@socketsecurity/lib 6.0.3 → 6.0.5

package/dist/eco/npm/npm/flags.js

@@ -1,63 +1,91 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var flags_exports = {};
-__export(flags_exports, {
-  isNpmAuditFlag: () => isNpmAuditFlag,
-  isNpmFundFlag: () => isNpmFundFlag,
-  isNpmLoglevelFlag: () => isNpmLoglevelFlag,
-  isNpmNodeOptionsFlag: () => isNpmNodeOptionsFlag,
-  isNpmProgressFlag: () => isNpmProgressFlag
-});
-module.exports = __toCommonJS(flags_exports);
-// @__NO_SIDE_EFFECTS__
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/eco/npm/npm/flags.ts
+/**
+* @file Npm CLI flag predicates. Each predicate identifies whether a single
+*   argv entry matches a specific npm flag family. They're side-effect-free
+*   pure functions marked `@__NO_SIDE_EFFECTS__` so bundlers can tree-shake
+*   unused predicates out of consumer bundles.
+*/
+/**
+* Check if a command argument is an npm audit flag.
+*
+* @example
+*   ;```typescript
+*   isNpmAuditFlag('--no-audit') // true
+*   isNpmAuditFlag('--audit') // true
+*   isNpmAuditFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isNpmAuditFlag(cmdArg) {
-  return /^--(no-)?audit(=.*)?$/.test(cmdArg);
+	return /^--(no-)?audit(=.*)?$/.test(cmdArg);
 }
-// @__NO_SIDE_EFFECTS__
+/**
+* Check if a command argument is an npm fund flag.
+*
+* @example
+*   ;```typescript
+*   isNpmFundFlag('--no-fund') // true
+*   isNpmFundFlag('--fund') // true
+*   isNpmFundFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isNpmFundFlag(cmdArg) {
-  return /^--(no-)?fund(=.*)?$/.test(cmdArg);
+	return /^--(no-)?fund(=.*)?$/.test(cmdArg);
 }
-// @__NO_SIDE_EFFECTS__
+/**
+* Check if a command argument is an npm loglevel flag.
+*
+* @example
+*   ;```typescript
+*   isNpmLoglevelFlag('--loglevel') // true
+*   isNpmLoglevelFlag('--silent') // true
+*   isNpmLoglevelFlag('-s') // true
+*   isNpmLoglevelFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isNpmLoglevelFlag(cmdArg) {
-  if (/^--loglevel(=.*)?$/.test(cmdArg)) {
-    return true;
-  }
-  if (/^--(silent|verbose|info|warn|error|quiet)$/.test(cmdArg)) {
-    return true;
-  }
-  return /^-(s|q|d|dd|ddd|v)$/.test(cmdArg);
+	if (/^--loglevel(=.*)?$/.test(cmdArg)) return true;
+	if (/^--(silent|verbose|info|warn|error|quiet)$/.test(cmdArg)) return true;
+	return /^-(s|q|d|dd|ddd|v)$/.test(cmdArg);
 }
-// @__NO_SIDE_EFFECTS__
+/**
+* Check if a command argument is an npm node-options flag.
+*
+* @example
+*   ;```typescript
+*   isNpmNodeOptionsFlag('--node-options') // true
+*   isNpmNodeOptionsFlag('--node-options=--max-old-space-size=4096') // true
+*   isNpmNodeOptionsFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isNpmNodeOptionsFlag(cmdArg) {
-  return /^--node-options(=.*)?$/.test(cmdArg);
+	return /^--node-options(=.*)?$/.test(cmdArg);
 }
-// @__NO_SIDE_EFFECTS__
+/**
+* Check if a command argument is an npm progress flag.
+*
+* @example
+*   ;```typescript
+*   isNpmProgressFlag('--no-progress') // true
+*   isNpmProgressFlag('--progress') // true
+*   isNpmProgressFlag('--save') // false
+*   ```
+*/
+/* @__NO_SIDE_EFFECTS__ */
 function isNpmProgressFlag(cmdArg) {
-  return /^--(no-)?progress(=.*)?$/.test(cmdArg);
+	return /^--(no-)?progress(=.*)?$/.test(cmdArg);
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  isNpmAuditFlag,
-  isNpmFundFlag,
-  isNpmLoglevelFlag,
-  isNpmNodeOptionsFlag,
-  isNpmProgressFlag
-});
+
+//#endregion
+exports.isNpmAuditFlag = isNpmAuditFlag;
+exports.isNpmFundFlag = isNpmFundFlag;
+exports.isNpmLoglevelFlag = isNpmLoglevelFlag;
+exports.isNpmNodeOptionsFlag = isNpmNodeOptionsFlag;
+exports.isNpmProgressFlag = isNpmProgressFlag;

package/dist/eco/npm/npm/lockfile-format.js

@@ -1,42 +1,23 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var lockfile_format_exports = {};
-__export(lockfile_format_exports, {
-  PACKAGE_LOCK_FILENAMES: () => PACKAGE_LOCK_FILENAMES,
-  PACKAGE_LOCK_FORMAT: () => PACKAGE_LOCK_FORMAT
-});
-module.exports = __toCommonJS(lockfile_format_exports);
-var import_object = require("../../../primordials/object");
-const PACKAGE_LOCK_FORMAT = (0, import_object.ObjectFreeze)({
-  __proto__: null,
-  ecosystem: "npm",
-  format: "npm",
-  type: "lockfile"
-});
-const PACKAGE_LOCK_FILENAMES = (0, import_object.ObjectFreeze)([
-  "package-lock.json",
-  "npm-shrinkwrap.json"
-]);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  PACKAGE_LOCK_FILENAMES,
-  PACKAGE_LOCK_FORMAT
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../../primordials/object.js');
+
+//#region src/eco/npm/npm/lockfile-format.ts
+/**
+* @file Format descriptor for npm lockfiles — covers both `package-lock.json`
+*   and `npm-shrinkwrap.json` (npm v1/v2/v3 lock formats share the parser).
+*   Returned by `src/eco/manifest/detect-format.ts` when a filename matches
+*   either of the two npm lockfile basenames.
+*/
+const PACKAGE_LOCK_FORMAT = require_primordials_object.ObjectFreeze({
+	__proto__: null,
+	ecosystem: "npm",
+	format: "npm",
+	type: "lockfile"
 });
+const PACKAGE_LOCK_FILENAMES = require_primordials_object.ObjectFreeze(["package-lock.json", "npm-shrinkwrap.json"]);
+
+//#endregion
+exports.PACKAGE_LOCK_FILENAMES = PACKAGE_LOCK_FILENAMES;
+exports.PACKAGE_LOCK_FORMAT = PACKAGE_LOCK_FORMAT;

package/dist/eco/npm/npm/parse-git-url.js

@@ -1,43 +1,29 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var parse_git_url_exports = {};
-__export(parse_git_url_exports, {
-  parseGitUrl: () => parseGitUrl
-});
-module.exports = __toCommonJS(parse_git_url_exports);
-var import_string = require("../../../primordials/string");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_string = require('../../../primordials/string.js');
+
+//#region src/eco/npm/npm/parse-git-url.ts
+/**
+* @file `parseGitUrl(resolved)` — extracts `{ url, commit }` from a `resolved`
+*   field on an npm lockfile entry when it points to a git source (`git+…` or
+*   `git://…`). Returns `undefined` when the resolved string is not a git URL.
+*   When the URL has no `#<commit>` suffix, `commit` is `undefined`. Shape
+*   matches socket-btm's smol-manifest internal `parseGitUrl` so smol-vs-JS
+*   consumers see the same output.
+*/
 function parseGitUrl(resolved) {
-  if ((0, import_string.StringPrototypeIndexOf)(resolved, "git+") !== 0 && (0, import_string.StringPrototypeIndexOf)(resolved, "git://") !== 0) {
-    return void 0;
-  }
-  const hashIndex = (0, import_string.StringPrototypeIndexOf)(resolved, "#");
-  if (hashIndex === -1) {
-    return { url: resolved, commit: void 0 };
-  }
-  return {
-    url: (0, import_string.StringPrototypeSlice)(resolved, 0, hashIndex),
-    commit: (0, import_string.StringPrototypeSlice)(resolved, hashIndex + 1)
-  };
+	if (require_primordials_string.StringPrototypeIndexOf(resolved, "git+") !== 0 && require_primordials_string.StringPrototypeIndexOf(resolved, "git://") !== 0) return;
+	const hashIndex = require_primordials_string.StringPrototypeIndexOf(resolved, "#");
+	if (hashIndex === -1) return {
+		url: resolved,
+		commit: void 0
+	};
+	return {
+		url: require_primordials_string.StringPrototypeSlice(resolved, 0, hashIndex),
+		commit: require_primordials_string.StringPrototypeSlice(resolved, hashIndex + 1)
+	};
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  parseGitUrl
-});
+
+//#endregion
+exports.parseGitUrl = parseGitUrl;