }
   const match = fileReferenceRegExp.exec(licenseFieldValue);
   if (match) {
-    const path = /* @__PURE__ */ getPath();
     return [
       {
         license: licenseFieldValue,
-        inFile: (0, import_path.normalizePath)(path.relative(where, match[1] || ""))
+        inFile: (0, import_normalize.normalizePath)(import_node_path.default.relative(where, match[1] || ""))
       }
     ];
   }

package/dist/packages/manifest.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var manifest_exports = {};
 __export(manifest_exports, {
@@ -27,6 +37,9 @@ module.exports = __toCommonJS(manifest_exports);
 var import_packages = require("#constants/packages");
 var import_process = require("#constants/process");
 var import_socket = require("#constants/socket");
+var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
+var import_pacote = __toESM(require("../external/pacote"));
+var import_semver = __toESM(require("../external/semver"));
 var import_arrays = require("../arrays");
 var import_objects = require("../objects");
 var import_exports = require("./exports");
@@ -36,30 +49,6 @@ const packageDefaultNodeRange = (0, import_packages.getPackageDefaultNodeRange)(
 const PACKAGE_DEFAULT_SOCKET_CATEGORIES = (0, import_packages.getPackageDefaultSocketCategories)();
 const packumentCache = (0, import_packages.getPackumentCache)();
 const pkgScopePrefixRegExp = /^@socketregistry\//;
-let _npmPackageArg;
-// @__NO_SIDE_EFFECTS__
-function getNpmPackageArg() {
-  if (_npmPackageArg === void 0) {
-    _npmPackageArg = require("../external/npm-package-arg");
-  }
-  return _npmPackageArg;
-}
-let _pacote;
-// @__NO_SIDE_EFFECTS__
-function getPacote() {
-  if (_pacote === void 0) {
-    _pacote = require("../external/pacote");
-  }
-  return _pacote;
-}
-let _semver;
-// @__NO_SIDE_EFFECTS__
-function getSemver() {
-  if (_semver === void 0) {
-    _semver = require("../external/semver");
-  }
-  return _semver;
-}
 // @__NO_SIDE_EFFECTS__
 function createPackageJson(sockRegPkgName, directory, options) {
   const {
@@ -106,11 +95,10 @@ function createPackageJson(sockRegPkgName, directory, options) {
           const strKey = String(pair[0]);
           const result = [strKey, pair[1]];
           if (strKey === "node") {
-            const semver = /* @__PURE__ */ getSemver();
             const { 1: range } = result;
             if (typeof range === "string" && range && packageDefaultNodeRange) {
-              const coercedRange = semver.coerce(range);
-              if (!semver.satisfies(
+              const coercedRange = import_semver.default.coerce(range);
+              if (!import_semver.default.satisfies(
                 coercedRange?.version ?? "0.0.0",
                 packageDefaultNodeRange
               )) {
@@ -144,18 +132,16 @@ async function fetchPackageManifest(pkgNameOrId, options) {
   if (signal?.aborted) {
     return void 0;
   }
-  const pacote = /* @__PURE__ */ getPacote();
   let result;
   try {
-    result = await pacote.manifest(pkgNameOrId, pacoteOptions);
+    result = await import_pacote.default.manifest(pkgNameOrId, pacoteOptions);
   } catch {
   }
   if (signal?.aborted) {
     return void 0;
   }
   if (result) {
-    const npmPackageArg = /* @__PURE__ */ getNpmPackageArg();
-    const spec = npmPackageArg(pkgNameOrId, pacoteOptions.where);
+    const spec = (0, import_npm_package_arg.default)(pkgNameOrId, pacoteOptions.where);
     if ((0, import_validation.isRegistryFetcherType)(spec.type)) {
       return result;
     }
@@ -171,9 +157,8 @@ async function fetchPackageManifest(pkgNameOrId, options) {
 }
 // @__NO_SIDE_EFFECTS__
 async function fetchPackagePackument(pkgNameOrId, options) {
-  const pacote = /* @__PURE__ */ getPacote();
   try {
-    return await pacote.packument(pkgNameOrId, {
+    return await import_pacote.default.packument(pkgNameOrId, {
       __proto__: null,
       signal: abortSignal,
       ...options,

package/dist/packages/normalize.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var normalize_exports = {};
 __export(normalize_exports, {
@@ -25,50 +35,19 @@ __export(normalize_exports, {
   unescapeScope: () => unescapeScope
 });
 module.exports = __toCommonJS(normalize_exports);
+var import_socket = require("../constants/socket");
+var import_regexps = require("../regexps");
+var import_normalize_package_data = __toESM(require("../external/normalize-package-data"));
 var import_objects = require("../objects");
 const ArrayIsArray = Array.isArray;
 const ObjectHasOwn = Object.hasOwn;
-let _REGISTRY_SCOPE_DELIMITER;
-function getRegistryScopeDelimiter() {
-  if (_REGISTRY_SCOPE_DELIMITER === void 0) {
-    _REGISTRY_SCOPE_DELIMITER = /*@__INLINE__*/
-    require("../constants/socket").REGISTRY_SCOPE_DELIMITER;
-  }
-  return _REGISTRY_SCOPE_DELIMITER;
-}
-let _SOCKET_REGISTRY_SCOPE;
-function getSocketRegistryScope() {
-  if (_SOCKET_REGISTRY_SCOPE === void 0) {
-    _SOCKET_REGISTRY_SCOPE = /*@__INLINE__*/
-    require("../constants/socket").SOCKET_REGISTRY_SCOPE;
-  }
-  return _SOCKET_REGISTRY_SCOPE;
-}
-let _escapeRegExp;
-function getEscapeRegExp() {
-  if (_escapeRegExp === void 0) {
-    _escapeRegExp = require("../regexps").escapeRegExp;
-  }
-  return _escapeRegExp;
-}
 function getEscapedScopeRegExp() {
-  const REGISTRY_SCOPE_DELIMITER = getRegistryScopeDelimiter();
-  const escapeRegExp = getEscapeRegExp();
-  const firstChar = REGISTRY_SCOPE_DELIMITER[0];
+  const firstChar = import_socket.REGISTRY_SCOPE_DELIMITER[0];
   return new RegExp(
-    `^[^${escapeRegExp(firstChar)}]+${escapeRegExp(REGISTRY_SCOPE_DELIMITER)}(?!${escapeRegExp(firstChar)})`
+    `^[^${(0, import_regexps.escapeRegExp)(firstChar)}]+${(0, import_regexps.escapeRegExp)(import_socket.REGISTRY_SCOPE_DELIMITER)}(?!${(0, import_regexps.escapeRegExp)(firstChar)})`
   );
 }
-let _normalizePackageData;
-// @__NO_SIDE_EFFECTS__
-function getNormalizePackageData() {
-  if (_normalizePackageData === void 0) {
-    _normalizePackageData = require("../external/normalize-package-data");
-  }
-  return _normalizePackageData;
-}
 let _findPackageExtensions;
-// @__NO_SIDE_EFFECTS__
 function _getFindPackageExtensions() {
   if (_findPackageExtensions === void 0) {
     const operations = require("#packages/operations");
@@ -93,10 +72,9 @@ function normalizePackageJson(pkgJson, options) {
       ObjectHasOwn(pkgJson, k) ? pkgJson[k] : void 0
     ]) : []
   ];
-  const normalizePackageData = /* @__PURE__ */ getNormalizePackageData();
-  normalizePackageData(pkgJson);
+  (0, import_normalize_package_data.default)(pkgJson);
   if (pkgJson.name && pkgJson.version) {
-    const findPackageExtensions = /* @__PURE__ */ _getFindPackageExtensions();
+    const findPackageExtensions = _getFindPackageExtensions();
     const extensions = findPackageExtensions(pkgJson.name, pkgJson.version);
     if (extensions && typeof extensions === "object") {
       (0, import_objects.merge)(pkgJson, extensions);
@@ -115,15 +93,13 @@ function resolveEscapedScope(sockRegPkgName) {
 }
 // @__NO_SIDE_EFFECTS__
 function resolveOriginalPackageName(sockRegPkgName) {
-  const SOCKET_REGISTRY_SCOPE = getSocketRegistryScope();
-  const name = sockRegPkgName.startsWith(`${SOCKET_REGISTRY_SCOPE}/`) ? sockRegPkgName.slice(SOCKET_REGISTRY_SCOPE.length + 1) : sockRegPkgName;
+  const name = sockRegPkgName.startsWith(`${import_socket.SOCKET_REGISTRY_SCOPE}/`) ? sockRegPkgName.slice(import_socket.SOCKET_REGISTRY_SCOPE.length + 1) : sockRegPkgName;
   const escapedScope = /* @__PURE__ */ resolveEscapedScope(name);
   return escapedScope ? `${/* @__PURE__ */ unescapeScope(escapedScope)}/${name.slice(escapedScope.length)}` : name;
 }
 // @__NO_SIDE_EFFECTS__
 function unescapeScope(escapedScope) {
-  const REGISTRY_SCOPE_DELIMITER = getRegistryScopeDelimiter();
-  return `@${escapedScope.slice(0, -REGISTRY_SCOPE_DELIMITER.length)}`;
+  return `@${escapedScope.slice(0, -import_socket.REGISTRY_SCOPE_DELIMITER.length)}`;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {