@socketsecurity/lib 3.5.0 → 4.0.1

package/dist/logger.d.ts

@@ -14,7 +14,6 @@
  * console.log(`${LOG_SYMBOLS.info} Information message`)
  * console.log(`${LOG_SYMBOLS.step} Processing step`)
  * console.log(`${LOG_SYMBOLS.progress} Working on task`)
- * console.log(`${LOG_SYMBOLS.reason} Working through logic`)
  * ```
  */
 type LogSymbols = {
@@ -24,8 +23,6 @@ type LogSymbols = {
     info: string;
     /** Cyan colored progress indicator symbol (∴ or :. in ASCII) */
     progress: string;
-    /** Dimmed yellow reasoning/working symbol (∴ or :. in ASCII) */
-    reason: string;
     /** Cyan colored skip symbol (↻ or @ in ASCII) */
     skip: string;
     /** Cyan colored step symbol (→ or > in ASCII) */
@@ -85,7 +82,6 @@ export type { LogSymbols, LoggerMethods, Task };
  * console.log(`${LOG_SYMBOLS.fail} Build failed`)          // Theme error color ✖
  * console.log(`${LOG_SYMBOLS.info} Starting process`)      // Theme info color ℹ
  * console.log(`${LOG_SYMBOLS.progress} Working on task`)   // Theme step color ∴
- * console.log(`${LOG_SYMBOLS.reason} Analyzing dependencies`) // Dimmed yellow ∴
  * console.log(`${LOG_SYMBOLS.step} Processing files`)      // Theme step color →
  * console.log(`${LOG_SYMBOLS.success} Build completed`)    // Theme success color ✔
  * console.log(`${LOG_SYMBOLS.warn} Deprecated API used`)   // Theme warning color ⚠
@@ -701,27 +697,6 @@ export declare class Logger {
      * ```
      */
     progress(text: string): this;
-    /**
-     * Logs a reasoning/working message with a dimmed yellow therefore symbol.
-     *
-     * Automatically prefixes the message with `LOG_SYMBOLS.reason` (dimmed yellow ∴).
-     * Useful for showing intermediate reasoning, logic steps, or "working" output
-     * that leads to a conclusion. Always outputs to stderr. If the message starts
-     * with an existing symbol, it will be stripped and replaced.
-     *
-     * @param args - Message and additional arguments to log
-     * @returns The logger instance for chaining
-     *
-     * @example
-     * ```typescript
-     * logger.step('Analyzing package security')
-     * logger.reason('Found 3 direct dependencies')
-     * logger.reason('Checking 47 transitive dependencies')
-     * logger.reason('Risk score: 8.5/10')
-     * logger.fail('Package blocked due to high risk')
-     * ```
-     */
-    reason(...args: unknown[]): this;
     /**
      * Resets all indentation to zero.
      *

package/dist/logger.js

@@ -330,9 +330,6 @@ class Logger {
       fail: /* @__PURE__ */ applyColor(supported ? "\u2716" : "\xD7", theme.colors.error, colors),
       info: /* @__PURE__ */ applyColor(supported ? "\u2139" : "i", theme.colors.info, colors),
       progress: /* @__PURE__ */ applyColor(supported ? "\u2234" : ":.", theme.colors.step, colors),
-      reason: colors.dim(
-        /* @__PURE__ */ applyColor(supported ? "\u2234" : ":.", theme.colors.warning, colors)
-      ),
       skip: /* @__PURE__ */ applyColor(supported ? "\u21BB" : "@", theme.colors.step, colors),
       step: /* @__PURE__ */ applyColor(supported ? "\u2192" : ">", theme.colors.step, colors),
       success: /* @__PURE__ */ applyColor(supported ? "\u2714" : "\u221A", theme.colors.success, colors),
@@ -1069,29 +1066,6 @@ class Logger {
     this[lastWasBlankSymbol](false);
     return this;
   }
-  /**
-   * Logs a reasoning/working message with a dimmed yellow therefore symbol.
-   *
-   * Automatically prefixes the message with `LOG_SYMBOLS.reason` (dimmed yellow ∴).
-   * Useful for showing intermediate reasoning, logic steps, or "working" output
-   * that leads to a conclusion. Always outputs to stderr. If the message starts
-   * with an existing symbol, it will be stripped and replaced.
-   *
-   * @param args - Message and additional arguments to log
-   * @returns The logger instance for chaining
-   *
-   * @example
-   * ```typescript
-   * logger.step('Analyzing package security')
-   * logger.reason('Found 3 direct dependencies')
-   * logger.reason('Checking 47 transitive dependencies')
-   * logger.reason('Risk score: 8.5/10')
-   * logger.fail('Package blocked due to high risk')
-   * ```
-   */
-  reason(...args) {
-    return this.#symbolApply("reason", args);
-  }
   /**
    * Resets all indentation to zero.
    *

package/dist/objects.js

@@ -40,7 +40,7 @@ __export(objects_exports, {
   toSortedObjectFromEntries: () => toSortedObjectFromEntries
 });
 module.exports = __toCommonJS(objects_exports);
-var import_core = require("#constants/core");
+var import_core = require("./constants/core");
 var import_arrays = require("./arrays");
 var import_sorts = require("./sorts");
 const ObjectDefineProperties = Object.defineProperties;

package/dist/package-default-node-range.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,15 +18,23 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_default_node_range_exports = {};
 __export(package_default_node_range_exports, {
   packageDefaultNodeRange: () => packageDefaultNodeRange
 });
 module.exports = __toCommonJS(package_default_node_range_exports);
-const { maintainedNodeVersions } = require("#lib/maintained-node-versions");
-const semver = require("./external/semver.js");
-const packageDefaultNodeRange = `>=${semver.parse(maintainedNodeVersions.last).major}`;
+var import_maintained_node_versions = require("./maintained-node-versions");
+var semver = __toESM(require("./external/semver.js"));
+const packageDefaultNodeRange = `>=${semver.parse(import_maintained_node_versions.maintainedNodeVersions.last).major}`;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   packageDefaultNodeRange

package/dist/package-extensions.d.ts

@@ -1,2 +1,3 @@
-declare const packageExtensions: readonly any[];
+type PackageExtension = readonly [string, Record<string, unknown>];
+declare const packageExtensions: readonly PackageExtension[];
 export { packageExtensions };

package/dist/package-extensions.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,17 +18,25 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var package_extensions_exports = {};
 __export(package_extensions_exports, {
   packageExtensions: () => packageExtensions
 });
 module.exports = __toCommonJS(package_extensions_exports);
+var yarnPkgExtensions = __toESM(require("./external/@yarnpkg/extensions.js"));
 const { freeze: ObjectFreeze } = Object;
-const yarnPkgExtensions = require("./external/@yarnpkg/extensions.js");
 const packageExtensions = ObjectFreeze(
   [
-    yarnPkgExtensions.packageExtensions,
+    ...yarnPkgExtensions.packageExtensions,
     [
       "@yarnpkg/extensions@>=1.1.0",
       {

package/dist/packages/editable.d.ts

@@ -1,6 +1,3 @@
-/**
- * @fileoverview Editable package.json manipulation utilities.
- */
 import type { EditablePackageJsonOptions, NormalizeOptions, PackageJson, SaveOptions } from '../packages';
 // Define the interface for the dynamic class
 interface EditablePackageJsonConstructor {

package/dist/packages/editable.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var editable_exports = {};
 __export(editable_exports, {
@@ -25,9 +35,12 @@ __export(editable_exports, {
   toEditablePackageJsonSync: () => toEditablePackageJsonSync
 });
 module.exports = __toCommonJS(editable_exports);
-var import_path = require("../path");
-var import_normalize = require("./normalize");
-var import_paths = require("./paths");
+var import_package_json = __toESM(require("../external/@npmcli/package-json"));
+var import_read_package = require("../external/@npmcli/package-json/lib/read-package");
+var import_sort = require("../external/@npmcli/package-json/lib/sort");
+var import_normalize = require("../paths/normalize");
+var import_normalize2 = require("./normalize");
+var import_packages = require("../paths/packages");
 const identSymbol = Symbol.for("indent");
 const newlineSymbol = Symbol.for("newline");
 let _EditablePackageJsonClass;
@@ -58,13 +71,10 @@ function getUtil() {
 // @__NO_SIDE_EFFECTS__
 function getEditablePackageJsonClass() {
   if (_EditablePackageJsonClass === void 0) {
-    const EditablePackageJsonBase = require("../external/@npmcli/package-json");
-    const { parse, read } = require("../external/@npmcli/package-json/lib/read-package");
-    const { packageSort } = require("../external/@npmcli/package-json/lib/sort");
-    _EditablePackageJsonClass = class EditablePackageJson extends EditablePackageJsonBase {
-      static fixSteps = EditablePackageJsonBase.fixSteps;
-      static normalizeSteps = EditablePackageJsonBase.normalizeSteps;
-      static prepareSteps = EditablePackageJsonBase.prepareSteps;
+    _EditablePackageJsonClass = class EditablePackageJson extends import_package_json.default {
+      static fixSteps = import_package_json.default.fixSteps;
+      static normalizeSteps = import_package_json.default.normalizeSteps;
+      static prepareSteps = import_package_json.default.prepareSteps;
       _canSave = true;
       _path = void 0;
       _readFileContent = "";
@@ -140,7 +150,7 @@ function getEditablePackageJsonClass() {
         const { promises: fsPromises } = /* @__PURE__ */ getFs();
         let parseErr;
         try {
-          this._readFileContent = await read(this.filename);
+          this._readFileContent = await (0, import_read_package.read)(this.filename);
         } catch (err) {
           if (!create) {
             throw err;
@@ -165,7 +175,7 @@ function getEditablePackageJsonClass() {
           return this;
         }
         this.fromJSON(this._readFileContent);
-        this._readFileJson = parse(this._readFileContent);
+        this._readFileJson = (0, import_read_package.parse)(this._readFileContent);
         return this;
       }
       async normalize(opts = {}) {
@@ -192,7 +202,7 @@ function getEditablePackageJsonClass() {
           [newlineSymbol]: newline,
           ...rest
         } = this.content;
-        const content = sort ? packageSort(rest) : rest;
+        const content = sort ? (0, import_sort.packageSort)(rest) : rest;
         const {
           [identSymbol]: _indent,
           [newlineSymbol]: _newline,
@@ -215,7 +225,7 @@ function getEditablePackageJsonClass() {
         const { promises: fsPromises } = /* @__PURE__ */ getFs();
         await fsPromises.writeFile(this.filename, fileContent);
         this._readFileContent = fileContent;
-        this._readFileJson = parse(fileContent);
+        this._readFileJson = (0, import_read_package.parse)(fileContent);
         return true;
       }
       saveSync(options) {
@@ -231,7 +241,7 @@ function getEditablePackageJsonClass() {
           [Symbol.for("newline")]: newline,
           ...rest
         } = this.content;
-        const content = sort ? packageSort(rest) : rest;
+        const content = sort ? (0, import_sort.packageSort)(rest) : rest;
         if (ignoreWhitespace && (/* @__PURE__ */ getUtil()).isDeepStrictEqual(content, this._readFileJson)) {
           return false;
         }
@@ -249,7 +259,7 @@ function getEditablePackageJsonClass() {
         const fs = /* @__PURE__ */ getFs();
         fs.writeFileSync(this.filename, fileContent);
         this._readFileContent = fileContent;
-        this._readFileJson = parse(fileContent);
+        this._readFileJson = (0, import_read_package.parse)(fileContent);
         return true;
       }
       update(content) {
@@ -269,7 +279,7 @@ function getEditablePackageJsonClass() {
           [Symbol.for("newline")]: newline,
           ...rest
         } = this.content;
-        const content = sort ? packageSort(rest) : rest;
+        const content = sort ? (0, import_sort.packageSort)(rest) : rest;
         if (ignoreWhitespace && (/* @__PURE__ */ getUtil()).isDeepStrictEqual(content, this._readFileJson)) {
           return false;
         }
@@ -298,7 +308,7 @@ function pkgJsonToEditable(pkgJson, options) {
   };
   const EditablePackageJson = /* @__PURE__ */ getEditablePackageJsonClass();
   return new EditablePackageJson().fromContent(
-    normalize ? (0, import_normalize.normalizePackageJson)(pkgJson, normalizeOptions) : pkgJson
+    normalize ? (0, import_normalize2.normalizePackageJson)(pkgJson, normalizeOptions) : pkgJson
   );
 }
 // @__NO_SIDE_EFFECTS__
@@ -312,11 +322,11 @@ async function toEditablePackageJson(pkgJson, options) {
     return /* @__PURE__ */ pkgJsonToEditable(pkgJson, pkgJsonToEditableOptions);
   }
   const EditablePackageJson = /* @__PURE__ */ getEditablePackageJsonClass();
-  const pkgJsonPath = (0, import_paths.resolvePackageJsonDirname)(filepath);
+  const pkgJsonPath = (0, import_packages.resolvePackageJsonDirname)(filepath);
   return (await EditablePackageJson.load(pkgJsonPath, { create: true })).fromJSON(
     `${JSON.stringify(
-      normalize ? (0, import_normalize.normalizePackageJson)(pkgJson, {
-        ...(0, import_path.isNodeModules)(pkgJsonPath) ? {} : { preserve: ["repository"] },
+      normalize ? (0, import_normalize2.normalizePackageJson)(pkgJson, {
+        ...(0, import_normalize.isNodeModules)(pkgJsonPath) ? {} : { preserve: ["repository"] },
         ...normalizeOptions
       }) : pkgJson,
       null,
@@ -336,11 +346,11 @@ function toEditablePackageJsonSync(pkgJson, options) {
     return /* @__PURE__ */ pkgJsonToEditable(pkgJson, pkgJsonToEditableOptions);
   }
   const EditablePackageJson = /* @__PURE__ */ getEditablePackageJsonClass();
-  const pkgJsonPath = (0, import_paths.resolvePackageJsonDirname)(filepath);
+  const pkgJsonPath = (0, import_packages.resolvePackageJsonDirname)(filepath);
   return new EditablePackageJson().create(pkgJsonPath).fromJSON(
     `${JSON.stringify(
-      normalize ? (0, import_normalize.normalizePackageJson)(pkgJson, {
-        ...(0, import_path.isNodeModules)(pkgJsonPath) ? {} : { preserve: ["repository"] },
+      normalize ? (0, import_normalize2.normalizePackageJson)(pkgJson, {
+        ...(0, import_normalize.isNodeModules)(pkgJsonPath) ? {} : { preserve: ["repository"] },
         ...normalizeOptions
       }) : pkgJson,
       null,

package/dist/packages/exports.js

@@ -27,7 +27,7 @@ __export(exports_exports, {
   resolvePackageJsonEntryExports: () => resolvePackageJsonEntryExports
 });
 module.exports = __toCommonJS(exports_exports);
-var import_core = require("#constants/core");
+var import_core = require("../constants/core");
 var import_arrays = require("../arrays");
 var import_objects = require("../objects");
 // @__NO_SIDE_EFFECTS__

package/dist/packages/isolation.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var isolation_exports = {};
 __export(isolation_exports, {
@@ -23,18 +33,13 @@ __export(isolation_exports, {
 });
 module.exports = __toCommonJS(isolation_exports);
 var import_fs = require("fs");
-var import_platform = require("#constants/platform");
-var import_path = require("../path");
+var import_platform = require("../constants/platform");
+var import_node_path = __toESM(require("node:path"));
+var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
+var import_spawn = require("../spawn");
+var import_normalize = require("../paths/normalize");
 var import_operations = require("./operations");
-var import_paths = require("#lib/paths");
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
+var import_socket = require("../paths/socket");
 const FS_CP_OPTIONS = {
   dereference: true,
   errorOnExist: false,
@@ -44,8 +49,7 @@ const FS_CP_OPTIONS = {
   ...import_platform.WIN32 ? { maxRetries: 3, retryDelay: 100 } : {}
 };
 async function resolveRealPath(pathStr) {
-  const path = /* @__PURE__ */ getPath();
-  return await import_fs.promises.realpath(pathStr).catch(() => path.resolve(pathStr));
+  return await import_fs.promises.realpath(pathStr).catch(() => import_node_path.default.resolve(pathStr));
 }
 async function mergePackageJson(pkgJsonPath, originalPkgJson) {
   const pkgJson = JSON.parse(await import_fs.promises.readFile(pkgJsonPath, "utf8"));
@@ -53,16 +57,15 @@ async function mergePackageJson(pkgJsonPath, originalPkgJson) {
   return mergedPkgJson;
 }
 async function isolatePackage(packageSpec, options) {
-  const path = /* @__PURE__ */ getPath();
   const opts = { __proto__: null, ...options };
   const { imports, install, onPackageJson, sourcePath: optSourcePath } = opts;
   let sourcePath = optSourcePath;
   let packageName;
   let spec;
-  if ((0, import_path.isPath)(packageSpec)) {
-    const trimmedPath = (0, import_path.trimLeadingDotSlash)(packageSpec);
-    const pathToResolve = (0, import_path.isAbsolute)(trimmedPath) ? trimmedPath : packageSpec;
-    sourcePath = path.resolve(pathToResolve);
+  if ((0, import_normalize.isPath)(packageSpec)) {
+    const trimmedPath = (0, import_normalize.trimLeadingDotSlash)(packageSpec);
+    const pathToResolve = (0, import_normalize.isAbsolute)(trimmedPath) ? trimmedPath : packageSpec;
+    sourcePath = import_node_path.default.resolve(pathToResolve);
     if (!(0, import_fs.existsSync)(sourcePath)) {
       throw new Error(`Source path does not exist: ${sourcePath}`);
     }
@@ -72,8 +75,7 @@ async function isolatePackage(packageSpec, options) {
     }
     packageName = pkgJson.name;
   } else {
-    const npa = require("../external/npm-package-arg");
-    const parsed = npa(packageSpec);
+    const parsed = (0, import_npm_package_arg.default)(packageSpec);
     packageName = parsed.name;
     if (parsed.type === "directory" || parsed.type === "file") {
       sourcePath = parsed.fetchSpec;
@@ -96,15 +98,15 @@ async function isolatePackage(packageSpec, options) {
   }
   const sanitizedName = packageName.replace(/[@/]/g, "-");
   const tempDir = await import_fs.promises.mkdtemp(
-    path.join((0, import_paths.getOsTmpDir)(), `socket-test-${sanitizedName}-`)
+    import_node_path.default.join((0, import_socket.getOsTmpDir)(), `socket-test-${sanitizedName}-`)
   );
-  const packageTempDir = path.join(tempDir, sanitizedName);
+  const packageTempDir = import_node_path.default.join(tempDir, sanitizedName);
   await import_fs.promises.mkdir(packageTempDir, { recursive: true });
   let installedPath;
   let originalPackageJson;
   if (spec) {
     await import_fs.promises.writeFile(
-      path.join(packageTempDir, "package.json"),
+      import_node_path.default.join(packageTempDir, "package.json"),
       JSON.stringify(
         {
           name: "test-temp",
@@ -118,15 +120,14 @@ async function isolatePackage(packageSpec, options) {
     if (install) {
       await install(packageTempDir);
     } else {
-      const { spawn } = require("../spawn");
       const packageInstallSpec = spec.startsWith("https://") ? spec : `${packageName}@${spec}`;
-      await spawn("pnpm", ["add", packageInstallSpec], {
+      await (0, import_spawn.spawn)("pnpm", ["add", packageInstallSpec], {
         cwd: packageTempDir,
         shell: import_platform.WIN32,
         stdio: "pipe"
       });
     }
-    installedPath = path.join(packageTempDir, "node_modules", packageName);
+    installedPath = import_node_path.default.join(packageTempDir, "node_modules", packageName);
     originalPackageJson = await (0, import_operations.readPackageJson)(installedPath, {
       normalize: true
     });
@@ -141,17 +142,17 @@ async function isolatePackage(packageSpec, options) {
     if (!sourcePath) {
       throw new Error("sourcePath is required when no version spec provided");
     }
-    const scopedPath = packageName.startsWith("@") ? path.join(
+    const scopedPath = packageName.startsWith("@") ? import_node_path.default.join(
       packageTempDir,
       "node_modules",
       packageName.split("/")[0] ?? ""
-    ) : path.join(packageTempDir, "node_modules");
+    ) : import_node_path.default.join(packageTempDir, "node_modules");
     await import_fs.promises.mkdir(scopedPath, { recursive: true });
-    installedPath = path.join(packageTempDir, "node_modules", packageName);
+    installedPath = import_node_path.default.join(packageTempDir, "node_modules", packageName);
     await import_fs.promises.cp(sourcePath, installedPath, FS_CP_OPTIONS);
   }
   if (onPackageJson || originalPackageJson) {
-    const pkgJsonPath = path.join(installedPath, "package.json");
+    const pkgJsonPath = import_node_path.default.join(installedPath, "package.json");
     const mergedPkgJson = await mergePackageJson(
       pkgJsonPath,
       originalPackageJson
@@ -162,8 +163,7 @@ async function isolatePackage(packageSpec, options) {
   if (install) {
     await install(installedPath);
   } else {
-    const { spawn } = require("../spawn");
-    await spawn("pnpm", ["install"], {
+    await (0, import_spawn.spawn)("pnpm", ["install"], {
       cwd: installedPath,
       shell: import_platform.WIN32,
       stdio: "pipe"
@@ -172,7 +172,7 @@ async function isolatePackage(packageSpec, options) {
   const exports2 = imports ? { __proto__: null } : void 0;
   if (imports) {
     for (const { 0: key, 1: specifier } of Object.entries(imports)) {
-      const fullPath = path.join(installedPath, specifier);
+      const fullPath = import_node_path.default.join(installedPath, specifier);
       exports2[key] = require(fullPath);
     }
   }

package/dist/packages/licenses.js

@@ -1,8 +1,10 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -16,6 +18,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var licenses_exports = {};
 __export(licenses_exports, {
@@ -29,38 +39,17 @@ __export(licenses_exports, {
   visitLicenses: () => visitLicenses
 });
 module.exports = __toCommonJS(licenses_exports);
-var import_core = require("#constants/core");
-var import_licenses = require("#constants/licenses");
+var import_core = require("../constants/core");
+var import_licenses = require("../constants/licenses");
+var import_node_path = __toESM(require("node:path"));
+var import_spdx_correct = __toESM(require("../external/spdx-correct"));
+var import_spdx_expression_parse = __toESM(require("../external/spdx-expression-parse"));
 var import_objects = require("../objects");
-var import_path = require("../path");
+var import_normalize = require("../paths/normalize");
 const copyLeftLicenses = (0, import_licenses.getCopyLeftLicenses)();
 const BINARY_OPERATION_NODE_TYPE = "BinaryOperation";
 const LICENSE_NODE_TYPE = "License";
 const fileReferenceRegExp = /^SEE LICEN[CS]E IN (.+)$/;
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
-let _spdxCorrect;
-// @__NO_SIDE_EFFECTS__
-function getSpdxCorrect() {
-  if (_spdxCorrect === void 0) {
-    _spdxCorrect = require("../external/spdx-correct");
-  }
-  return _spdxCorrect;
-}
-let _spdxExpParse;
-// @__NO_SIDE_EFFECTS__
-function getSpdxExpParse() {
-  if (_spdxExpParse === void 0) {
-    _spdxExpParse = require("../external/spdx-expression-parse");
-  }
-  return _spdxExpParse;
-}
 // @__NO_SIDE_EFFECTS__
 function collectIncompatibleLicenses(licenseNodes) {
   const result = [];
@@ -130,14 +119,12 @@ function createLicenseNode(rawNode) {
 }
 // @__NO_SIDE_EFFECTS__
 function parseSpdxExp(spdxExp) {
-  const spdxExpParse = /* @__PURE__ */ getSpdxExpParse();
   try {
-    return spdxExpParse(spdxExp);
+    return (0, import_spdx_expression_parse.default)(spdxExp);
   } catch {
   }
-  const spdxCorrect = /* @__PURE__ */ getSpdxCorrect();
-  const corrected = spdxCorrect(spdxExp);
-  return corrected ? spdxExpParse(corrected) : void 0;
+  const corrected = (0, import_spdx_correct.default)(spdxExp);
+  return corrected ? (0, import_spdx_expression_parse.default)(corrected) : void 0;
 }
 // @__NO_SIDE_EFFECTS__
 function resolvePackageLicenses(licenseFieldValue, where) {
@@ -146,11 +133,10 @@ function resolvePackageLicenses(licenseFieldValue, where) {
   }
   const match = fileReferenceRegExp.exec(licenseFieldValue);
   if (match) {
-    const path = /* @__PURE__ */ getPath();
     return [
       {
         license: licenseFieldValue,
-        inFile: (0, import_path.normalizePath)(path.relative(where, match[1] || ""))
+        inFile: (0, import_normalize.normalizePath)(import_node_path.default.relative(where, match[1] || ""))
       }
     ];
   }