@socketsecurity/lib 5.28.0 → 6.0.0

package/dist/constants/agents.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview Package manager agent constants.
- * Exports agent names (npm/pnpm/yarn/bun/vlt/npx), lockfile names, registry
- * URLs, and resolved npm binary paths used across Socket tooling.
+ * @file Package manager agent constants. Exports agent names
+ *   (npm/pnpm/yarn/bun/vlt/npx), lockfile names, registry URLs, and resolved
+ *   npm binary paths used across Socket tooling.
  */
 export declare const NPM = "npm";
 export declare const PNPM = "pnpm";
@@ -14,6 +14,7 @@ export declare const NPM_REAL_EXEC_PATH: any;
 export declare const NPM_REGISTRY_URL = "https://registry.npmjs.org";
 export declare const YARN_BERRY = "yarn/berry";
 export declare const YARN_CLASSIC = "yarn/classic";
+export declare const ZPM = "zpm";
 export declare const PACKAGE_LOCK = "package-lock";
 export declare const PACKAGE_LOCK_JSON = "package-lock.json";
 export declare const NPM_SHRINKWRAP_JSON = "npm-shrinkwrap.json";

package/dist/constants/agents.js

@@ -52,7 +52,8 @@ __export(agents_exports, {
   YARN: () => YARN,
   YARN_BERRY: () => YARN_BERRY,
   YARN_CLASSIC: () => YARN_CLASSIC,
-  YARN_LOCK: () => YARN_LOCK
+  YARN_LOCK: () => YARN_LOCK,
+  ZPM: () => ZPM
 });
 module.exports = __toCommonJS(agents_exports);
 var import_which = __toESM(require("../external/which"));
@@ -64,9 +65,9 @@ const VLT = "vlt";
 const NPX = "npx";
 const _npmBinPath = /* @__PURE__ */ (() => {
   try {
-    return import_which.default.sync("npm", { nothrow: true }) || null;
+    return import_which.default.sync("npm", { nothrow: true }) || void 0;
   } catch {
-    return null;
+    return void 0;
   }
 })();
 const NPM_BIN_PATH = _npmBinPath || "npm";
@@ -98,6 +99,7 @@ const NPM_REAL_EXEC_PATH = /* @__PURE__ */ (() => {
 const NPM_REGISTRY_URL = "https://registry.npmjs.org";
 const YARN_BERRY = "yarn/berry";
 const YARN_CLASSIC = "yarn/classic";
+const ZPM = "zpm";
 const PACKAGE_LOCK = "package-lock";
 const PACKAGE_LOCK_JSON = "package-lock.json";
 const NPM_SHRINKWRAP_JSON = "npm-shrinkwrap.json";
@@ -134,5 +136,6 @@ const RESOLUTIONS = "resolutions";
   YARN,
   YARN_BERRY,
   YARN_CLASSIC,
-  YARN_LOCK
+  YARN_LOCK,
+  ZPM
 });

package/dist/constants/encoding.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview Character encoding and character code constants.
- * Exports the default UTF-8 encoding name and numeric char codes for common
- * ASCII characters used by path and parsing utilities.
+ * @file Character encoding and character code constants. Exports the default
+ *   UTF-8 encoding name and numeric char codes for common ASCII characters used
+ *   by path and parsing utilities.
  */
 export declare const UTF8 = "utf8";
 export declare const CHAR_BACKWARD_SLASH = 92;

package/dist/constants/github.d.ts

@@ -1,7 +1,6 @@
 /**
- * @fileoverview GitHub API and cache constants.
- * Provides the GitHub REST API base URL and the cache subdirectory name used
- * for persisting GitHub responses.
+ * @file GitHub API and cache constants. Provides the GitHub REST API base URL
+ *   and the cache subdirectory name used for persisting GitHub responses.
  */
 export declare const GITHUB_API_BASE_URL = "https://api.github.com";
 export declare const CACHE_GITHUB_DIR = "github";

package/dist/constants/licenses.d.ts

@@ -1,14 +1,14 @@
 /**
- * @fileoverview License identifier constants.
- * Exports common SPDX license strings (MIT, UNLICENSED) and a lazily-built
- * set of copy-left SPDX identifiers used when classifying package licenses.
+ * @file License identifier constants. Exports common SPDX license strings (MIT,
+ *   UNLICENSED) and a lazily-built set of copy-left SPDX identifiers used when
+ *   classifying package licenses.
  */
 export declare const MIT = "MIT";
 export declare const UNLICENCED = "UNLICENCED";
 export declare const UNLICENSED = "UNLICENSED";
 /**
- * Get the set of SPDX identifiers considered copy-left (AGPL, GPL, EPL,
- * EUPL, CC-BY-SA variants). The set is lazily built and cached on first call.
+ * Get the set of SPDX identifiers considered copy-left (AGPL, GPL, EPL, EUPL,
+ * CC-BY-SA variants). The set is lazily built and cached on first call.
  *
  * @returns A `Set` of SPDX license identifier strings.
  */

package/dist/constants/licenses.js

@@ -26,14 +26,14 @@ __export(licenses_exports, {
   getCopyLeftLicenses: () => getCopyLeftLicenses
 });
 module.exports = __toCommonJS(licenses_exports);
-var import_primordials = require("../primordials");
+var import_map_set = require("../primordials/map-set");
 const MIT = "MIT";
 const UNLICENCED = "UNLICENCED";
 const UNLICENSED = "UNLICENSED";
 let _copyLeftLicenses;
 function getCopyLeftLicenses() {
   if (_copyLeftLicenses === void 0) {
-    _copyLeftLicenses = new import_primordials.SetCtor([
+    _copyLeftLicenses = new import_map_set.SetCtor([
       "AGPL-1.0",
       "AGPL-1.0-only",
       "AGPL-1.0-or-later",

package/dist/constants/lifecycle-script-names.d.ts

@@ -1,8 +1,7 @@
 /**
- * @fileoverview NPM lifecycle script names.
- *
- * Standard npm lifecycle hooks that can be defined in package.json scripts.
- * https://docs.npmjs.com/cli/v10/using-npm/scripts#life-cycle-scripts
+ * @file NPM lifecycle script names. Standard npm lifecycle hooks that can be
+ *   defined in package.json scripts.
+ *   https://docs.npmjs.com/cli/v10/using-npm/scripts#life-cycle-scripts.
  */
 declare const lifecycleScriptNames: Set<string>;
 export { lifecycleScriptNames };

package/dist/constants/lifecycle-script-names.js

@@ -23,8 +23,8 @@ __export(lifecycle_script_names_exports, {
   lifecycleScriptNames: () => lifecycleScriptNames
 });
 module.exports = __toCommonJS(lifecycle_script_names_exports);
-var import_primordials = require("../primordials");
-const lifecycleScriptNames = new import_primordials.SetCtor(
+var import_map_set = require("../primordials/map-set");
+const lifecycleScriptNames = new import_map_set.SetCtor(
   [
     "dependencies",
     "prepublishOnly",

package/dist/constants/maintained-node-versions.d.ts

@@ -1,5 +1,5 @@
 /**
- * @fileoverview Maintained Node.js versions without external dependencies.
+ * @file Maintained Node.js versions without external dependencies.
  */
 declare const maintainedNodeVersions: readonly string[] & {
     current: string;

package/dist/constants/maintained-node-versions.js

@@ -23,14 +23,13 @@ __export(maintained_node_versions_exports, {
   maintainedNodeVersions: () => maintainedNodeVersions
 });
 module.exports = __toCommonJS(maintained_node_versions_exports);
-var import_primordials = require("../primordials");
-const ObjectFreeze = Object.freeze;
+var import_object = require("../primordials/object");
 const next = "25.0.0";
 const current = "22.20.0";
 const previous = "20.19.5";
 const last = "18.20.8";
-const maintainedNodeVersions = ObjectFreeze(
-  (0, import_primordials.ObjectAssign)([last, previous, current, next], {
+const maintainedNodeVersions = (0, import_object.ObjectFreeze)(
+  (0, import_object.ObjectAssign)([last, previous, current, next], {
     current,
     last,
     next,

package/dist/constants/node.d.ts

@@ -1,8 +1,7 @@
 /**
- * @fileoverview Node.js runtime version and capability helpers.
- * Provides getters for the current Node version (major/minor/patch), the
- * maintained-versions list, and feature-detection flags for APIs that vary
- * across Node releases.
+ * @file Node.js runtime version and capability helpers. Provides getters for
+ *   the current Node version (major/minor/patch), the maintained-versions list,
+ *   and feature-detection flags for APIs that vary across Node releases.
  */
 /**
  * Get the absolute path to the currently running Node.js binary.
@@ -22,9 +21,9 @@ export declare function getMaintainedNodeVersions(): readonly string[] & {
     previous: string;
 };
 /**
- * Get the flags used to block Node.js debugger attachment via SIGUSR1.
- * Returns `['--disable-sigusr1']` on runtimes that support it and falls back
- * to `['--no-inspect']` on older versions.
+ * Get the flags used to block Node.js debugger attachment via SIGUSR1. Returns
+ * `['--disable-sigusr1']` on runtimes that support it and falls back to
+ * `['--no-inspect']` on older versions.
  *
  * @returns A non-empty array of CLI flags suitable for passing to `node`.
  */
@@ -66,9 +65,9 @@ export declare function getNodeNoWarningsFlags(): string[];
 export declare function getNodePatchVersion(): number;
 /**
  * Get the permission-grant flags needed to run npm under Node.js 24+'s
- * `--permission` model. The array is non-empty only on Node.js 24+ and
- * includes `--allow-fs-read=*`, `--allow-fs-write=*`, and
- * `--allow-child-process`. Older versions return an empty array.
+ * `--permission` model. The array is non-empty only on Node.js 24+ and includes
+ * `--allow-fs-read=*`, `--allow-fs-write=*`, and `--allow-child-process`. Older
+ * versions return an empty array.
  *
  * @returns The permission flag list (possibly empty) for the current runtime.
  */
@@ -80,8 +79,8 @@ export declare function getNodePermissionFlags(): string[];
  */
 export declare function getNodeVersion(): string;
 /**
- * Check whether the current runtime exposes the `module.enableCompileCache()` API.
- * The API is available on Node.js 24+.
+ * Check whether the current runtime exposes the `module.enableCompileCache()`
+ * API. The API is available on Node.js 24+.
  *
  * @returns `true` when the current runtime is Node.js 24 or newer.
  */
@@ -95,7 +94,8 @@ export declare function supportsNodeCompileCacheApi(): boolean;
 export declare function supportsNodeCompileCacheEnvVar(): boolean;
 /**
  * Check whether the current runtime supports the `--disable-sigusr1` CLI flag.
- * Flag landed in v22.14.0 and v23.7.0 and was stabilized in v22.20.0 / v24.8.0.
+ * Flag landed in v22.14.0 and v23.7.0 and was stabilized in v22.20.0 /
+ * v24.8.0.
  *
  * @returns `true` when the runtime exposes `--disable-sigusr1`.
  */
@@ -115,22 +115,23 @@ export declare function supportsNodeDisableWarningFlag(): boolean;
  */
 export declare function supportsNodePermissionFlag(): boolean;
 /**
- * Check whether `require()` can synchronously load ESM modules.
- * Requires Node.js 22.12+ or Node.js 23+.
+ * Check whether `require()` can synchronously load ESM modules. Requires
+ * Node.js 22.12+ or Node.js 23+.
  *
  * @returns `true` when the runtime supports `require()`-ing ES modules.
  */
 export declare function supportsNodeRequireModule(): boolean;
 /**
- * Check whether the current runtime supports `node --run <script>`.
- * Requires Node.js 22.11+ or Node.js 23+.
+ * Check whether the current runtime supports `node --run <script>`. Requires
+ * Node.js 22.11+ or Node.js 23+.
  *
- * @returns `true` when the runtime can execute package.json scripts via `--run`.
+ * @returns `true` when the runtime can execute package.json scripts via
+ *   `--run`.
  */
 export declare function supportsNodeRun(): boolean;
 /**
- * Check whether this process was spawned with an IPC channel.
- * When `true`, `process.send()` is callable to message the parent process.
+ * Check whether this process was spawned with an IPC channel. When `true`,
+ * `process.send()` is callable to message the parent process.
  *
  * @returns `true` when the current process has an IPC channel to its parent.
  */

package/dist/constants/node.js

@@ -54,7 +54,7 @@ __export(node_exports, {
 module.exports = __toCommonJS(node_exports);
 var import_node_process = __toESM(require("node:process"));
 var import_maintained_node_versions = require("./maintained-node-versions");
-var import_primordials = require("../primordials");
+var import_number = require("../primordials/number");
 const NODE_VERSION = import_node_process.default.version;
 let _nodeDisableSigusr1Flags;
 let _nodeHardenFlags;
@@ -91,10 +91,10 @@ function getNodeHardenFlags() {
 }
 function getNodeMajorVersion() {
   const major = NODE_VERSION.slice(1).split(".")[0] ?? "0";
-  return (0, import_primordials.NumberParseInt)(major, 10) || 0;
+  return (0, import_number.NumberParseInt)(major, 10) || 0;
 }
 function getNodeMinorVersion() {
-  return (0, import_primordials.NumberParseInt)(NODE_VERSION.split(".")[1] ?? "0", 10);
+  return (0, import_number.NumberParseInt)(NODE_VERSION.split(".")[1] ?? "0", 10);
 }
 function getNodeNoWarningsFlags() {
   if (_nodeNoWarningsFlags === void 0) {
@@ -103,7 +103,7 @@ function getNodeNoWarningsFlags() {
   return _nodeNoWarningsFlags;
 }
 function getNodePatchVersion() {
-  return (0, import_primordials.NumberParseInt)(NODE_VERSION.split(".")[2] ?? "0", 10);
+  return (0, import_number.NumberParseInt)(NODE_VERSION.split(".")[2] ?? "0", 10);
 }
 function getNodePermissionFlags() {
   if (_nodePermissionFlags === void 0) {

package/dist/constants/package-default-node-range.d.ts

@@ -1,5 +1,5 @@
 /**
- * @fileoverview Default Node.js version range for packages.
+ * @file Default Node.js version range for packages.
  */
 declare const packageDefaultNodeRange: string;
 export { packageDefaultNodeRange };

package/dist/constants/package-default-socket-categories.d.ts

@@ -1,5 +1,5 @@
 /**
- * @fileoverview Default Socket security categories for packages.
+ * @file Default Socket security categories for packages.
  */
 declare const packageDefaultSocketCategories: readonly string[];
 export { packageDefaultSocketCategories };

package/dist/constants/package-default-socket-categories.js

@@ -23,8 +23,8 @@ __export(package_default_socket_categories_exports, {
   packageDefaultSocketCategories: () => packageDefaultSocketCategories
 });
 module.exports = __toCommonJS(package_default_socket_categories_exports);
-var import_primordials = require("../primordials");
-const packageDefaultSocketCategories = (0, import_primordials.ObjectFreeze)(["cleanup"]);
+var import_object = require("../primordials/object");
+const packageDefaultSocketCategories = (0, import_object.ObjectFreeze)(["cleanup"]);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   packageDefaultSocketCategories

package/dist/constants/packages.d.ts

@@ -1,8 +1,8 @@
 /**
- * @fileoverview Package metadata, defaults, extensions, and lifecycle helpers.
- * Exposes lazily-memoized accessors for package defaults (Node range, Socket
- * categories), the pacote cache path, lifecycle script names, and known
- * package extensions used during manifest processing.
+ * @file Package metadata, defaults, extensions, and lifecycle helpers. Exposes
+ *   lazily-memoized accessors for package defaults (Node range, Socket
+ *   categories), the pacote cache path, lifecycle script names, and known
+ *   package extensions used during manifest processing.
  */
 export declare const PACKAGE = "package";
 export declare const AT_LATEST = "@latest";

package/dist/constants/packages.js

@@ -44,12 +44,14 @@ __export(packages_exports, {
 });
 module.exports = __toCommonJS(packages_exports);
 var import_pacote = __toESM(require("../external/pacote"));
-var import_package_extensions = require("../package-extensions");
+var import_data = require("../pkg-ext/data");
 var import_normalize = require("../paths/normalize");
 var import_lifecycle_script_names = require("./lifecycle-script-names");
 var import_package_default_node_range = require("./package-default-node-range");
 var import_package_default_socket_categories = require("./package-default-socket-categories");
-var import_primordials = require("../primordials");
+var import_array = require("../primordials/array");
+var import_object = require("../primordials/object");
+var import_reflect = require("../primordials/reflect");
 let _lifecycleScriptNames;
 let _packageDefaultNodeRange;
 let _packageDefaultSocketCategories;
@@ -68,7 +70,7 @@ function clearPackumentCache() {
 // @__NO_SIDE_EFFECTS__
 function getLifecycleScriptNames() {
   if (_lifecycleScriptNames === void 0) {
-    _lifecycleScriptNames = (0, import_primordials.ArrayFrom)(import_lifecycle_script_names.lifecycleScriptNames);
+    _lifecycleScriptNames = (0, import_array.ArrayFrom)(import_lifecycle_script_names.lifecycleScriptNames);
   }
   return _lifecycleScriptNames;
 }
@@ -89,7 +91,7 @@ function getPackageDefaultSocketCategories() {
 // @__NO_SIDE_EFFECTS__
 function getPackageExtensions() {
   if (_packageExtensions === void 0) {
-    _packageExtensions = (0, import_primordials.ObjectEntries)(import_package_extensions.packageExtensions);
+    _packageExtensions = (0, import_object.ObjectEntries)(import_data.packageExtensions);
   }
   return _packageExtensions;
 }
@@ -118,7 +120,7 @@ function getPackumentCache() {
 function getPacoteCachePath() {
   if (_pacoteCachePath === void 0) {
     try {
-      const proto = (0, import_primordials.ReflectGetPrototypeOf)(
+      const proto = (0, import_reflect.ReflectGetPrototypeOf)(
         import_pacote.default.RegistryFetcher.prototype
       );
       const PacoteFetcherBase = proto?.constructor;

package/dist/constants/platform.d.ts

@@ -1,4 +1,6 @@
-/** @fileoverview Platform detection and OS-specific constants. */
+/**
+ * @file Platform detection and OS-specific constants.
+ */
 /**
  * CPU architecture type.
  */

package/dist/constants/platform.js

@@ -29,25 +29,18 @@ __export(platform_exports, {
   getPlatform: () => getPlatform
 });
 module.exports = __toCommonJS(platform_exports);
-let _os;
-// @__NO_SIDE_EFFECTS__
-function getOs() {
-  if (_os === void 0) {
-    _os = require("node:os");
-  }
-  return _os;
-}
+var import_os = require("../node/os");
 let _arch;
 function getArch() {
   if (_arch === void 0) {
-    _arch = (/* @__PURE__ */ getOs()).arch();
+    _arch = (0, import_os.getNodeOs)().arch();
   }
   return _arch;
 }
 let _platform;
 function getPlatform() {
   if (_platform === void 0) {
-    _platform = (/* @__PURE__ */ getOs()).platform();
+    _platform = (0, import_os.getNodeOs)().platform();
   }
   return _platform;
 }

package/dist/constants/{core.d.ts → sentinels.d.ts}

@@ -1,8 +1,8 @@
 /**
- * @fileoverview Core primitives and fundamental constants.
- * Holds sentinels, unknown/empty tokens, the internals symbol, and a few
- * shared env-var name strings. Intentionally kept small - prefer moving
- * constants to a more specific `src/constants/*` module when possible.
+ * @file Core primitives and fundamental constants. Holds sentinels,
+ *   unknown/empty tokens, the internals symbol, and a few shared env-var name
+ *   strings. Intentionally kept small - prefer moving constants to a more
+ *   specific `src/constants/*` module when possible.
  */
 export declare const kInternalsSymbol: unique symbol;
 export declare const LOOP_SENTINEL = 1000000;

package/dist/constants/{core.js → sentinels.js}

@@ -18,8 +18,8 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var core_exports = {};
-__export(core_exports, {
+var sentinels_exports = {};
+__export(sentinels_exports, {
   COLUMN_LIMIT: () => COLUMN_LIMIT,
   EMPTY_FILE: () => EMPTY_FILE,
   EMPTY_VALUE: () => EMPTY_VALUE,
@@ -32,7 +32,7 @@ __export(core_exports, {
   V: () => V,
   kInternalsSymbol: () => kInternalsSymbol
 });
-module.exports = __toCommonJS(core_exports);
+module.exports = __toCommonJS(sentinels_exports);
 const kInternalsSymbol = Symbol("@socketregistry.constants.internals");
 const LOOP_SENTINEL = 1e6;
 const UNKNOWN_ERROR = "Unknown error";

package/dist/constants/socket.d.ts

@@ -1,8 +1,7 @@
 /**
- * @fileoverview Socket.dev branding and identifier constants.
- * Centralizes API base URLs, the public API key, website/docs URLs, npm
- * scopes, GitHub org/repo names, and app name strings used across the
- * Socket toolchain.
+ * @file Socket.dev branding and identifier constants. Centralizes API base
+ *   URLs, the public API key, website/docs URLs, npm scopes, GitHub org/repo
+ *   names, and app name strings used across the Socket toolchain.
  */
 export declare const SOCKET_API_BASE_URL = "https://api.socket.dev/v0";
 export declare const SOCKET_PUBLIC_API_KEY = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
@@ -26,11 +25,10 @@ export declare const SOCKET_CLI_APP_NAME = "socket";
 export declare const SOCKET_DLX_APP_NAME = "dlx";
 export declare const SOCKET_FIREWALL_APP_NAME = "sfw";
 export declare const SOCKET_REGISTRY_APP_NAME = "registry";
+export declare const SOCKET_WHEELHOUSE_APP_NAME = "wheelhouse";
 export declare const SOCKET_APP_PREFIX = "_";
 export declare const SOCKET_LIB_NAME = "@socketsecurity/lib";
 export declare const SOCKET_LIB_VERSION: string;
-export declare const SOCKET_LIB_URL = "https://github.com/SocketDev/socket-lib";
-export declare const SOCKET_LIB_USER_AGENT: string;
 export declare const SOCKET_IPC_HANDSHAKE = "SOCKET_IPC_HANDSHAKE";
 export declare const CACHE_SOCKET_API_DIR = "socket-api";
 export declare const REGISTRY = "registry";

package/dist/constants/socket.js

@@ -36,8 +36,6 @@ __export(socket_exports, {
   SOCKET_GITHUB_ORG: () => SOCKET_GITHUB_ORG,
   SOCKET_IPC_HANDSHAKE: () => SOCKET_IPC_HANDSHAKE,
   SOCKET_LIB_NAME: () => SOCKET_LIB_NAME,
-  SOCKET_LIB_URL: () => SOCKET_LIB_URL,
-  SOCKET_LIB_USER_AGENT: () => SOCKET_LIB_USER_AGENT,
   SOCKET_LIB_VERSION: () => SOCKET_LIB_VERSION,
   SOCKET_OVERRIDE_SCOPE: () => SOCKET_OVERRIDE_SCOPE,
   SOCKET_PRICING_URL: () => SOCKET_PRICING_URL,
@@ -50,7 +48,8 @@ __export(socket_exports, {
   SOCKET_REGISTRY_SCOPE: () => SOCKET_REGISTRY_SCOPE,
   SOCKET_SECURITY_SCOPE: () => SOCKET_SECURITY_SCOPE,
   SOCKET_STATUS_URL: () => SOCKET_STATUS_URL,
-  SOCKET_WEBSITE_URL: () => SOCKET_WEBSITE_URL
+  SOCKET_WEBSITE_URL: () => SOCKET_WEBSITE_URL,
+  SOCKET_WHEELHOUSE_APP_NAME: () => SOCKET_WHEELHOUSE_APP_NAME
 });
 module.exports = __toCommonJS(socket_exports);
 const SOCKET_API_BASE_URL = "https://api.socket.dev/v0";
@@ -75,11 +74,10 @@ const SOCKET_CLI_APP_NAME = "socket";
 const SOCKET_DLX_APP_NAME = "dlx";
 const SOCKET_FIREWALL_APP_NAME = "sfw";
 const SOCKET_REGISTRY_APP_NAME = "registry";
+const SOCKET_WHEELHOUSE_APP_NAME = "wheelhouse";
 const SOCKET_APP_PREFIX = "_";
 const SOCKET_LIB_NAME = "@socketsecurity/lib";
-const SOCKET_LIB_VERSION = "5.28.0";
-const SOCKET_LIB_URL = "https://github.com/SocketDev/socket-lib";
-const SOCKET_LIB_USER_AGENT = `socketsecurity-lib/${SOCKET_LIB_VERSION} (${SOCKET_LIB_URL})`;
+const SOCKET_LIB_VERSION = "6.0.0";
 const SOCKET_IPC_HANDSHAKE = "SOCKET_IPC_HANDSHAKE";
 const CACHE_SOCKET_API_DIR = "socket-api";
 const REGISTRY = "registry";
@@ -102,8 +100,6 @@ const REGISTRY_SCOPE_DELIMITER = "__";
   SOCKET_GITHUB_ORG,
   SOCKET_IPC_HANDSHAKE,
   SOCKET_LIB_NAME,
-  SOCKET_LIB_URL,
-  SOCKET_LIB_USER_AGENT,
   SOCKET_LIB_VERSION,
   SOCKET_OVERRIDE_SCOPE,
   SOCKET_PRICING_URL,
@@ -116,5 +112,6 @@ const REGISTRY_SCOPE_DELIMITER = "__";
   SOCKET_REGISTRY_SCOPE,
   SOCKET_SECURITY_SCOPE,
   SOCKET_STATUS_URL,
-  SOCKET_WEBSITE_URL
+  SOCKET_WEBSITE_URL,
+  SOCKET_WHEELHOUSE_APP_NAME
 });

package/dist/constants/testing.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview Testing framework and CI-related string constants.
- * Exports the canonical `TEST`, `VITEST`, `CI`, and `PRE_COMMIT` name
- * strings referenced by env checks and configuration.
+ * @file Testing framework and CI-related string constants. Exports the
+ *   canonical `TEST`, `VITEST`, `CI`, and `PRE_COMMIT` name strings referenced
+ *   by env checks and configuration.
  */
 export declare const TEST = "test";
 export declare const VITEST = "VITEST";

package/dist/constants/time.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview Time-related numeric constants.
- * Provides millisecond-per-unit multipliers (second/minute/hour/day) and
- * derived cache TTLs such as the DLX binary cache expiration.
+ * @file Time-related numeric constants. Provides millisecond-per-unit
+ *   multipliers (second/minute/hour/day) and derived cache TTLs such as the DLX
+ *   binary cache expiration.
  */
 export declare const MILLISECONDS_PER_SECOND = 1000;
 export declare const MILLISECONDS_PER_MINUTE: number;

package/dist/constants/typescript.d.ts

@@ -1,7 +1,7 @@
 /**
- * @fileoverview TypeScript availability detection.
- * Exports small getters that probe whether the `typescript` package's type
- * definitions and lib files are resolvable from the current project.
+ * @file TypeScript availability detection. Exports small getters that probe
+ *   whether the `typescript` package's type definitions and lib files are
+ *   resolvable from the current project.
  */
 /**
  * Check whether TypeScript's `lib/` directory is resolvable from the current

package/dist/cover/code.d.ts

@@ -1,11 +1,19 @@
 /**
- * @fileoverview Code coverage utilities for parsing v8 coverage data.
+ * @file Code coverage utilities for parsing v8 coverage data.
  */
-import type { CodeCoverageResult, GetCodeCoverageOptions } from './types';
+import type { CodeCoverageResult, CoverageMetric, GetCodeCoverageOptions } from './types';
+/**
+ * Calculate coverage metric with percentage.
+ */
+export declare function calculateMetric(data: {
+    covered: number;
+    total: number;
+}): CoverageMetric;
 /**
  * Get code coverage metrics from v8 coverage-final.json.
  *
- * @throws {Error} When coverage file doesn't exist and generateIfMissing is false.
+ * @throws {Error} When coverage file doesn't exist and generateIfMissing is
+ *   false.
  * @throws {Error} When coverage data format is invalid.
  */
 export declare function getCodeCoverage(options?: GetCodeCoverageOptions | undefined): Promise<CodeCoverageResult>;