@socketsecurity/lib 4.4.0 → 5.0.1

package/dist/packages/operations.js

@@ -55,7 +55,7 @@ var import_objects = require("../objects");
 var import_normalize = require("./normalize");
 var import_packages2 = require("../paths/packages");
 var import_specs = require("./specs");
-var import_editable = require("./editable");
+var import_edit = require("./edit");
 const abortSignal = (0, import_process.getAbortSignal)();
 const packageExtensions = (0, import_packages.getPackageExtensions)();
 const packumentCache = (0, import_packages.getPackumentCache)();
@@ -161,7 +161,7 @@ async function readPackageJson(filepath, options) {
   });
   if (pkgJson) {
     if (editable) {
-      return await (0, import_editable.toEditablePackageJson)(pkgJson, {
+      return await (0, import_edit.toEditablePackageJson)(pkgJson, {
         path: filepath,
         normalize,
         ...normalizeOptions
@@ -180,7 +180,7 @@ function readPackageJsonSync(filepath, options) {
   const pkgJson = (0, import_fs.readJsonSync)((0, import_packages2.resolvePackageJsonPath)(filepath), { throws });
   if (pkgJson) {
     if (editable) {
-      return (0, import_editable.toEditablePackageJsonSync)(pkgJson, {
+      return (0, import_edit.toEditablePackageJsonSync)(pkgJson, {
         path: filepath,
         normalize,
         ...normalizeOptions

package/dist/packages.d.ts

@@ -3,7 +3,7 @@
  * Provides npm package analysis, dependency resolution, and registry operations.
  */
 import type { CategoryString } from './types';
-import { getEditablePackageJsonClass, pkgJsonToEditable, toEditablePackageJson, toEditablePackageJsonSync } from './packages/editable';
+import { getEditablePackageJsonClass, pkgJsonToEditable, toEditablePackageJson, toEditablePackageJsonSync } from './packages/edit';
 import { findTypesForSubpath, getExportFilePaths, getSubpaths, isConditionalExports, isSubpathExports, resolvePackageJsonEntryExports } from './packages/exports';
 import { isolatePackage } from './packages/isolation';
 import { collectIncompatibleLicenses, collectLicenseWarnings, createAstNode, createBinaryOperationNode, createLicenseNode, parseSpdxExp, resolvePackageLicenses, visitLicenses } from './packages/licenses';
@@ -19,7 +19,7 @@ type PackageExports = {
     [path: string]: unknown;
 };
 // Re-export the EditablePackageJson instance type for convenient access
-export type EditablePackageJson = import('./packages/editable').EditablePackageJsonInstance;
+export type EditablePackageJson = import('./packages/edit').EditablePackageJsonInstance;
 /**
  * Extended PackageJson type based on NPMCliPackageJson.Content with Socket-specific additions.
  * @extends NPMCliPackageJson.Content (from @npmcli/package-json)

package/dist/packages.js

@@ -31,7 +31,7 @@ __export(packages_exports, {
   fetchPackageProvenance: () => import_provenance.fetchPackageProvenance,
   findPackageExtensions: () => import_operations.findPackageExtensions,
   findTypesForSubpath: () => import_exports.findTypesForSubpath,
-  getEditablePackageJsonClass: () => import_editable.getEditablePackageJsonClass,
+  getEditablePackageJsonClass: () => import_edit.getEditablePackageJsonClass,
   getExportFilePaths: () => import_exports.getExportFilePaths,
   getProvenanceDetails: () => import_provenance.getProvenanceDetails,
   getReleaseTag: () => import_operations.getReleaseTag,
@@ -50,7 +50,7 @@ __export(packages_exports, {
   normalizePackageJson: () => import_normalize.normalizePackageJson,
   packPackage: () => import_operations.packPackage,
   parseSpdxExp: () => import_licenses.parseSpdxExp,
-  pkgJsonToEditable: () => import_editable.pkgJsonToEditable,
+  pkgJsonToEditable: () => import_edit.pkgJsonToEditable,
   readPackageJson: () => import_operations.readPackageJson,
   readPackageJsonSync: () => import_operations.readPackageJsonSync,
   resolveEscapedScope: () => import_normalize.resolveEscapedScope,
@@ -62,13 +62,13 @@ __export(packages_exports, {
   resolvePackageLicenses: () => import_licenses.resolvePackageLicenses,
   resolvePackageName: () => import_operations.resolvePackageName,
   resolveRegistryPackageName: () => import_operations.resolveRegistryPackageName,
-  toEditablePackageJson: () => import_editable.toEditablePackageJson,
-  toEditablePackageJsonSync: () => import_editable.toEditablePackageJsonSync,
+  toEditablePackageJson: () => import_edit.toEditablePackageJson,
+  toEditablePackageJsonSync: () => import_edit.toEditablePackageJsonSync,
   unescapeScope: () => import_normalize.unescapeScope,
   visitLicenses: () => import_licenses.visitLicenses
 });
 module.exports = __toCommonJS(packages_exports);
-var import_editable = require("./packages/editable");
+var import_edit = require("./packages/edit");
 var import_exports = require("./packages/exports");
 var import_isolation = require("./packages/isolation");
 var import_licenses = require("./packages/licenses");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "4.4.0",
-  "packageManager": "pnpm@10.22.0",
+  "version": "5.0.1",
+  "packageManager": "pnpm@10.25.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
@@ -151,10 +151,26 @@
       "types": "./dist/constants/licenses.d.ts",
       "default": "./dist/constants/licenses.js"
     },
+    "./constants/lifecycle-script-names": {
+      "types": "./dist/constants/lifecycle-script-names.d.ts",
+      "default": "./dist/constants/lifecycle-script-names.js"
+    },
+    "./constants/maintained-node-versions": {
+      "types": "./dist/constants/maintained-node-versions.d.ts",
+      "default": "./dist/constants/maintained-node-versions.js"
+    },
     "./constants/node": {
       "types": "./dist/constants/node.d.ts",
       "default": "./dist/constants/node.js"
     },
+    "./constants/package-default-node-range": {
+      "types": "./dist/constants/package-default-node-range.d.ts",
+      "default": "./dist/constants/package-default-node-range.js"
+    },
+    "./constants/package-default-socket-categories": {
+      "types": "./dist/constants/package-default-socket-categories.d.ts",
+      "default": "./dist/constants/package-default-socket-categories.js"
+    },
     "./constants/packages": {
       "types": "./dist/constants/packages.d.ts",
       "default": "./dist/constants/packages.js"
@@ -203,21 +219,33 @@
       "types": "./dist/debug.d.ts",
       "default": "./dist/debug.js"
     },
-    "./dlx": {
-      "types": "./dist/dlx.d.ts",
-      "default": "./dist/dlx.js"
+    "./dlx/binary": {
+      "types": "./dist/dlx/binary.d.ts",
+      "default": "./dist/dlx/binary.js"
+    },
+    "./dlx/cache": {
+      "types": "./dist/dlx/cache.d.ts",
+      "default": "./dist/dlx/cache.js"
+    },
+    "./dlx/dir": {
+      "types": "./dist/dlx/dir.d.ts",
+      "default": "./dist/dlx/dir.js"
     },
-    "./dlx-binary": {
-      "types": "./dist/dlx-binary.d.ts",
-      "default": "./dist/dlx-binary.js"
+    "./dlx/manifest": {
+      "types": "./dist/dlx/manifest.d.ts",
+      "default": "./dist/dlx/manifest.js"
     },
-    "./dlx-manifest": {
-      "types": "./dist/dlx-manifest.d.ts",
-      "default": "./dist/dlx-manifest.js"
+    "./dlx/package": {
+      "types": "./dist/dlx/package.d.ts",
+      "default": "./dist/dlx/package.js"
     },
-    "./dlx-package": {
-      "types": "./dist/dlx-package.d.ts",
-      "default": "./dist/dlx-package.js"
+    "./dlx/packages": {
+      "types": "./dist/dlx/packages.d.ts",
+      "default": "./dist/dlx/packages.js"
+    },
+    "./dlx/paths": {
+      "types": "./dist/dlx/paths.d.ts",
+      "default": "./dist/dlx/paths.js"
     },
     "./effects/pulse-frames": {
       "types": "./dist/effects/pulse-frames.d.ts",
@@ -355,13 +383,21 @@
       "types": "./dist/ipc.d.ts",
       "default": "./dist/ipc.js"
     },
-    "./json": {
-      "types": "./dist/json.d.ts",
-      "default": "./dist/json.js"
+    "./json/edit": {
+      "types": "./dist/json/edit.d.ts",
+      "default": "./dist/json/edit.js"
+    },
+    "./json/format": {
+      "types": "./dist/json/format.d.ts",
+      "default": "./dist/json/format.js"
+    },
+    "./json/parse": {
+      "types": "./dist/json/parse.d.ts",
+      "default": "./dist/json/parse.js"
     },
-    "./lifecycle-script-names": {
-      "types": "./dist/lifecycle-script-names.d.ts",
-      "default": "./dist/lifecycle-script-names.js"
+    "./json/types": {
+      "types": "./dist/json/types.d.ts",
+      "default": "./dist/json/types.js"
     },
     "./links": {
       "types": "./dist/links/index.d.ts",
@@ -375,10 +411,6 @@
       "types": "./dist/logger.d.ts",
       "default": "./dist/logger.js"
     },
-    "./maintained-node-versions": {
-      "types": "./dist/maintained-node-versions.d.ts",
-      "default": "./dist/maintained-node-versions.js"
-    },
     "./memoization": {
       "types": "./dist/memoization.d.ts",
       "default": "./dist/memoization.js"
@@ -387,14 +419,6 @@
       "types": "./dist/objects.d.ts",
       "default": "./dist/objects.js"
     },
-    "./package-default-node-range": {
-      "types": "./dist/package-default-node-range.d.ts",
-      "default": "./dist/package-default-node-range.js"
-    },
-    "./package-default-socket-categories": {
-      "types": "./dist/package-default-socket-categories.d.ts",
-      "default": "./dist/package-default-socket-categories.js"
-    },
     "./package-extensions": {
       "types": "./dist/package-extensions.d.ts",
       "default": "./dist/package-extensions.js"
@@ -403,9 +427,9 @@
       "types": "./dist/packages.d.ts",
       "default": "./dist/packages.js"
     },
-    "./packages/editable": {
-      "types": "./dist/packages/editable.d.ts",
-      "default": "./dist/packages/editable.js"
+    "./packages/edit": {
+      "types": "./dist/packages/edit.d.ts",
+      "default": "./dist/packages/edit.js"
     },
     "./packages/exports": {
       "types": "./dist/packages/exports.d.ts",
@@ -653,7 +677,7 @@
   ],
   "engines": {
     "node": ">=22",
-    "pnpm": ">=10.22.0"
+    "pnpm": ">=10.25.0"
   },
   "sideEffects": false,
   "scripts": {
@@ -718,6 +742,7 @@
     "lint-staged": "15.2.11",
     "magic-string": "0.30.17",
     "make-fetch-happen": "15.0.2",
+    "nock": "14.0.10",
     "normalize-package-data": "8.0.0",
     "npm-package-arg": "13.0.0",
     "pacote": "21.0.1",
@@ -726,7 +751,7 @@
     "spdx-correct": "3.2.0",
     "spdx-expression-parse": "4.0.0",
     "streaming-iterables": "8.0.1",
-    "taze": "19.6.0",
+    "taze": "19.9.2",
     "trash": "10.0.0",
     "type-coverage": "2.29.7",
     "typescript": "5.9.2",

package/dist/dlx.d.ts

@@ -1,104 +0,0 @@
-/**
- * Generate a cache directory name using npm/npx approach.
- * Uses first 16 characters of SHA-512 hash (like npm/npx).
- *
- * Rationale for SHA-512 truncated (vs full SHA-256):
- * - Matches npm/npx ecosystem behavior
- * - Shorter paths for Windows MAX_PATH compatibility (260 chars)
- * - 16 hex chars = 64 bits = acceptable collision risk for local cache
- * - Collision probability ~1 in 18 quintillion with 1000 entries
- *
- * Input strategy (aligned with npx):
- * - npx uses package spec strings (e.g., '@scope/pkg@1.0.0', 'prettier@3.0.0')
- * - Caller provides complete spec string with version for accurate cache keying
- * - For package installs: Use PURL-style spec with version
- *   Examples: 'npm:prettier@3.0.0', 'pypi:requests@2.31.0', 'gem:rails@7.0.0'
- *   Note: Socket uses shorthand format without 'pkg:' prefix
- *   (handled by @socketregistry/packageurl-js)
- * - For binary downloads: Use URL:name for uniqueness
- *
- * Reference: npm/cli v11.6.2 libnpmexec/lib/index.js#L233-L244
- * https://github.com/npm/cli/blob/v11.6.2/workspaces/libnpmexec/lib/index.js#L233-L244
- * Implementation: packages.map().sort().join('\n') → SHA-512 → slice(0,16)
- * npx hashes the package spec (name@version), not just name
- */
-export declare function generateCacheKey(spec: string): string;
-/**
- * Clear all DLX package installations.
- */
-export declare function clearDlx(): Promise<void>;
-/**
- * Clear all DLX package installations synchronously.
- */
-export declare function clearDlxSync(): void;
-/**
- * Check if the DLX directory exists.
- */
-export declare function dlxDirExists(): boolean;
-/**
- * Check if the DLX directory exists asynchronously.
- */
-export declare function dlxDirExistsAsync(): Promise<boolean>;
-/**
- * Ensure the DLX directory exists, creating it if necessary.
- */
-export declare function ensureDlxDir(): Promise<void>;
-/**
- * Ensure the DLX directory exists synchronously, creating it if necessary.
- */
-export declare function ensureDlxDirSync(): void;
-/**
- * Get the installed package directory within DLX node_modules.
- */
-export declare function getDlxInstalledPackageDir(packageName: string): string;
-/**
- * Get the DLX installation directory for a specific package.
- */
-export declare function getDlxPackageDir(packageName: string): string;
-/**
- * Get the package.json path for a DLX installed package.
- */
-export declare function getDlxPackageJsonPath(packageName: string): string;
-/**
- * Get the node_modules directory for a DLX package installation.
- */
-export declare function getDlxPackageNodeModulesDir(packageName: string): string;
-/**
- * Check if a file path is within the Socket DLX directory.
- * This is useful for determining if a binary or file is managed by Socket's DLX system.
- *
- * @param filePath - Absolute or relative path to check
- * @returns true if the path is within ~/.socket/_dlx/, false otherwise
- *
- * @example
- * ```typescript
- * isInSocketDlx('/home/user/.socket/_dlx/abc123/bin/socket') // true
- * isInSocketDlx('/usr/local/bin/socket') // false
- * isInSocketDlx(process.argv[0]) // Check if current binary is in DLX
- * ```
- */
-export declare function isInSocketDlx(filePath: string): boolean;
-/**
- * Check if a package is installed in DLX.
- */
-export declare function isDlxPackageInstalled(packageName: string): boolean;
-/**
- * Check if a package is installed in DLX asynchronously.
- */
-export declare function isDlxPackageInstalledAsync(packageName: string): Promise<boolean>;
-/**
- * List all packages installed in DLX.
- */
-export declare function listDlxPackages(): string[];
-/**
- * List all packages installed in DLX asynchronously.
- */
-export declare function listDlxPackagesAsync(): Promise<string[]>;
-/**
- * Remove a DLX package installation.
- */
-export declare function removeDlxPackage(packageName: string): Promise<void>;
-/**
- * Remove a DLX package installation synchronously.
- */
-export declare function removeDlxPackageSync(packageName: string): void;

package/dist/dlx.js

@@ -1,220 +0,0 @@
-"use strict";
-/* Socket Lib - Built with esbuild */
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var dlx_exports = {};
-__export(dlx_exports, {
-  clearDlx: () => clearDlx,
-  clearDlxSync: () => clearDlxSync,
-  dlxDirExists: () => dlxDirExists,
-  dlxDirExistsAsync: () => dlxDirExistsAsync,
-  ensureDlxDir: () => ensureDlxDir,
-  ensureDlxDirSync: () => ensureDlxDirSync,
-  generateCacheKey: () => generateCacheKey,
-  getDlxInstalledPackageDir: () => getDlxInstalledPackageDir,
-  getDlxPackageDir: () => getDlxPackageDir,
-  getDlxPackageJsonPath: () => getDlxPackageJsonPath,
-  getDlxPackageNodeModulesDir: () => getDlxPackageNodeModulesDir,
-  isDlxPackageInstalled: () => isDlxPackageInstalled,
-  isDlxPackageInstalledAsync: () => isDlxPackageInstalledAsync,
-  isInSocketDlx: () => isInSocketDlx,
-  listDlxPackages: () => listDlxPackages,
-  listDlxPackagesAsync: () => listDlxPackagesAsync,
-  removeDlxPackage: () => removeDlxPackage,
-  removeDlxPackageSync: () => removeDlxPackageSync
-});
-module.exports = __toCommonJS(dlx_exports);
-var import_crypto = require("crypto");
-var import_fs = require("./fs");
-var import_normalize = require("./paths/normalize");
-var import_socket = require("./paths/socket");
-var import_promises = require("./promises");
-let _fs;
-// @__NO_SIDE_EFFECTS__
-function getFs() {
-  if (_fs === void 0) {
-    _fs = require("node:fs");
-  }
-  return _fs;
-}
-function generateCacheKey(spec) {
-  return (0, import_crypto.createHash)("sha512").update(spec).digest("hex").substring(0, 16);
-}
-let _path;
-// @__NO_SIDE_EFFECTS__
-function getPath() {
-  if (_path === void 0) {
-    _path = require("node:path");
-  }
-  return _path;
-}
-async function clearDlx() {
-  const packages = await listDlxPackagesAsync();
-  await (0, import_promises.pEach)(packages, (pkg) => removeDlxPackage(pkg));
-}
-function clearDlxSync() {
-  const packages = listDlxPackages();
-  for (const pkg of packages) {
-    removeDlxPackageSync(pkg);
-  }
-}
-function dlxDirExists() {
-  const fs = /* @__PURE__ */ getFs();
-  return fs.existsSync((0, import_socket.getSocketDlxDir)());
-}
-async function dlxDirExistsAsync() {
-  const fs = /* @__PURE__ */ getFs();
-  try {
-    await fs.promises.access((0, import_socket.getSocketDlxDir)());
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function ensureDlxDir() {
-  await (0, import_fs.safeMkdir)((0, import_socket.getSocketDlxDir)());
-}
-function ensureDlxDirSync() {
-  (0, import_fs.safeMkdirSync)((0, import_socket.getSocketDlxDir)());
-}
-function getDlxInstalledPackageDir(packageName) {
-  const path = /* @__PURE__ */ getPath();
-  return (0, import_normalize.normalizePath)(
-    path.join(getDlxPackageNodeModulesDir(packageName), packageName)
-  );
-}
-function getDlxPackageDir(packageName) {
-  const path = /* @__PURE__ */ getPath();
-  return (0, import_normalize.normalizePath)(path.join((0, import_socket.getSocketDlxDir)(), packageName));
-}
-function getDlxPackageJsonPath(packageName) {
-  const path = /* @__PURE__ */ getPath();
-  return (0, import_normalize.normalizePath)(
-    path.join(getDlxInstalledPackageDir(packageName), "package.json")
-  );
-}
-function getDlxPackageNodeModulesDir(packageName) {
-  const path = /* @__PURE__ */ getPath();
-  return (0, import_normalize.normalizePath)(path.join(getDlxPackageDir(packageName), "node_modules"));
-}
-function isInSocketDlx(filePath) {
-  if (!filePath) {
-    return false;
-  }
-  const path = /* @__PURE__ */ getPath();
-  const dlxDir = (0, import_socket.getSocketDlxDir)();
-  const absolutePath = (0, import_normalize.normalizePath)(path.resolve(filePath));
-  return absolutePath.startsWith(`${dlxDir}/`);
-}
-function isDlxPackageInstalled(packageName) {
-  const fs = /* @__PURE__ */ getFs();
-  return fs.existsSync(getDlxInstalledPackageDir(packageName));
-}
-async function isDlxPackageInstalledAsync(packageName) {
-  const fs = /* @__PURE__ */ getFs();
-  try {
-    await fs.promises.access(getDlxInstalledPackageDir(packageName));
-    return true;
-  } catch {
-    return false;
-  }
-}
-function listDlxPackages() {
-  try {
-    return (0, import_fs.readDirNamesSync)((0, import_socket.getSocketDlxDir)(), { sort: true });
-  } catch {
-    return [];
-  }
-}
-async function listDlxPackagesAsync() {
-  const fs = /* @__PURE__ */ getFs();
-  try {
-    const entries = await fs.promises.readdir((0, import_socket.getSocketDlxDir)(), {
-      withFileTypes: true
-    });
-    return entries.filter((e) => e.isDirectory()).map((e) => e.name).sort();
-  } catch {
-    return [];
-  }
-}
-async function removeDlxPackage(packageName) {
-  const packageDir = getDlxPackageDir(packageName);
-  try {
-    await (0, import_fs.safeDelete)(packageDir, { recursive: true, force: true });
-  } catch (e) {
-    throw new Error(`Failed to remove DLX package "${packageName}"`, {
-      cause: e
-    });
-  }
-}
-function removeDlxPackageSync(packageName) {
-  const fs = /* @__PURE__ */ getFs();
-  const packageDir = getDlxPackageDir(packageName);
-  try {
-    fs.rmSync(packageDir, { recursive: true, force: true });
-  } catch (e) {
-    const code = e.code;
-    if (code === "EACCES" || code === "EPERM") {
-      throw new Error(
-        `Permission denied removing DLX package "${packageName}"
-Directory: ${packageDir}
-To resolve:
-  1. Check file/directory permissions
-  2. Close any programs using files in this directory
-  3. Try running with elevated privileges if necessary
-  4. Manually remove: rm -rf "${packageDir}"`,
-        { cause: e }
-      );
-    }
-    if (code === "EROFS") {
-      throw new Error(
-        `Cannot remove DLX package "${packageName}" from read-only filesystem
-Directory: ${packageDir}
-The filesystem is mounted read-only.`,
-        { cause: e }
-      );
-    }
-    throw new Error(
-      `Failed to remove DLX package "${packageName}"
-Directory: ${packageDir}
-Check permissions and ensure no programs are using this directory.`,
-      { cause: e }
-    );
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  clearDlx,
-  clearDlxSync,
-  dlxDirExists,
-  dlxDirExistsAsync,
-  ensureDlxDir,
-  ensureDlxDirSync,
-  generateCacheKey,
-  getDlxInstalledPackageDir,
-  getDlxPackageDir,
-  getDlxPackageJsonPath,
-  getDlxPackageNodeModulesDir,
-  isDlxPackageInstalled,
-  isDlxPackageInstalledAsync,
-  isInSocketDlx,
-  listDlxPackages,
-  listDlxPackagesAsync,
-  removeDlxPackage,
-  removeDlxPackageSync
-});