@socketsecurity/lib 5.18.1 → 5.19.0

package/dist/validation/types.d.ts

@@ -24,7 +24,7 @@ export interface ParseResult<T> {
     /** Parsed and validated data (only present when `success` is `true`) */
     data?: T | undefined;
     /** Error information (only present when `success` is `false`) */
-    error?: any;
+    error?: unknown;
 }
 /**
  * Base schema interface compatible with Zod and similar validation libraries.
@@ -46,7 +46,7 @@ export interface ParseResult<T> {
  * const result = schema.safeParse({ name: 'Alice', age: 30 })
  * ```
  */
-export interface Schema<T = any> {
+export interface Schema<T = unknown> {
     /**
      * Safely parse data without throwing errors.
      * Returns a result object indicating success or failure.
@@ -54,7 +54,7 @@ export interface Schema<T = any> {
      * @param data - The data to validate
      * @returns Parse result with success flag and data or error
      */
-    safeParse(data: any): ParseResult<T>;
+    safeParse(data: unknown): ParseResult<T>;
     /**
      * Parse data and throw an error if validation fails.
      * Use this when you want to fail fast on invalid data.
@@ -63,7 +63,7 @@ export interface Schema<T = any> {
      * @returns The validated and parsed data
      * @throws {Error} When validation fails
      */
-    parse(data: any): T;
+    parse(data: unknown): T;
     /**
      * Optional schema name for debugging and error messages.
      * Useful for identifying which schema failed in complex validation chains.
@@ -71,17 +71,19 @@ export interface Schema<T = any> {
     _name?: string | undefined;
 }
 /**
- * Options for configuring JSON parsing behavior with security controls.
+ * Options for configuring safe JSON parsing with security controls.
+ * Distinct from `JsonParseOptions` in `@socketsecurity/lib/json/types`
+ * which is scoped to reviver/error-handling for fs-oriented JSON reads.
  *
  * @example
  * ```ts
- * const options: JsonParseOptions = {
+ * const options: SafeJsonParseOptions = {
  *   maxSize: 1024 * 1024, // 1MB limit
  *   allowPrototype: false // Block prototype pollution
  * }
  * ```
  */
-export interface JsonParseOptions {
+export interface SafeJsonParseOptions {
     /**
      * Allow dangerous prototype pollution keys (`__proto__`, `constructor`, `prototype`).
      * Set to `true` only if you trust the JSON source completely.
@@ -114,29 +116,3 @@ export interface JsonParseOptions {
      */
     maxSize?: number | undefined;
 }
-/**
- * Discriminated union type for JSON parsing results.
- * Enables type-safe handling of success and failure cases.
- *
- * @template T - The expected type of the parsed data
- *
- * @example
- * ```ts
- * const result: JsonParseResult<User> = parseJsonWithResult(jsonString)
- *
- * if (result.success) {
- *   // TypeScript knows result.data is available
- *   console.log(result.data.name)
- * } else {
- *   // TypeScript knows result.error is available
- *   console.error(result.error)
- * }
- * ```
- */
-export type JsonParseResult<T> = {
-    success: true;
-    data: T;
-} | {
-    success: false;
-    error: string;
-};

package/dist/validation/types.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/versions.d.ts

@@ -1,3 +1,4 @@
+/** @fileoverview Version comparison and validation utilities for Socket ecosystem. */
 /**
  * Coerce a version string to valid semver format.
  *

package/dist/versions.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -44,7 +45,7 @@ module.exports = __toCommonJS(versions_exports);
 let _semver;
 function getSemver() {
   if (_semver === void 0) {
-    _semver = require("./external/semver.js");
+    _semver = require("./external/semver");
   }
   return _semver;
 }

package/dist/words.d.ts

@@ -2,6 +2,9 @@
  * @fileoverview Word manipulation utilities for capitalization and formatting.
  * Provides text transformation functions for consistent word processing.
  */
+export interface PluralizeOptions {
+    count?: number;
+}
 /**
  * Capitalize the first letter of a word.
  *
@@ -12,7 +15,6 @@
  * capitalize('')       // ''
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function capitalize(word: string): string;
 /**
  * Determine the appropriate article (a/an) for a word.
@@ -23,11 +25,7 @@ export declare function capitalize(word: string): string;
  * determineArticle('banana')  // 'a'
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function determineArticle(word: string): string;
-export interface PluralizeOptions {
-    count?: number;
-}
 /**
  * Pluralize a word based on count.
  *
@@ -38,5 +36,4 @@ export interface PluralizeOptions {
  * pluralize('file', { count: 0 }) // 'files'
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function pluralize(word: string, options?: PluralizeOptions | undefined): string;

package/dist/words.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/zod.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "5.18.1",
-  "packageManager": "pnpm@11.0.0-rc.0",
+  "version": "5.19.0",
+  "packageManager": "pnpm@11.0.0-rc.2",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
@@ -223,6 +223,10 @@
       "types": "./dist/debug.d.ts",
       "default": "./dist/debug.js"
     },
+    "./dlx/arborist": {
+      "types": "./dist/dlx/arborist.d.ts",
+      "default": "./dist/dlx/arborist.js"
+    },
     "./dlx/binary": {
       "types": "./dist/dlx/binary.d.ts",
       "default": "./dist/dlx/binary.js"
@@ -239,6 +243,14 @@
       "types": "./dist/dlx/dir.d.ts",
       "default": "./dist/dlx/dir.js"
     },
+    "./dlx/integrity": {
+      "types": "./dist/dlx/integrity.d.ts",
+      "default": "./dist/dlx/integrity.js"
+    },
+    "./dlx/lockfile": {
+      "types": "./dist/dlx/lockfile.d.ts",
+      "default": "./dist/dlx/lockfile.js"
+    },
     "./dlx/manifest": {
       "types": "./dist/dlx/manifest.d.ts",
       "default": "./dist/dlx/manifest.js"
@@ -371,10 +383,6 @@
       "types": "./dist/fs.d.ts",
       "default": "./dist/fs.js"
     },
-    "./functions": {
-      "types": "./dist/functions.d.ts",
-      "default": "./dist/functions.js"
-    },
     "./git": {
       "types": "./dist/git.d.ts",
       "default": "./dist/git.js"
@@ -395,6 +403,10 @@
       "types": "./dist/ipc.d.ts",
       "default": "./dist/ipc.js"
     },
+    "./ipc-cli": {
+      "types": "./dist/ipc-cli.d.ts",
+      "default": "./dist/ipc-cli.js"
+    },
     "./json/edit": {
       "types": "./dist/json/edit.d.ts",
       "default": "./dist/json/edit.js"
@@ -412,12 +424,8 @@
       "default": "./dist/json/types.js"
     },
     "./links": {
-      "types": "./dist/links/index.d.ts",
-      "default": "./dist/links/index.js"
-    },
-    "./links/index": {
-      "types": "./dist/links/index.d.ts",
-      "default": "./dist/links/index.js"
+      "types": "./dist/links.d.ts",
+      "default": "./dist/links.js"
     },
     "./logger": {
       "types": "./dist/logger.d.ts",
@@ -515,10 +523,6 @@
       "types": "./dist/performance.d.ts",
       "default": "./dist/performance.js"
     },
-    "./plugins/babel-plugin-inline-require-calls": {
-      "types": "./plugins/babel-plugin-inline-require-calls.d.ts",
-      "default": "./plugins/babel-plugin-inline-require-calls.js"
-    },
     "./process-lock": {
       "types": "./dist/process-lock.d.ts",
       "default": "./dist/process-lock.js"
@@ -571,10 +575,6 @@
       "types": "./dist/ssri.d.ts",
       "default": "./dist/ssri.js"
     },
-    "./stdio/clear": {
-      "types": "./dist/stdio/clear.d.ts",
-      "default": "./dist/stdio/clear.js"
-    },
     "./stdio/divider": {
       "types": "./dist/stdio/divider.d.ts",
       "default": "./dist/stdio/divider.js"
@@ -587,18 +587,6 @@
       "types": "./dist/stdio/header.d.ts",
       "default": "./dist/stdio/header.js"
     },
-    "./stdio/mask": {
-      "types": "./dist/stdio/mask.d.ts",
-      "default": "./dist/stdio/mask.js"
-    },
-    "./stdio/progress": {
-      "types": "./dist/stdio/progress.d.ts",
-      "default": "./dist/stdio/progress.js"
-    },
-    "./stdio/prompts": {
-      "types": "./dist/stdio/prompts.d.ts",
-      "default": "./dist/stdio/prompts.js"
-    },
     "./stdio/stderr": {
       "types": "./dist/stdio/stderr.d.ts",
       "default": "./dist/stdio/stderr.js"
@@ -635,10 +623,6 @@
       "types": "./dist/themes/context.d.ts",
       "default": "./dist/themes/context.js"
     },
-    "./themes/index": {
-      "types": "./dist/themes/index.d.ts",
-      "default": "./dist/themes/index.js"
-    },
     "./themes/themes": {
       "types": "./dist/themes/themes.d.ts",
       "default": "./dist/themes/themes.js"
@@ -659,10 +643,6 @@
       "types": "./dist/url.d.ts",
       "default": "./dist/url.js"
     },
-    "./utils/get-ipc": {
-      "types": "./dist/utils/get-ipc.d.ts",
-      "default": "./dist/utils/get-ipc.js"
-    },
     "./validation/json-parser": {
       "types": "./dist/validation/json-parser.d.ts",
       "default": "./dist/validation/json-parser.js"
@@ -700,22 +680,18 @@
   },
   "sideEffects": false,
   "scripts": {
-    "build": "node scripts/build/main.mjs",
-    "check": "node scripts/check.mjs",
-    "clean": "node scripts/build/clean.mjs",
-    "cover": "node scripts/test/cover.mjs",
-    "dev": "node scripts/build/main.mjs --watch",
-    "fix": "node scripts/fix.mjs",
-    "format": "oxfmt",
-    "format:check": "oxfmt --check",
-    "lint": "node scripts/lint.mjs",
-    "lint:oxlint": "oxlint .",
-    "lint:oxfmt": "oxfmt --check .",
+    "build": "node scripts/build/main.mts",
+    "check": "node scripts/check.mts",
+    "clean": "node scripts/build/clean.mts",
+    "cover": "node scripts/test/cover.mts",
+    "dev": "node scripts/build/main.mts --watch",
+    "fix": "node scripts/fix.mts",
+    "lint": "node scripts/lint.mts",
     "security": "agentshield scan && { command -v zizmor >/dev/null && zizmor .github/ || echo 'zizmor not installed — run pnpm run setup to install'; }",
     "prepare": "husky",
     "prepublishOnly": "pnpm run build",
-    "test": "node scripts/test/main.mjs",
-    "update": "node scripts/update.mjs"
+    "test": "node scripts/test/main.mts",
+    "update": "node scripts/update.mts"
   },
   "devDependencies": {
     "@anthropic-ai/claude-code": "2.1.92",
@@ -723,34 +699,24 @@
     "@babel/parser": "7.28.4",
     "@babel/traverse": "7.28.4",
     "@babel/types": "7.28.4",
-    "ecc-agentshield": "1.4.0",
-    "@dotenvx/dotenvx": "1.49.0",
-    "@inquirer/checkbox": "4.3.1",
-    "@inquirer/confirm": "5.1.16",
-    "@inquirer/input": "4.2.2",
-    "@inquirer/password": "4.0.18",
-    "@inquirer/search": "3.1.1",
-    "@inquirer/select": "4.3.2",
     "@npmcli/arborist": "9.1.4",
     "@npmcli/package-json": "7.0.0",
     "@npmcli/promise-spawn": "8.0.3",
     "@socketregistry/is-unicode-supported": "1.0.5",
-    "@socketregistry/packageurl-js": "1.4.1",
+    "@socketregistry/packageurl-js": "1.4.2",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@5.18.0",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@5.18.2",
     "@types/node": "24.9.2",
-    "@typescript/native-preview": "7.0.0-dev.20250920.1",
+    "@typescript/native-preview": "7.0.0-dev.20260415.1",
     "@vitest/coverage-v8": "4.0.3",
     "@vitest/ui": "4.0.3",
-    "@yarnpkg/core": "4.5.0",
     "@yarnpkg/extensions": "2.0.6",
     "adm-zip": "0.5.16",
     "cacache": "20.0.1",
     "debug": "4.4.3",
     "del": "8.0.1",
-    "del-cli": "6.0.0",
+    "ecc-agentshield": "1.4.0",
     "esbuild": "0.25.11",
-    "eslint-plugin-sort-destructure-keys": "2.0.0",
     "fast-glob": "3.3.3",
     "fast-sort": "3.4.1",
     "get-east-asian-width": "1.3.0",
@@ -765,7 +731,7 @@
     "nock": "14.0.10",
     "normalize-package-data": "8.0.0",
     "npm-package-arg": "13.0.0",
-    "oxfmt": "^0.37.0",
+    "oxfmt": "0.37.0",
     "oxlint": "1.53.0",
     "p-map": "7.0.4",
     "pacote": "21.5.0",
@@ -780,11 +746,9 @@
     "tar-fs": "3.1.2",
     "tar-stream": "3.1.8",
     "taze": "19.9.2",
-    "trash": "10.0.0",
     "type-coverage": "2.29.7",
     "typescript": "5.9.2",
     "validate-npm-package-name": "6.0.2",
-    "vite-tsconfig-paths": "5.1.4",
     "vitest": "4.0.3",
     "which": "5.0.0",
     "yargs-parser": "22.0.0",

package/dist/external/@inquirer/checkbox.js

@@ -1,5 +0,0 @@
-'use strict'
-
-// Re-export from external-pack bundle for better deduplication.
-const { checkbox } = require('../external-pack')
-module.exports = checkbox

package/dist/external/@inquirer/confirm.js

@@ -1,5 +0,0 @@
-'use strict'
-
-// Re-export from external-pack bundle for better deduplication.
-const { confirm } = require('../external-pack')
-module.exports = confirm

package/dist/external/@inquirer/input.js

@@ -1,5 +0,0 @@
-'use strict'
-
-// Re-export from external-pack bundle for better deduplication.
-const { input } = require('../external-pack')
-module.exports = input

package/dist/external/@inquirer/password.js

@@ -1,5 +0,0 @@
-'use strict'
-
-// Re-export from external-pack bundle for better deduplication.
-const { password } = require('../external-pack')
-module.exports = password

package/dist/external/@inquirer/search.js

@@ -1,5 +0,0 @@
-'use strict'
-
-// Re-export from external-pack bundle for better deduplication.
-const { search } = require('../external-pack')
-module.exports = search

package/dist/external/@inquirer/select.js

@@ -1,5 +0,0 @@
-'use strict'
-
-// Re-export from external-pack bundle for better deduplication.
-const { select } = require('../external-pack')
-module.exports = select

package/dist/functions.d.ts

@@ -1,57 +0,0 @@
-/**
- * @fileoverview Common function utilities for control flow and caching.
- * Provides noop, once, and other foundational function helpers.
- */
-// Type definitions
-export type AsyncFunction<TArgs extends unknown[], TResult> = (...args: TArgs) => Promise<TResult>;
-export type AnyFunction = (...args: unknown[]) => unknown;
-/**
- * A no-op function that does nothing.
- *
- * @example
- * ```typescript
- * const callback = noop
- * callback()  // does nothing
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function noop(): void;
-/**
- * Create a function that only executes once.
- *
- * @example
- * ```typescript
- * const init = once(() => Math.random())
- * init()  // 0.456 (random value)
- * init()  // 0.456 (same value, not recalculated)
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function once<T extends AnyFunction>(fn: T): T;
-/**
- * Wrap an async function to silently catch and ignore errors.
- *
- * @example
- * ```typescript
- * const safeFetch = silentWrapAsync(async (url: string) => {
- *   const res = await fetch(url)
- *   return res.json()
- * })
- * await safeFetch('https://example.com')  // result or undefined on error
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function silentWrapAsync<TArgs extends unknown[], TResult>(fn: AsyncFunction<TArgs, TResult>): (...args: TArgs) => Promise<TResult | undefined>;
-/**
- * Execute a function with tail call optimization via trampoline.
- *
- * @example
- * ```typescript
- * const factorial = trampoline((n: number, acc = 1): any =>
- *   n <= 1 ? acc : () => factorial(n - 1, n * acc)
- * )
- * factorial(5)  // 120
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function trampoline<T extends AnyFunction>(fn: T): T;

package/dist/functions.js

@@ -1,70 +0,0 @@
-"use strict";
-/* Socket Lib - Built with esbuild */
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var functions_exports = {};
-__export(functions_exports, {
-  noop: () => noop,
-  once: () => once,
-  silentWrapAsync: () => silentWrapAsync,
-  trampoline: () => trampoline
-});
-module.exports = __toCommonJS(functions_exports);
-// @__NO_SIDE_EFFECTS__
-function noop() {
-}
-// @__NO_SIDE_EFFECTS__
-function once(fn) {
-  let called = false;
-  let result;
-  return function(...args) {
-    if (!called) {
-      called = true;
-      result = fn.apply(this, args);
-    }
-    return result;
-  };
-}
-// @__NO_SIDE_EFFECTS__
-function silentWrapAsync(fn) {
-  return async (...args) => {
-    try {
-      const result = await fn(...args);
-      return result === null ? void 0 : result;
-    } catch {
-    }
-    return void 0;
-  };
-}
-// @__NO_SIDE_EFFECTS__
-function trampoline(fn) {
-  return function(...args) {
-    let result = fn.apply(this, args);
-    while (typeof result === "function") {
-      result = result();
-    }
-    return result;
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  noop,
-  once,
-  silentWrapAsync,
-  trampoline
-});