@socketsecurity/lib 5.3.0 → 5.4.1

package/dist/external/supports-color.js

@@ -0,0 +1,8 @@
+'use strict'
+
+// Re-export from external-pack bundle for better deduplication.
+const { supportsColor } = require('./external-pack')
+// supports-color is an ESM module, re-export all properties.
+const exported = supportsColor.default || supportsColor
+Object.assign(module.exports, exported)
+module.exports.default = exported

package/dist/external/validate-npm-package-name.js

@@ -1,105 +1,5 @@
-"use strict";
-/**
- * Bundled from validate-npm-package-name
- * This is a zero-dependency bundle created by esbuild.
- */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
-};
+'use strict'
 
-// node_modules/.pnpm/validate-npm-package-name@6.0.2/node_modules/validate-npm-package-name/lib/index.js
-var require_lib = __commonJS({
-  "node_modules/.pnpm/validate-npm-package-name@6.0.2/node_modules/validate-npm-package-name/lib/index.js"(exports2, module2) {
-    "use strict";
-    var { builtinModules: builtins } = require("module");
-    var scopedPackagePattern = new RegExp("^(?:@([^/]+?)[/])?([^/]+?)$");
-    var exclusionList = [
-      "node_modules",
-      "favicon.ico"
-    ];
-    function validate(name) {
-      var warnings = [];
-      var errors = [];
-      if (name === null) {
-        errors.push("name cannot be null");
-        return done(warnings, errors);
-      }
-      if (name === void 0) {
-        errors.push("name cannot be undefined");
-        return done(warnings, errors);
-      }
-      if (typeof name !== "string") {
-        errors.push("name must be a string");
-        return done(warnings, errors);
-      }
-      if (!name.length) {
-        errors.push("name length must be greater than zero");
-      }
-      if (name.startsWith(".")) {
-        errors.push("name cannot start with a period");
-      }
-      if (name.match(/^_/)) {
-        errors.push("name cannot start with an underscore");
-      }
-      if (name.trim() !== name) {
-        errors.push("name cannot contain leading or trailing spaces");
-      }
-      exclusionList.forEach(function(excludedName) {
-        if (name.toLowerCase() === excludedName) {
-          errors.push(excludedName + " is not a valid package name");
-        }
-      });
-      if (builtins.includes(name.toLowerCase())) {
-        warnings.push(name + " is a core module name");
-      }
-      if (name.length > 214) {
-        warnings.push("name can no longer contain more than 214 characters");
-      }
-      if (name.toLowerCase() !== name) {
-        warnings.push("name can no longer contain capital letters");
-      }
-      if (/[~'!()*]/.test(name.split("/").slice(-1)[0])) {
-        warnings.push(`name can no longer contain special characters ("~'!()*")`);
-      }
-      if (encodeURIComponent(name) !== name) {
-        var nameMatch = name.match(scopedPackagePattern);
-        if (nameMatch) {
-          var user = nameMatch[1];
-          var pkg = nameMatch[2];
-          if (pkg.startsWith(".")) {
-            errors.push("name cannot start with a period");
-          }
-          if (encodeURIComponent(user) === user && encodeURIComponent(pkg) === pkg) {
-            return done(warnings, errors);
-          }
-        }
-        errors.push("name can only contain URL-friendly characters");
-      }
-      return done(warnings, errors);
-    }
-    __name(validate, "validate");
-    var done = /* @__PURE__ */ __name(function(warnings, errors) {
-      var result = {
-        validForNewPackages: errors.length === 0 && warnings.length === 0,
-        validForOldPackages: errors.length === 0,
-        warnings,
-        errors
-      };
-      if (!result.warnings.length) {
-        delete result.warnings;
-      }
-      if (!result.errors.length) {
-        delete result.errors;
-      }
-      return result;
-    }, "done");
-    module2.exports = validate;
-  }
-});
-
-// src/external/validate-npm-package-name.js
-module.exports = require_lib();
+// Re-export from npm-pack bundle for better deduplication.
+const { validateNpmPackageName } = require('./npm-pack')
+module.exports = validateNpmPackageName

package/dist/external/yoctocolors-cjs.js

@@ -1,93 +1,6 @@
-"use strict";
-/**
- * Bundled from yoctocolors-cjs
- * This is a zero-dependency bundle created by esbuild.
- */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
-};
+'use strict'
 
-// node_modules/.pnpm/yoctocolors-cjs@2.1.3/node_modules/yoctocolors-cjs/index.js
-var require_yoctocolors_cjs = __commonJS({
-  "node_modules/.pnpm/yoctocolors-cjs@2.1.3/node_modules/yoctocolors-cjs/index.js"(exports2, module2) {
-    var tty = require("node:tty");
-    var hasColors = tty?.WriteStream?.prototype?.hasColors?.() ?? false;
-    var format = /* @__PURE__ */ __name((open, close) => {
-      if (!hasColors) {
-        return (input) => input;
-      }
-      const openCode = `\x1B[${open}m`;
-      const closeCode = `\x1B[${close}m`;
-      return (input) => {
-        const string = input + "";
-        let index = string.indexOf(closeCode);
-        if (index === -1) {
-          return openCode + string + closeCode;
-        }
-        let result = openCode;
-        let lastIndex = 0;
-        const reopenOnNestedClose = close === 22;
-        const replaceCode = (reopenOnNestedClose ? closeCode : "") + openCode;
-        while (index !== -1) {
-          result += string.slice(lastIndex, index) + replaceCode;
-          lastIndex = index + closeCode.length;
-          index = string.indexOf(closeCode, lastIndex);
-        }
-        result += string.slice(lastIndex) + closeCode;
-        return result;
-      };
-    }, "format");
-    var colors2 = {};
-    colors2.reset = format(0, 0);
-    colors2.bold = format(1, 22);
-    colors2.dim = format(2, 22);
-    colors2.italic = format(3, 23);
-    colors2.underline = format(4, 24);
-    colors2.overline = format(53, 55);
-    colors2.inverse = format(7, 27);
-    colors2.hidden = format(8, 28);
-    colors2.strikethrough = format(9, 29);
-    colors2.black = format(30, 39);
-    colors2.red = format(31, 39);
-    colors2.green = format(32, 39);
-    colors2.yellow = format(33, 39);
-    colors2.blue = format(34, 39);
-    colors2.magenta = format(35, 39);
-    colors2.cyan = format(36, 39);
-    colors2.white = format(37, 39);
-    colors2.gray = format(90, 39);
-    colors2.bgBlack = format(40, 49);
-    colors2.bgRed = format(41, 49);
-    colors2.bgGreen = format(42, 49);
-    colors2.bgYellow = format(43, 49);
-    colors2.bgBlue = format(44, 49);
-    colors2.bgMagenta = format(45, 49);
-    colors2.bgCyan = format(46, 49);
-    colors2.bgWhite = format(47, 49);
-    colors2.bgGray = format(100, 49);
-    colors2.redBright = format(91, 39);
-    colors2.greenBright = format(92, 39);
-    colors2.yellowBright = format(93, 39);
-    colors2.blueBright = format(94, 39);
-    colors2.magentaBright = format(95, 39);
-    colors2.cyanBright = format(96, 39);
-    colors2.whiteBright = format(97, 39);
-    colors2.bgRedBright = format(101, 49);
-    colors2.bgGreenBright = format(102, 49);
-    colors2.bgYellowBright = format(103, 49);
-    colors2.bgBlueBright = format(104, 49);
-    colors2.bgMagentaBright = format(105, 49);
-    colors2.bgCyanBright = format(106, 49);
-    colors2.bgWhiteBright = format(107, 49);
-    module2.exports = colors2;
-  }
-});
-
-// src/external/yoctocolors-cjs.js
-var colors = require_yoctocolors_cjs();
-module.exports = colors;
-module.exports.default = colors;
+// Re-export from external-pack bundle for better deduplication.
+const { yoctocolorsCjs } = require('./external-pack')
+module.exports = yoctocolorsCjs
+module.exports.default = yoctocolorsCjs

package/dist/http-request.js

@@ -25,7 +25,14 @@ __export(http_request_exports, {
   httpRequest: () => httpRequest
 });
 module.exports = __toCommonJS(http_request_exports);
-var import_fs = require("fs");
+let _fs;
+// @__NO_SIDE_EFFECTS__
+function getFs() {
+  if (_fs === void 0) {
+    _fs = require("fs");
+  }
+  return _fs;
+}
 let _http;
 let _https;
 // @__NO_SIDE_EFFECTS__
@@ -252,6 +259,7 @@ async function httpDownloadAttempt(url, destPath, options) {
       port: parsedUrl.port,
       timeout
     };
+    const { createWriteStream } = /* @__PURE__ */ getFs();
     let fileStream;
     let streamClosed = false;
     const closeStream = () => {
@@ -298,7 +306,7 @@ async function httpDownloadAttempt(url, destPath, options) {
           10
         );
         let downloadedSize = 0;
-        fileStream = (0, import_fs.createWriteStream)(destPath);
+        fileStream = createWriteStream(destPath);
         fileStream.on("error", (error) => {
           closeStream();
           const err = new Error(`Failed to write file: ${error.message}`, {

package/dist/ipc.js

@@ -1,10 +1,8 @@
 "use strict";
 /* Socket Lib - Built with esbuild */
-var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -18,14 +16,6 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ipc_exports = {};
 __export(ipc_exports, {
@@ -43,12 +33,33 @@ __export(ipc_exports, {
   writeIpcStub: () => writeIpcStub
 });
 module.exports = __toCommonJS(ipc_exports);
-var import_crypto = __toESM(require("crypto"));
-var import_fs = require("fs");
-var import_path = __toESM(require("path"));
-var import_fs2 = require("./fs");
+var import_fs = require("./fs");
 var import_socket = require("./paths/socket");
 var import_zod = require("./zod");
+let _crypto;
+// @__NO_SIDE_EFFECTS__
+function getCrypto() {
+  if (_crypto === void 0) {
+    _crypto = require("crypto");
+  }
+  return _crypto;
+}
+let _fs;
+// @__NO_SIDE_EFFECTS__
+function getFs() {
+  if (_fs === void 0) {
+    _fs = require("fs");
+  }
+  return _fs;
+}
+let _path;
+// @__NO_SIDE_EFFECTS__
+function getPath() {
+  if (_path === void 0) {
+    _path = require("path");
+  }
+  return _path;
+}
 const IpcMessageSchema = import_zod.z.object({
   /** Unique identifier for message tracking and response correlation. */
   id: import_zod.z.string().min(1),
@@ -81,16 +92,20 @@ const IpcStubSchema = import_zod.z.object({
   data: import_zod.z.unknown()
 });
 function createIpcChannelId(prefix = "socket") {
-  return `${prefix}-${process.pid}-${import_crypto.default.randomBytes(8).toString("hex")}`;
+  const crypto = /* @__PURE__ */ getCrypto();
+  return `${prefix}-${process.pid}-${crypto.randomBytes(8).toString("hex")}`;
 }
 function getIpcStubPath(appName) {
   const tempDir = (0, import_socket.getOsTmpDir)();
-  const stubDir = import_path.default.join(tempDir, ".socket-ipc", appName);
-  return import_path.default.join(stubDir, `stub-${process.pid}.json`);
+  const path = /* @__PURE__ */ getPath();
+  const stubDir = path.join(tempDir, ".socket-ipc", appName);
+  return path.join(stubDir, `stub-${process.pid}.json`);
 }
 async function ensureIpcDirectory(filePath) {
-  const dir = import_path.default.dirname(filePath);
-  await import_fs.promises.mkdir(dir, { recursive: true });
+  const fs = /* @__PURE__ */ getFs();
+  const path = /* @__PURE__ */ getPath();
+  const dir = path.dirname(filePath);
+  await fs.promises.mkdir(dir, { recursive: true });
 }
 async function writeIpcStub(appName, data) {
   const stubPath = getIpcStubPath(appName);
@@ -101,19 +116,25 @@ async function writeIpcStub(appName, data) {
     timestamp: Date.now()
   };
   const validated = IpcStubSchema.parse(ipcData);
-  await import_fs.promises.writeFile(stubPath, JSON.stringify(validated, null, 2), "utf8");
+  const fs = /* @__PURE__ */ getFs();
+  await fs.promises.writeFile(
+    stubPath,
+    JSON.stringify(validated, null, 2),
+    "utf8"
+  );
   return stubPath;
 }
 async function readIpcStub(stubPath) {
   try {
-    const content = await import_fs.promises.readFile(stubPath, "utf8");
+    const fs = /* @__PURE__ */ getFs();
+    const content = await fs.promises.readFile(stubPath, "utf8");
     const parsed = JSON.parse(content);
     const validated = IpcStubSchema.parse(parsed);
     const ageMs = Date.now() - validated.timestamp;
     const maxAgeMs = 5 * 60 * 1e3;
     if (ageMs > maxAgeMs) {
       try {
-        (0, import_fs2.safeDeleteSync)(stubPath, { force: true });
+        (0, import_fs.safeDeleteSync)(stubPath, { force: true });
       } catch {
       }
       return null;
@@ -125,21 +146,23 @@ async function readIpcStub(stubPath) {
 }
 async function cleanupIpcStubs(appName) {
   const tempDir = (0, import_socket.getOsTmpDir)();
-  const stubDir = import_path.default.join(tempDir, ".socket-ipc", appName);
+  const fs = /* @__PURE__ */ getFs();
+  const path = /* @__PURE__ */ getPath();
+  const stubDir = path.join(tempDir, ".socket-ipc", appName);
   try {
-    const files = await import_fs.promises.readdir(stubDir);
+    const files = await fs.promises.readdir(stubDir);
     const now = Date.now();
     const maxAgeMs = 5 * 60 * 1e3;
     await Promise.allSettled(
       files.map(async (file) => {
         if (file.startsWith("stub-") && file.endsWith(".json")) {
-          const filePath = import_path.default.join(stubDir, file);
+          const filePath = path.join(stubDir, file);
           try {
-            const stats = await import_fs.promises.stat(filePath);
+            const stats = await fs.promises.stat(filePath);
             const mtimeAge = now - stats.mtimeMs;
             let isStale = mtimeAge > maxAgeMs;
             try {
-              const content = await import_fs.promises.readFile(filePath, "utf8");
+              const content = await fs.promises.readFile(filePath, "utf8");
               const parsed = JSON.parse(content);
               const validated = IpcStubSchema.parse(parsed);
               const contentAge = now - validated.timestamp;
@@ -147,7 +170,7 @@ async function cleanupIpcStubs(appName) {
             } catch {
             }
             if (isStale) {
-              (0, import_fs2.safeDeleteSync)(filePath, { force: true });
+              (0, import_fs.safeDeleteSync)(filePath, { force: true });
             }
           } catch {
           }
@@ -209,8 +232,9 @@ function waitForIpc(messageType, options = {}) {
   });
 }
 function createIpcMessage(type, data) {
+  const crypto = /* @__PURE__ */ getCrypto();
   return {
-    id: import_crypto.default.randomBytes(16).toString("hex"),
+    id: crypto.randomBytes(16).toString("hex"),
     timestamp: Date.now(),
     type,
     data

package/dist/packages/isolation.js

@@ -32,14 +32,28 @@ __export(isolation_exports, {
   isolatePackage: () => isolatePackage
 });
 module.exports = __toCommonJS(isolation_exports);
-var import_fs = require("fs");
 var import_platform = require("../constants/platform");
-var import_node_path = __toESM(require("node:path"));
 var import_npm_package_arg = __toESM(require("../external/npm-package-arg"));
 var import_spawn = require("../spawn");
 var import_normalize = require("../paths/normalize");
 var import_operations = require("./operations");
 var import_socket = require("../paths/socket");
+let _fs;
+// @__NO_SIDE_EFFECTS__
+function getFs() {
+  if (_fs === void 0) {
+    _fs = require("fs");
+  }
+  return _fs;
+}
+let _path;
+// @__NO_SIDE_EFFECTS__
+function getPath() {
+  if (_path === void 0) {
+    _path = require("path");
+  }
+  return _path;
+}
 const FS_CP_OPTIONS = {
   dereference: true,
   errorOnExist: false,
@@ -49,14 +63,19 @@ const FS_CP_OPTIONS = {
   ...import_platform.WIN32 ? { maxRetries: 3, retryDelay: 100 } : {}
 };
 async function resolveRealPath(pathStr) {
-  return await import_fs.promises.realpath(pathStr).catch(() => import_node_path.default.resolve(pathStr));
+  const fs = /* @__PURE__ */ getFs();
+  const path = /* @__PURE__ */ getPath();
+  return await fs.promises.realpath(pathStr).catch(() => path.resolve(pathStr));
 }
 async function mergePackageJson(pkgJsonPath, originalPkgJson) {
-  const pkgJson = JSON.parse(await import_fs.promises.readFile(pkgJsonPath, "utf8"));
+  const fs = /* @__PURE__ */ getFs();
+  const pkgJson = JSON.parse(await fs.promises.readFile(pkgJsonPath, "utf8"));
   const mergedPkgJson = originalPkgJson ? { ...originalPkgJson, ...pkgJson } : pkgJson;
   return mergedPkgJson;
 }
 async function isolatePackage(packageSpec, options) {
+  const fs = /* @__PURE__ */ getFs();
+  const path = /* @__PURE__ */ getPath();
   const opts = { __proto__: null, ...options };
   const { imports, install, onPackageJson, sourcePath: optSourcePath } = opts;
   let sourcePath = optSourcePath;
@@ -65,8 +84,8 @@ async function isolatePackage(packageSpec, options) {
   if ((0, import_normalize.isPath)(packageSpec)) {
     const trimmedPath = (0, import_normalize.trimLeadingDotSlash)(packageSpec);
     const pathToResolve = (0, import_normalize.isAbsolute)(trimmedPath) ? trimmedPath : packageSpec;
-    sourcePath = import_node_path.default.resolve(pathToResolve);
-    if (!(0, import_fs.existsSync)(sourcePath)) {
+    sourcePath = path.resolve(pathToResolve);
+    if (!fs.existsSync(sourcePath)) {
       throw new Error(`Source path does not exist: ${sourcePath}`);
     }
     const pkgJson = await (0, import_operations.readPackageJson)(sourcePath, { normalize: true });
@@ -79,7 +98,7 @@ async function isolatePackage(packageSpec, options) {
     packageName = parsed.name;
     if (parsed.type === "directory" || parsed.type === "file") {
       sourcePath = parsed.fetchSpec;
-      if (!sourcePath || !(0, import_fs.existsSync)(sourcePath)) {
+      if (!sourcePath || !fs.existsSync(sourcePath)) {
         throw new Error(`Source path does not exist: ${sourcePath}`);
       }
       if (!packageName) {
@@ -97,16 +116,16 @@ async function isolatePackage(packageSpec, options) {
     throw new Error(`Could not determine package name from: ${packageSpec}`);
   }
   const sanitizedName = packageName.replace(/[@/]/g, "-");
-  const tempDir = await import_fs.promises.mkdtemp(
-    import_node_path.default.join((0, import_socket.getOsTmpDir)(), `socket-test-${sanitizedName}-`)
+  const tempDir = await fs.promises.mkdtemp(
+    path.join((0, import_socket.getOsTmpDir)(), `socket-test-${sanitizedName}-`)
   );
-  const packageTempDir = import_node_path.default.join(tempDir, sanitizedName);
-  await import_fs.promises.mkdir(packageTempDir, { recursive: true });
+  const packageTempDir = path.join(tempDir, sanitizedName);
+  await fs.promises.mkdir(packageTempDir, { recursive: true });
   let installedPath;
   let originalPackageJson;
   if (spec) {
-    await import_fs.promises.writeFile(
-      import_node_path.default.join(packageTempDir, "package.json"),
+    await fs.promises.writeFile(
+      path.join(packageTempDir, "package.json"),
       JSON.stringify(
         {
           name: "test-temp",
@@ -127,7 +146,7 @@ async function isolatePackage(packageSpec, options) {
         stdio: "pipe"
       });
     }
-    installedPath = import_node_path.default.join(packageTempDir, "node_modules", packageName);
+    installedPath = path.join(packageTempDir, "node_modules", packageName);
     originalPackageJson = await (0, import_operations.readPackageJson)(installedPath, {
       normalize: true
     });
@@ -135,30 +154,33 @@ async function isolatePackage(packageSpec, options) {
       const realInstalledPath = await resolveRealPath(installedPath);
       const realSourcePath = await resolveRealPath(sourcePath);
       if (realSourcePath !== realInstalledPath) {
-        await import_fs.promises.cp(sourcePath, installedPath, FS_CP_OPTIONS);
+        await fs.promises.cp(sourcePath, installedPath, FS_CP_OPTIONS);
       }
     }
   } else {
     if (!sourcePath) {
       throw new Error("sourcePath is required when no version spec provided");
     }
-    const scopedPath = packageName.startsWith("@") ? import_node_path.default.join(
+    const scopedPath = packageName.startsWith("@") ? path.join(
       packageTempDir,
       "node_modules",
       packageName.split("/")[0] ?? ""
-    ) : import_node_path.default.join(packageTempDir, "node_modules");
-    await import_fs.promises.mkdir(scopedPath, { recursive: true });
-    installedPath = import_node_path.default.join(packageTempDir, "node_modules", packageName);
-    await import_fs.promises.cp(sourcePath, installedPath, FS_CP_OPTIONS);
+    ) : path.join(packageTempDir, "node_modules");
+    await fs.promises.mkdir(scopedPath, { recursive: true });
+    installedPath = path.join(packageTempDir, "node_modules", packageName);
+    await fs.promises.cp(sourcePath, installedPath, FS_CP_OPTIONS);
   }
   if (onPackageJson || originalPackageJson) {
-    const pkgJsonPath = import_node_path.default.join(installedPath, "package.json");
+    const pkgJsonPath = path.join(installedPath, "package.json");
     const mergedPkgJson = await mergePackageJson(
       pkgJsonPath,
       originalPackageJson
     );
     const finalPkgJson = onPackageJson ? await onPackageJson(mergedPkgJson) : mergedPkgJson;
-    await import_fs.promises.writeFile(pkgJsonPath, JSON.stringify(finalPkgJson, null, 2));
+    await fs.promises.writeFile(
+      pkgJsonPath,
+      JSON.stringify(finalPkgJson, null, 2)
+    );
   }
   if (install) {
     await install(installedPath);
@@ -172,7 +194,7 @@ async function isolatePackage(packageSpec, options) {
   const exports2 = imports ? { __proto__: null } : void 0;
   if (imports) {
     for (const { 0: key, 1: specifier } of Object.entries(imports)) {
-      const fullPath = import_node_path.default.join(installedPath, specifier);
+      const fullPath = path.join(installedPath, specifier);
       exports2[key] = require(fullPath);
     }
   }

package/dist/packages/licenses.js

@@ -41,12 +41,19 @@ __export(licenses_exports, {
 module.exports = __toCommonJS(licenses_exports);
 var import_core = require("../constants/core");
 var import_licenses = require("../constants/licenses");
-var import_node_path = __toESM(require("node:path"));
 var import_spdx_correct = __toESM(require("../external/spdx-correct"));
 var import_spdx_expression_parse = __toESM(require("../external/spdx-expression-parse"));
 var import_objects = require("../objects");
 var import_normalize = require("../paths/normalize");
 const copyLeftLicenses = (0, import_licenses.getCopyLeftLicenses)();
+let _path;
+// @__NO_SIDE_EFFECTS__
+function getPath() {
+  if (_path === void 0) {
+    _path = require("path");
+  }
+  return _path;
+}
 const BINARY_OPERATION_NODE_TYPE = "BinaryOperation";
 const LICENSE_NODE_TYPE = "License";
 const fileReferenceRegExp = /^SEE LICEN[CS]E IN (.+)$/;
@@ -133,10 +140,11 @@ function resolvePackageLicenses(licenseFieldValue, where) {
   }
   const match = fileReferenceRegExp.exec(licenseFieldValue);
   if (match) {
+    const path = /* @__PURE__ */ getPath();
     return [
       {
         license: licenseFieldValue,
-        inFile: (0, import_normalize.normalizePath)(import_node_path.default.relative(where, match[1] || ""))
+        inFile: (0, import_normalize.normalizePath)(path.relative(where, match[1] || ""))
       }
     ];
   }

package/dist/paths/socket.d.ts

@@ -81,7 +81,7 @@ export declare function getSocketRegistryGithubCacheDir(): string;
  * Priority order:
  *   1. HOME environment variable (Unix)
  *   2. USERPROFILE environment variable (Windows)
- *   3. os.homedir()
- *   4. Fallback: os.tmpdir() (rarely used, for restricted environments)
+ *   3. getOs().homedir()
+ *   4. Fallback: getOs().tmpdir() (rarely used, for restricted environments)
  */
 export declare function getUserHomeDir(): string;