@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/eco/npm/pnpm/detect-pnpm-version.js

@@ -1,47 +1,26 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var detect_pnpm_version_exports = {};
-__export(detect_pnpm_version_exports, {
-  detectPnpmVersion: () => detectPnpmVersion
-});
-module.exports = __toCommonJS(detect_pnpm_version_exports);
-var import_regexp = require("../../../primordials/regexp");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_regexp = require('../../../primordials/regexp.js');
+
+//#region src/eco/npm/pnpm/detect-pnpm-version.ts
+/**
+* @file `detectPnpmVersion(content)` — scans a pnpm-lock.yaml for its
+*   `lockfileVersion:` line and returns `5`, `6`, or `9`. Falls back to `9`
+*   (the latest) when no recognizable marker is present. Matches socket-btm's
+*   smol-manifest internal `detectPnpmVersion`.
+*/
 const RE_LOCKFILE_VERSION = /lockfileVersion:\s*['"]?([0-9.]+)['"]?/;
 function detectPnpmVersion(content) {
-  const match = (0, import_regexp.RegExpPrototypeExec)(RE_LOCKFILE_VERSION, content);
-  if (match) {
-    const version = match[1];
-    if (version[0] === "5") {
-      return 5;
-    }
-    if (version[0] === "6") {
-      return 6;
-    }
-    if (version[0] === "9") {
-      return 9;
-    }
-  }
-  return 9;
+	const match = require_primordials_regexp.RegExpPrototypeExec(RE_LOCKFILE_VERSION, content);
+	if (match) {
+		const version = match[1];
+		if (version[0] === "5") return 5;
+		if (version[0] === "6") return 6;
+		if (version[0] === "9") return 9;
+	}
+	return 9;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  detectPnpmVersion
-});
+
+//#endregion
+exports.detectPnpmVersion = detectPnpmVersion;

package/dist/eco/npm/pnpm/exec.js

@@ -1,65 +1,54 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var exec_exports = {};
-__export(exec_exports, {
-  execPnpm: () => execPnpm
-});
-module.exports = __toCommonJS(exec_exports);
-var import_exec = require("../../../bin/exec");
-var import_namespace = require("../../../debug/namespace");
-var import_ci = require("../../../env/ci");
-var import_array = require("../../../primordials/array");
-var import_flags = require("../npm/flags");
-var import_flags2 = require("./flags");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_array = require('../../../primordials/array.js');
+const require_debug_namespace = require('../../../debug/namespace.js');
+const require_env_ci = require('../../../env/ci.js');
+const require_bin_exec = require('../../../bin/exec.js');
+const require_eco_npm_npm_flags = require('../npm/flags.js');
+const require_eco_npm_pnpm_flags = require('./flags.js');
+
+//#region src/eco/npm/pnpm/exec.ts
+/**
+* @file Execute pnpm commands with optimized flags and security defaults.
+*   SECURITY: Array-based arguments prevent command injection. All elements in
+*   the args array are properly escaped by Node.js when passed to execBin().
+*/
+/**
+* Execute pnpm commands with optimized flags and settings.
+*
+* @example
+*   ;```typescript
+*   await execPnpm(['install'])
+*   await execPnpm(['add', 'lodash'], { allowLockfileUpdate: true })
+*   ```
+*/
 function execPnpm(args, options) {
-  const { allowLockfileUpdate, ...extBinOpts } = {
-    __proto__: null,
-    ...options
-  };
-  const useDebug = (0, import_namespace.isDebug)();
-  const terminatorPos = (0, import_array.ArrayPrototypeIndexOf)(args, "--");
-  const pnpmArgs = (terminatorPos === -1 ? args : (0, import_array.ArrayPrototypeSlice)(args, 0, terminatorPos)).filter((a) => !(0, import_flags.isNpmProgressFlag)(a));
-  const otherArgs = terminatorPos === -1 ? [] : (0, import_array.ArrayPrototypeSlice)(args, terminatorPos);
-  const firstArg = pnpmArgs[0];
-  const supportsIgnoreScripts = firstArg ? import_flags2.PNPM_INSTALL_LIKE_COMMANDS.has(firstArg) : false;
-  const logLevelArgs = useDebug || pnpmArgs.some(import_flags2.isPnpmLoglevelFlag) ? [] : ["--loglevel", "warn"];
-  const hasIgnoreScriptsFlag = pnpmArgs.some(import_flags2.isPnpmIgnoreScriptsFlag);
-  const ignoreScriptsArgs = !supportsIgnoreScripts || hasIgnoreScriptsFlag ? [] : ["--ignore-scripts"];
-  const frozenLockfileArgs = [];
-  if ((0, import_ci.getCI)() && allowLockfileUpdate && firstArg && (0, import_flags2.isPnpmInstallCommand)(firstArg) && !pnpmArgs.some(import_flags2.isPnpmFrozenLockfileFlag)) {
-    frozenLockfileArgs.push("--no-frozen-lockfile");
-  }
-  return (0, import_exec.execBin)(
-    "pnpm",
-    [
-      ...logLevelArgs,
-      ...ignoreScriptsArgs,
-      ...frozenLockfileArgs,
-      ...pnpmArgs,
-      ...otherArgs
-    ],
-    extBinOpts
-  );
+	const { allowLockfileUpdate, ...extBinOpts } = {
+		__proto__: null,
+		...options
+	};
+	const useDebug = /* @__PURE__ */ require_debug_namespace.isDebug();
+	const terminatorPos = require_primordials_array.ArrayPrototypeIndexOf(args, "--");
+	const pnpmArgs = (terminatorPos === -1 ? args : require_primordials_array.ArrayPrototypeSlice(args, 0, terminatorPos)).filter((a) => !/* @__PURE__ */ require_eco_npm_npm_flags.isNpmProgressFlag(a));
+	const otherArgs = terminatorPos === -1 ? [] : require_primordials_array.ArrayPrototypeSlice(args, terminatorPos);
+	const firstArg = pnpmArgs[0];
+	const supportsIgnoreScripts = firstArg ? require_eco_npm_pnpm_flags.PNPM_INSTALL_LIKE_COMMANDS.has(firstArg) : false;
+	const logLevelArgs = useDebug || pnpmArgs.some(require_eco_npm_pnpm_flags.isPnpmLoglevelFlag) ? [] : ["--loglevel", "warn"];
+	const hasIgnoreScriptsFlag = pnpmArgs.some(require_eco_npm_pnpm_flags.isPnpmIgnoreScriptsFlag);
+	const ignoreScriptsArgs = !supportsIgnoreScripts || hasIgnoreScriptsFlag ? [] : ["--ignore-scripts"];
+	/* c8 ignore start */
+	const frozenLockfileArgs = [];
+	if (/* @__PURE__ */ require_env_ci.getCI() && allowLockfileUpdate && firstArg && /* @__PURE__ */ require_eco_npm_pnpm_flags.isPnpmInstallCommand(firstArg) && !pnpmArgs.some(require_eco_npm_pnpm_flags.isPnpmFrozenLockfileFlag)) frozenLockfileArgs.push("--no-frozen-lockfile");
+	/* c8 ignore stop */
+	return /* @__PURE__ */ require_bin_exec.execBin("pnpm", [
+		...logLevelArgs,
+		...ignoreScriptsArgs,
+		...frozenLockfileArgs,
+		...pnpmArgs,
+		...otherArgs
+	], extBinOpts);
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  execPnpm
-});
+
+//#endregion
+exports.execPnpm = execPnpm;

package/dist/eco/npm/pnpm/flags.js

@@ -1,76 +1,83 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var flags_exports = {};
-__export(flags_exports, {
-  PNPM_INSTALL_LIKE_COMMANDS: () => PNPM_INSTALL_LIKE_COMMANDS,
-  isPnpmFrozenLockfileFlag: () => isPnpmFrozenLockfileFlag,
-  isPnpmIgnoreScriptsFlag: () => isPnpmIgnoreScriptsFlag,
-  isPnpmInstallCommand: () => isPnpmInstallCommand,
-  isPnpmLoglevelFlag: () => isPnpmLoglevelFlag
-});
-module.exports = __toCommonJS(flags_exports);
-var import_map_set = require("../../../primordials/map-set");
-var import_flags = require("../npm/flags");
-const pnpmIgnoreScriptsFlags = new import_map_set.SetCtor([
-  "--ignore-scripts",
-  "--no-ignore-scripts"
-]);
-const pnpmFrozenLockfileFlags = new import_map_set.SetCtor([
-  "--frozen-lockfile",
-  "--no-frozen-lockfile"
-]);
-const pnpmInstallCommands = new import_map_set.SetCtor(["install", "i"]);
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_map_set = require('../../../primordials/map-set.js');
+const require_eco_npm_npm_flags = require('../npm/flags.js');
+
+//#region src/eco/npm/pnpm/flags.ts
+/**
+* @file Pnpm CLI flag predicates. pnpm reuses npm's `--loglevel` flag verbatim,
+*   so isPnpmLoglevelFlag is an explicit alias of isNpmLoglevelFlag rather than
+*   a separate implementation.
+*/
+const pnpmIgnoreScriptsFlags = new require_primordials_map_set.SetCtor(["--ignore-scripts", "--no-ignore-scripts"]);
+const pnpmFrozenLockfileFlags = new require_primordials_map_set.SetCtor(["--frozen-lockfile", "--no-frozen-lockfile"]);
+const pnpmInstallCommands = new require_primordials_map_set.SetCtor(["install", "i"]);
+/**
+* Check if a command argument is a pnpm frozen-lockfile flag.
+*
+* @example
+*   ;```typescript
+*   isPnpmFrozenLockfileFlag('--frozen-lockfile') // true
+*   isPnpmFrozenLockfileFlag('--no-frozen-lockfile') // true
+*   isPnpmFrozenLockfileFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isPnpmFrozenLockfileFlag(cmdArg) {
-  return pnpmFrozenLockfileFlags.has(cmdArg);
+	return pnpmFrozenLockfileFlags.has(cmdArg);
 }
-// @__NO_SIDE_EFFECTS__
+/**
+* Check if a command argument is a pnpm ignore-scripts flag.
+*
+* @example
+*   ;```typescript
+*   isPnpmIgnoreScriptsFlag('--ignore-scripts') // true
+*   isPnpmIgnoreScriptsFlag('--no-ignore-scripts') // true
+*   isPnpmIgnoreScriptsFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isPnpmIgnoreScriptsFlag(cmdArg) {
-  return pnpmIgnoreScriptsFlags.has(cmdArg);
+	return pnpmIgnoreScriptsFlags.has(cmdArg);
 }
-// @__NO_SIDE_EFFECTS__
+/**
+* Check if a command argument is a pnpm install command.
+*
+* @example
+*   ;```typescript
+*   isPnpmInstallCommand('install') // true
+*   isPnpmInstallCommand('i') // true
+*   isPnpmInstallCommand('run') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isPnpmInstallCommand(cmdArg) {
-  return pnpmInstallCommands.has(cmdArg);
+	return pnpmInstallCommands.has(cmdArg);
 }
-const isPnpmLoglevelFlag = import_flags.isNpmLoglevelFlag;
-const PNPM_INSTALL_LIKE_COMMANDS = new import_map_set.SetCtor([
-  "install",
-  "i",
-  "add",
-  "update",
-  "up",
-  "remove",
-  "rm",
-  "link",
-  "ln",
-  "unlink",
-  "import",
-  "rebuild",
-  "rb"
+/**
+* Alias for isNpmLoglevelFlag — pnpm uses the same `--loglevel` surface.
+*/
+const isPnpmLoglevelFlag = require_eco_npm_npm_flags.isNpmLoglevelFlag;
+const PNPM_INSTALL_LIKE_COMMANDS = new require_primordials_map_set.SetCtor([
+	"install",
+	"i",
+	"add",
+	"update",
+	"up",
+	"remove",
+	"rm",
+	"link",
+	"ln",
+	"unlink",
+	"import",
+	"rebuild",
+	"rb"
 ]);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  PNPM_INSTALL_LIKE_COMMANDS,
-  isPnpmFrozenLockfileFlag,
-  isPnpmIgnoreScriptsFlag,
-  isPnpmInstallCommand,
-  isPnpmLoglevelFlag
-});
+
+//#endregion
+exports.PNPM_INSTALL_LIKE_COMMANDS = PNPM_INSTALL_LIKE_COMMANDS;
+exports.isPnpmFrozenLockfileFlag = isPnpmFrozenLockfileFlag;
+exports.isPnpmIgnoreScriptsFlag = isPnpmIgnoreScriptsFlag;
+exports.isPnpmInstallCommand = isPnpmInstallCommand;
+exports.isPnpmLoglevelFlag = isPnpmLoglevelFlag;

package/dist/eco/npm/pnpm/lockfile-format.js

@@ -1,39 +1,22 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var lockfile_format_exports = {};
-__export(lockfile_format_exports, {
-  PNPM_LOCK_FILENAME: () => PNPM_LOCK_FILENAME,
-  PNPM_LOCK_FORMAT: () => PNPM_LOCK_FORMAT
-});
-module.exports = __toCommonJS(lockfile_format_exports);
-var import_object = require("../../../primordials/object");
-const PNPM_LOCK_FORMAT = (0, import_object.ObjectFreeze)({
-  __proto__: null,
-  ecosystem: "npm",
-  format: "pnpm",
-  type: "lockfile"
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../../primordials/object.js');
+
+//#region src/eco/npm/pnpm/lockfile-format.ts
+/**
+* @file Format descriptor for `pnpm-lock.yaml` — pnpm's YAML-formatted lockfile
+*   (v5/v6/v9). Returned by `src/eco/manifest/detect-format.ts` when a filename
+*   matches `pnpm-lock.yaml`.
+*/
+const PNPM_LOCK_FORMAT = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	ecosystem: "npm",
+	format: "pnpm",
+	type: "lockfile"
 });
 const PNPM_LOCK_FILENAME = "pnpm-lock.yaml";
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  PNPM_LOCK_FILENAME,
-  PNPM_LOCK_FORMAT
-});
+
+//#endregion
+exports.PNPM_LOCK_FILENAME = PNPM_LOCK_FILENAME;
+exports.PNPM_LOCK_FORMAT = PNPM_LOCK_FORMAT;