@socketsecurity/lib 5.18.2 → 5.19.0

package/dist/packages.d.ts

@@ -10,15 +10,13 @@ import { collectIncompatibleLicenses, collectLicenseWarnings, createAstNode, cre
 import { createPackageJson, fetchPackageManifest, fetchPackagePackument } from './packages/manifest';
 import { normalizePackageJson, resolveEscapedScope, resolveOriginalPackageName, unescapeScope } from './packages/normalize';
 import { extractPackage, findPackageExtensions, getReleaseTag, packPackage, readPackageJson, readPackageJsonSync, resolveGitHubTgzUrl, resolvePackageName, resolveRegistryPackageName } from './packages/operations';
-import { resolvePackageJsonDirname, resolvePackageJsonPath } from './paths/packages';
 import { fetchPackageProvenance, getProvenanceDetails } from './packages/provenance';
 import { getRepoUrlDetails, gitHubTagRefUrl, gitHubTgzUrl, isGitHubTgzSpec, isGitHubUrlSpec } from './packages/specs';
 import { isBlessedPackageName, isRegistryFetcherType, isValidPackageName } from './packages/validation';
-// Type for package.json exports field.
+import { resolvePackageJsonDirname, resolvePackageJsonPath } from './paths/packages';
 type PackageExports = {
     [path: string]: unknown;
 };
-// Re-export the EditablePackageJson instance type for convenient access
 export type EditablePackageJson = import('./packages/edit').EditablePackageJsonInstance;
 /**
  * Extended PackageJson type based on NPMCliPackageJson.Content with Socket-specific additions.
@@ -26,7 +24,6 @@ export type EditablePackageJson = import('./packages/edit').EditablePackageJsonI
  * @property socket - Optional Socket.dev specific configuration
  */
 export type PackageJson = {
-    // Core npm fields
     [key: string]: unknown;
     name?: string | undefined;
     version?: string | undefined;
@@ -36,7 +33,6 @@ export type PackageJson = {
     types?: string | undefined;
     typings?: string | undefined;
     bin?: string | Record<string, string> | undefined;
-    // Author and contributors
     author?: string | {
         name?: string;
         email?: string;
@@ -52,7 +48,6 @@ export type PackageJson = {
         email?: string;
         url?: string;
     }> | undefined;
-    // Repository and URLs
     repository?: string | {
         type?: string;
         url?: string;
@@ -63,44 +58,34 @@ export type PackageJson = {
         url?: string;
         email?: string;
     } | undefined;
-    // License
     license?: string | undefined;
     licenses?: Array<{
         type?: string;
         url?: string;
     }> | undefined;
-    // Scripts
     scripts?: Record<string, string> | undefined;
-    // Dependencies
     dependencies?: Record<string, string> | undefined;
     devDependencies?: Record<string, string> | undefined;
     peerDependencies?: Record<string, string> | undefined;
     optionalDependencies?: Record<string, string> | undefined;
     bundledDependencies?: string[] | undefined;
     bundleDependencies?: string[] | undefined;
-    // Package managers specific
     overrides?: Record<string, string> | undefined;
     resolutions?: Record<string, string> | undefined;
     pnpm?: Record<string, unknown> | undefined;
-    // Module system
     exports?: PackageExports | string | string[] | undefined;
     imports?: Record<string, unknown> | undefined;
     type?: 'module' | 'commonjs' | undefined;
-    // Publishing
     private?: boolean | undefined;
     publishConfig?: Record<string, unknown> | undefined;
     files?: string[] | undefined;
-    // Engines and OS
     engines?: Record<string, string> | undefined;
     os?: string[] | undefined;
     cpu?: string[] | undefined;
-    // Package manager
     packageManager?: string | undefined;
-    // Workspaces
     workspaces?: string[] | {
         packages?: string[];
     } | undefined;
-    // Socket.dev specific
     socket?: {
         categories?: CategoryString | CategoryString[];
         interop?: string | string[];
@@ -151,4 +136,4 @@ export type PacoteOptions = {
 };
 export type { IsolatePackageOptions, IsolatePackageResult, } from './packages/isolation';
 export type { InternalAstNode, InternalBinaryOperationNode, InternalLicenseNode, LicenseVisitor, SpdxAstNode, SpdxBinaryOperationNode, SpdxLicenseNode, } from './packages/licenses';
-export { collectIncompatibleLicenses, collectLicenseWarnings, createAstNode, createBinaryOperationNode, createLicenseNode, createPackageJson, extractPackage, fetchPackageManifest, fetchPackagePackument, fetchPackageProvenance, findPackageExtensions, findTypesForSubpath, getEditablePackageJsonClass, getExportFilePaths, getProvenanceDetails, getReleaseTag, getRepoUrlDetails, getSubpaths, gitHubTagRefUrl, gitHubTgzUrl, isBlessedPackageName, isConditionalExports, isGitHubTgzSpec, isGitHubUrlSpec, isolatePackage, isRegistryFetcherType, isSubpathExports, isValidPackageName, normalizePackageJson, packPackage, parseSpdxExp, pkgJsonToEditable, readPackageJson, readPackageJsonSync, resolveEscapedScope, resolveGitHubTgzUrl, resolveOriginalPackageName, resolvePackageName, resolvePackageJsonDirname, resolvePackageJsonPath, resolvePackageJsonEntryExports, resolvePackageLicenses, resolveRegistryPackageName, toEditablePackageJson, toEditablePackageJsonSync, unescapeScope, visitLicenses, };
+export { collectIncompatibleLicenses, collectLicenseWarnings, createAstNode, createBinaryOperationNode, createLicenseNode, createPackageJson, extractPackage, fetchPackageManifest, fetchPackagePackument, fetchPackageProvenance, findPackageExtensions, findTypesForSubpath, getEditablePackageJsonClass, getExportFilePaths, getProvenanceDetails, getReleaseTag, getRepoUrlDetails, getSubpaths, gitHubTagRefUrl, gitHubTgzUrl, isBlessedPackageName, isConditionalExports, isGitHubTgzSpec, isGitHubUrlSpec, isolatePackage, isRegistryFetcherType, isSubpathExports, isValidPackageName, normalizePackageJson, packPackage, parseSpdxExp, pkgJsonToEditable, readPackageJson, readPackageJsonSync, resolveEscapedScope, resolveGitHubTgzUrl, resolveOriginalPackageName, resolvePackageJsonDirname, resolvePackageJsonEntryExports, resolvePackageJsonPath, resolvePackageLicenses, resolvePackageName, resolveRegistryPackageName, toEditablePackageJson, toEditablePackageJsonSync, unescapeScope, visitLicenses, };

package/dist/packages.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -75,10 +76,10 @@ var import_licenses = require("./packages/licenses");
 var import_manifest = require("./packages/manifest");
 var import_normalize = require("./packages/normalize");
 var import_operations = require("./packages/operations");
-var import_packages = require("./paths/packages");
 var import_provenance = require("./packages/provenance");
 var import_specs = require("./packages/specs");
 var import_validation = require("./packages/validation");
+var import_packages = require("./paths/packages");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   collectIncompatibleLicenses,

package/dist/paths/dirnames.d.ts

@@ -1,13 +1,11 @@
 /**
  * @fileoverview Directory name and path pattern constants.
  */
-// Directory names.
 export declare const NODE_MODULES = "node_modules";
 export declare const DOT_GIT_DIR = ".git";
 export declare const DOT_GITHUB = ".github";
 export declare const DOT_SOCKET_DIR = ".socket";
 export declare const CACHE_DIR = "cache";
 export declare const CACHE_TTL_DIR = "ttl";
-// Path patterns.
 export declare const NODE_MODULES_GLOB_RECURSIVE = "**/node_modules";
 export declare const SLASH_NODE_MODULES_SLASH = "/node_modules/";

package/dist/paths/dirnames.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/paths/exts.d.ts

@@ -1,7 +1,6 @@
 /**
  * @fileoverview File extension constants.
  */
-// File extensions.
 export declare const EXT_CJS = ".cjs";
 export declare const EXT_CMD = ".cmd";
 export declare const EXT_CTS = ".cts";

package/dist/paths/exts.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/paths/filenames.d.ts

@@ -1,7 +1,6 @@
 /**
  * @fileoverview File name constants.
  */
-// File names.
 export declare const PACKAGE_JSON = "package.json";
 export declare const TSCONFIG_JSON = "tsconfig.json";
 export declare const LICENSE = "LICENSE";

package/dist/paths/filenames.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/paths/globs.d.ts

@@ -1,7 +1,6 @@
 /**
  * @fileoverview Glob pattern constants.
  */
-// Glob patterns.
 export declare const LICENSE_GLOB = "LICEN[CS]E{[.-]*,}";
 export declare const LICENSE_GLOB_RECURSIVE = "**/LICEN[CS]E{[.-]*,}";
 export declare const LICENSE_ORIGINAL_GLOB = "*.original{.*,}";

package/dist/paths/globs.js

@@ -1,5 +1,6 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/paths/normalize.d.ts

@@ -1,26 +1,41 @@
 /**
- * Check if a path contains node_modules directory.
+ * @fileoverview Path manipulation utilities with cross-platform support.
+ * Provides path normalization, validation, and file extension handling.
+ */
+/**
+ * Convert Unix-style POSIX paths to native Windows paths.
  *
- * Detects whether a given path includes a `node_modules` directory segment.
- * This is useful for identifying npm package dependencies and filtering
- * dependency-related paths.
+ * This is the inverse of {@link toUnixPath}. On Windows, MSYS-style paths use
+ * `/c/` notation for drive letters and forward slashes, which PowerShell and
+ * cmd.exe cannot resolve. This function converts them to native Windows format
+ * with backslashes and proper drive letters.
  *
- * The check matches `node_modules` appearing as a complete path segment,
- * ensuring it is either at the start, end, or surrounded by path separators.
+ * Conversion rules:
+ * - On Windows: Converts drive notation and separators to native format
+ *   - `/c/path/to/file` becomes `C:\path\to\file`
+ *   - `/d/projects/app` becomes `D:\projects\app`
+ *   - Forward slashes become backslashes
+ *   - Drive letters are always uppercase in the output
+ * - On Unix: Returns the normalized path unchanged (forward slashes preserved)
  *
- * @param {string | Buffer | URL} pathLike - The path to check
- * @returns {boolean} `true` if the path contains `node_modules`, `false` otherwise
+ * @param {string | Buffer | URL} pathLike - The MSYS/Unix-style path to convert
+ * @returns {string} Native Windows path (e.g., `C:\path\to\file`) or normalized Unix path
  *
  * @example
  * ```typescript
- * isNodeModules('/project/node_modules/package')    // true
- * isNodeModules('node_modules/package/index.js')    // true
- * isNodeModules('/src/my_node_modules_backup')      // false
- * isNodeModules('/project/src/index.js')            // false
+ * // MSYS drive letter paths (Windows)
+ * fromUnixPath('/c/projects/app/file.txt')    // 'C:\\projects\\app\\file.txt'
+ * fromUnixPath('/d/projects/foo/bar')         // 'D:\\projects\\foo\\bar'
+ * fromUnixPath('/c')                          // 'C:\\'
+ *
+ * // Forward-slash paths (Windows)
+ * fromUnixPath('C:/Windows/System32')         // 'C:\\Windows\\System32'
+ *
+ * // Unix (unchanged, forward slashes preserved)
+ * fromUnixPath('/tmp/build/output')           // '/tmp/build/output'
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function isNodeModules(pathLike: string | Buffer | URL): boolean;
+export declare function fromUnixPath(pathLike: string | Buffer | URL): string;
 /**
  * Check if a path is absolute.
  *
@@ -66,8 +81,29 @@ export declare function isNodeModules(pathLike: string | Buffer | URL): boolean;
  * isAbsolute('.')                    // false
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function isAbsolute(pathLike: string | Buffer | URL): boolean;
+/**
+ * Check if a path contains node_modules directory.
+ *
+ * Detects whether a given path includes a `node_modules` directory segment.
+ * This is useful for identifying npm package dependencies and filtering
+ * dependency-related paths.
+ *
+ * The check matches `node_modules` appearing as a complete path segment,
+ * ensuring it is either at the start, end, or surrounded by path separators.
+ *
+ * @param {string | Buffer | URL} pathLike - The path to check
+ * @returns {boolean} `true` if the path contains `node_modules`, `false` otherwise
+ *
+ * @example
+ * ```typescript
+ * isNodeModules('/project/node_modules/package')    // true
+ * isNodeModules('node_modules/package/index.js')    // true
+ * isNodeModules('/src/my_node_modules_backup')      // false
+ * isNodeModules('/project/src/index.js')            // false
+ * ```
+ */
+export declare function isNodeModules(pathLike: string | Buffer | URL): boolean;
 /**
  * Check if a value is a valid file path (absolute or relative).
  *
@@ -108,7 +144,6 @@ export declare function isAbsolute(pathLike: string | Buffer | URL): boolean;
  * isPath('')                         // false - empty string
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function isPath(pathLike: string | Buffer | URL): boolean;
 /**
  * Check if a path is relative.
@@ -139,7 +174,6 @@ export declare function isPath(pathLike: string | Buffer | URL): boolean;
  * isRelative('\\\\server\\share')    // false (Windows UNC)
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function isRelative(pathLike: string | Buffer | URL): boolean;
 /**
  * Check if a path uses MSYS/Git Bash Unix-style drive letter notation.
@@ -173,43 +207,7 @@ export declare function isRelative(pathLike: string | Buffer | URL): boolean;
  * isUnixPath('')                      // false
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function isUnixPath(pathLike: string | Buffer | URL): boolean;
-/**
- * Convert Unix-style POSIX paths to native Windows paths.
- *
- * This is the inverse of {@link toUnixPath}. On Windows, MSYS-style paths use
- * `/c/` notation for drive letters and forward slashes, which PowerShell and
- * cmd.exe cannot resolve. This function converts them to native Windows format
- * with backslashes and proper drive letters.
- *
- * Conversion rules:
- * - On Windows: Converts drive notation and separators to native format
- *   - `/c/path/to/file` becomes `C:\path\to\file`
- *   - `/d/projects/app` becomes `D:\projects\app`
- *   - Forward slashes become backslashes
- *   - Drive letters are always uppercase in the output
- * - On Unix: Returns the normalized path unchanged (forward slashes preserved)
- *
- * @param {string | Buffer | URL} pathLike - The MSYS/Unix-style path to convert
- * @returns {string} Native Windows path (e.g., `C:\path\to\file`) or normalized Unix path
- *
- * @example
- * ```typescript
- * // MSYS drive letter paths (Windows)
- * fromUnixPath('/c/projects/app/file.txt')    // 'C:\\projects\\app\\file.txt'
- * fromUnixPath('/d/projects/foo/bar')         // 'D:\\projects\\foo\\bar'
- * fromUnixPath('/c')                          // 'C:\\'
- *
- * // Forward-slash paths (Windows)
- * fromUnixPath('C:/Windows/System32')         // 'C:\\Windows\\System32'
- *
- * // Unix (unchanged, forward slashes preserved)
- * fromUnixPath('/tmp/build/output')           // '/tmp/build/output'
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function fromUnixPath(pathLike: string | Buffer | URL): string;
 /**
  * Normalize a path by converting backslashes to forward slashes and collapsing segments.
  *
@@ -269,7 +267,6 @@ export declare function fromUnixPath(pathLike: string | Buffer | URL): string;
  * normalizePath('/safe/../../unsafe')        // '/unsafe' ⚠️
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function normalizePath(pathLike: string | Buffer | URL): string;
 /**
  * Convert a path-like value to a string.
@@ -313,8 +310,42 @@ export declare function normalizePath(pathLike: string | Buffer | URL): string;
  * pathLikeToString(new URL('file:///path%20with%20spaces'))  // '/path with spaces'
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function pathLikeToString(pathLike: string | Buffer | URL | null | undefined): string;
+/**
+ * Get the relative path from one path to another.
+ *
+ * Computes the relative path from `from` to `to` and normalizes the result.
+ * This is a convenience wrapper around the `relative()` function that adds
+ * path normalization (converting separators and collapsing segments).
+ *
+ * The function:
+ * 1. Calculates the relative path using `relative()`
+ * 2. Normalizes the result using `normalizePath()`
+ * 3. Preserves empty strings (same path) without converting to `.`
+ *
+ * @param {string} from - The source path (starting point)
+ * @param {string} to - The destination path (target)
+ * @returns {string} The normalized relative path from `from` to `to`, or empty string if paths are identical
+ *
+ * @example
+ * ```typescript
+ * // Basic usage
+ * relativeResolve('/foo/bar', '/foo/baz')         // '../baz'
+ * relativeResolve('/foo/bar/baz', '/foo')         // '../..'
+ * relativeResolve('/foo', '/foo/bar')             // 'bar'
+ *
+ * // Same paths
+ * relativeResolve('/foo/bar', '/foo/bar')         // ''
+ *
+ * // Windows paths (normalized)
+ * relativeResolve('C:\\foo\\bar', 'C:\\foo\\baz') // '../baz'
+ *
+ * // With normalization
+ * relativeResolve('/foo/./bar', '/foo/baz')       // '../baz'
+ * relativeResolve('/foo/bar/../baz', '/foo/qux')  // '../qux'
+ * ```
+ */
+export declare function relativeResolve(from: string, to: string): string;
 /**
  * Split a path into an array of segments.
  *
@@ -353,74 +384,7 @@ export declare function pathLikeToString(pathLike: string | Buffer | URL | null
  * splitPath('/foo//bar/')               // ['', 'foo', '', 'bar', '']
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function splitPath(pathLike: string | Buffer | URL): string[];
-/**
- * Remove leading ./ or ../ from a path.
- *
- * Strips the `./` or `.\` prefix from relative paths. This is useful for
- * normalizing paths when the current directory reference is implicit or
- * unwanted.
- *
- * Note: This function only removes a single leading `./` or `.\`. It does
- * not remove `../` prefixes or process the rest of the path.
- *
- * @param {string | Buffer | URL} pathLike - The path to process
- * @returns {string} The path without leading `./` or `.\`, or unchanged if no such prefix
- *
- * @example
- * ```typescript
- * // Remove ./ prefix
- * trimLeadingDotSlash('./src/index.js')     // 'src/index.js'
- * trimLeadingDotSlash('.\\src\\file.txt')   // 'src\\file.txt'
- *
- * // Preserve ../ prefix
- * trimLeadingDotSlash('../lib/util.js')     // '../lib/util.js'
- *
- * // No change for other paths
- * trimLeadingDotSlash('/absolute/path')     // '/absolute/path'
- * trimLeadingDotSlash('relative/path')      // 'relative/path'
- * trimLeadingDotSlash('.')                  // '.'
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function trimLeadingDotSlash(pathLike: string | Buffer | URL): string;
-/**
- * Get the relative path from one path to another.
- *
- * Computes the relative path from `from` to `to` and normalizes the result.
- * This is a convenience wrapper around the `relative()` function that adds
- * path normalization (converting separators and collapsing segments).
- *
- * The function:
- * 1. Calculates the relative path using `relative()`
- * 2. Normalizes the result using `normalizePath()`
- * 3. Preserves empty strings (same path) without converting to `.`
- *
- * @param {string} from - The source path (starting point)
- * @param {string} to - The destination path (target)
- * @returns {string} The normalized relative path from `from` to `to`, or empty string if paths are identical
- *
- * @example
- * ```typescript
- * // Basic usage
- * relativeResolve('/foo/bar', '/foo/baz')         // '../baz'
- * relativeResolve('/foo/bar/baz', '/foo')         // '../..'
- * relativeResolve('/foo', '/foo/bar')             // 'bar'
- *
- * // Same paths
- * relativeResolve('/foo/bar', '/foo/bar')         // ''
- *
- * // Windows paths (normalized)
- * relativeResolve('C:\\foo\\bar', 'C:\\foo\\baz') // '../baz'
- *
- * // With normalization
- * relativeResolve('/foo/./bar', '/foo/baz')       // '../baz'
- * relativeResolve('/foo/bar/../baz', '/foo/qux')  // '../qux'
- * ```
- */
-/*@__NO_SIDE_EFFECTS__*/
-export declare function relativeResolve(from: string, to: string): string;
 /**
  * Convert Windows paths to MSYS/Unix-style POSIX paths for Git Bash tools.
  *
@@ -462,5 +426,33 @@ export declare function relativeResolve(from: string, to: string): string;
  * toUnixPath('\\\\server\\share\\file')    // '//server/share/file'
  * ```
  */
-/*@__NO_SIDE_EFFECTS__*/
 export declare function toUnixPath(pathLike: string | Buffer | URL): string;
+/**
+ * Remove leading ./ or ../ from a path.
+ *
+ * Strips the `./` or `.\` prefix from relative paths. This is useful for
+ * normalizing paths when the current directory reference is implicit or
+ * unwanted.
+ *
+ * Note: This function only removes a single leading `./` or `.\`. It does
+ * not remove `../` prefixes or process the rest of the path.
+ *
+ * @param {string | Buffer | URL} pathLike - The path to process
+ * @returns {string} The path without leading `./` or `.\`, or unchanged if no such prefix
+ *
+ * @example
+ * ```typescript
+ * // Remove ./ prefix
+ * trimLeadingDotSlash('./src/index.js')     // 'src/index.js'
+ * trimLeadingDotSlash('.\\src\\file.txt')   // 'src\\file.txt'
+ *
+ * // Preserve ../ prefix
+ * trimLeadingDotSlash('../lib/util.js')     // '../lib/util.js'
+ *
+ * // No change for other paths
+ * trimLeadingDotSlash('/absolute/path')     // '/absolute/path'
+ * trimLeadingDotSlash('relative/path')      // 'relative/path'
+ * trimLeadingDotSlash('.')                  // '.'
+ * ```
+ */
+export declare function trimLeadingDotSlash(pathLike: string | Buffer | URL): string;