@socketsecurity/lib 6.0.6 → 6.0.7

package/dist/packages/specs.js

@@ -5,14 +5,35 @@ const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_string = require('../primordials/string.js');
 const require_strings_predicates = require('../strings/predicates.js');
 const require_objects_predicates = require('../objects/predicates.js');
+const require_constants_socket = require('../constants/socket.js');
+const require_smol_purl = require('../smol/purl.js');
+let src_external__socketregistry_packageurl_js = require("../external/@socketregistry/packageurl-js");
 let src_external_npm_package_arg = require("../external/npm-package-arg");
 src_external_npm_package_arg = require_runtime.__toESM(src_external_npm_package_arg);
 
 //#region src/packages/specs.ts
 /**
-* @file Package spec parsing and GitHub URL utilities.
+* @file Package spec parsing, name resolution, and GitHub URL utilities.
 */
 /**
+* Get the release tag for a version.
+*
+* @example
+*   ;```typescript
+*   getReleaseTag('lodash@latest') // 'latest'
+*   getReleaseTag('@scope/pkg@beta') // 'beta'
+*   getReleaseTag('lodash') // ''
+*   ```
+*/
+function getReleaseTag(spec) {
+	if (!spec) return "";
+	let atIndex = -1;
+	if (require_primordials_string.StringPrototypeStartsWith(spec, "@")) atIndex = require_primordials_string.StringPrototypeIndexOf(spec, "@", 1);
+	else atIndex = require_primordials_string.StringPrototypeIndexOf(spec, "@");
+	if (atIndex !== -1) return require_primordials_string.StringPrototypeSlice(spec, atIndex + 1);
+	return "";
+}
+/**
 * Extract user and project from GitHub repository URL.
 *
 * @example
@@ -21,9 +42,8 @@ src_external_npm_package_arg = require_runtime.__toESM(src_external_npm_package_
 *   // { user: 'lodash', project: 'lodash' }
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getRepoUrlDetails(repoUrl = "") {
-	const match = /^(?:[a-z][a-z+]*:\/\/)(?:[^/@]+@)?github\.com\/([^?#]+)(?:[?#]|$)/i.exec(repoUrl);
+	const match = /^(?:[a-z][a-z+]*:\/\/)(?:[^/@]+@)?github\.com\/([^?#]+)(?:$|[?#])/i.exec(repoUrl);
 	if (!match || !match[1]) return {
 		user: "",
 		project: ""
@@ -45,7 +65,6 @@ function getRepoUrlDetails(repoUrl = "") {
 *   // 'https://api.github.com/repos/lodash/lodash/git/ref/tags/v4.17.21'
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function gitHubTagRefUrl(user, project, tag) {
 	return `https://api.github.com/repos/${user}/${project}/git/ref/tags/${tag}`;
 }
@@ -58,7 +77,6 @@ function gitHubTagRefUrl(user, project, tag) {
 *   // 'https://github.com/lodash/lodash/archive/abc123.tar.gz'
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function gitHubTgzUrl(user, project, sha) {
 	return `https://github.com/${user}/${project}/archive/${sha}.tar.gz`;
 }
@@ -71,10 +89,9 @@ function gitHubTgzUrl(user, project, sha) {
 *   isGitHubTgzSpec('lodash@4.17.21') // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isGitHubTgzSpec(spec, where) {
 	let parsedSpec;
-	if (/* @__PURE__ */ require_objects_predicates.isPlainObject(spec)) parsedSpec = spec;
+	if (require_objects_predicates.isPlainObject(spec)) parsedSpec = spec;
 	else parsedSpec = (0, src_external_npm_package_arg.default)(spec, where);
 	const typedSpec = parsedSpec;
 	return typedSpec.type === "remote" && !!typedSpec.saveSpec?.endsWith(".tar.gz");
@@ -88,18 +105,64 @@ function isGitHubTgzSpec(spec, where) {
 *   isGitHubUrlSpec('lodash@4.17.21') // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isGitHubUrlSpec(spec, where) {
 	let parsedSpec;
-	if (/* @__PURE__ */ require_objects_predicates.isPlainObject(spec)) parsedSpec = spec;
+	if (require_objects_predicates.isPlainObject(spec)) parsedSpec = spec;
 	else parsedSpec = (0, src_external_npm_package_arg.default)(spec, where);
 	const typedSpec = parsedSpec;
-	return typedSpec.type === "git" && typedSpec.hosted?.domain === "github.com" && /* @__PURE__ */ require_strings_predicates.isNonEmptyString(typedSpec.gitCommittish);
+	return typedSpec.type === "git" && typedSpec.hosted?.domain === "github.com" && require_strings_predicates.isNonEmptyString(typedSpec.gitCommittish);
+}
+/**
+* Slugify an npm package name into a hyphenated identifier suitable for
+* User-Agent tokens, log namespaces, file paths, and other contexts where `@`
+* and `/` are not welcome.
+*
+* @example
+*   ;```typescript
+*   pkgNameToSlug('@socketsecurity/lib') // 'socketsecurity-lib'
+*   pkgNameToSlug('@cyclonedx/cdxgen') // 'cyclonedx-cdxgen'
+*   pkgNameToSlug('lodash') // 'lodash'
+*   ```
+*/
+function pkgNameToSlug(pkgName) {
+	return require_primordials_string.StringPrototypeCharCodeAt(pkgName, 0) === 64 ? `${pkgName.slice(1).replace("/", "-")}` : pkgName;
+}
+/**
+* Resolve full package name from a PURL object with custom delimiter.
+*
+* @example
+*   ;```typescript
+*   resolvePackageName({ name: 'core', namespace: '@babel' }) // '@babel/core'
+*   resolvePackageName({ name: 'lodash' }) // 'lodash'
+*   ```
+*/
+function resolvePackageName(purlObj, delimiter = "/") {
+	const { name, namespace } = purlObj;
+	return `${namespace ? `${namespace}${delimiter}` : ""}${name}`;
+}
+/**
+* Convert npm package name to Socket registry format with delimiter.
+*
+* @example
+*   ;```typescript
+*   resolveRegistryPackageName('@babel/core') // 'babel__core'
+*   resolveRegistryPackageName('lodash') // 'lodash'
+*   ```
+*/
+function resolveRegistryPackageName(pkgName) {
+	const input = `pkg:npm/${pkgName}`;
+	const smolPurl = require_smol_purl.getSmolPurl();
+	const purlObj = smolPurl ? smolPurl.parse(input) : src_external__socketregistry_packageurl_js.PackageURL.fromString(input);
+	return purlObj.namespace ? `${purlObj.namespace.slice(1)}${"__"}${purlObj.name}` : pkgName;
 }
 
 //#endregion
+exports.getReleaseTag = getReleaseTag;
 exports.getRepoUrlDetails = getRepoUrlDetails;
 exports.gitHubTagRefUrl = gitHubTagRefUrl;
 exports.gitHubTgzUrl = gitHubTgzUrl;
 exports.isGitHubTgzSpec = isGitHubTgzSpec;
-exports.isGitHubUrlSpec = isGitHubUrlSpec;
+exports.isGitHubUrlSpec = isGitHubUrlSpec;
+exports.pkgNameToSlug = pkgNameToSlug;
+exports.resolvePackageName = resolvePackageName;
+exports.resolveRegistryPackageName = resolveRegistryPackageName;

package/dist/packages/tarball.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file Package tarball operations: extract a package to a directory and pack a
+ *   spec into a tarball, both via pacote/libnpmpack with the shared packument
+ *   cache.
+ */
+import type { ExtractOptions, PacoteOptions } from './types';
+/**
+ * Extract a package to a destination directory.
+ *
+ * @example
+ *   ;```typescript
+ *   await extractPackage('lodash@4.17.21', { dest: '/tmp/lodash' })
+ *   ```
+ */
+export declare function extractPackage(pkgNameOrId: string, options?: ExtractOptions, callback?: (destPath: string) => Promise<unknown>): Promise<void>;
+/**
+ * Pack a package tarball using pacote.
+ *
+ * @example
+ *   ;```typescript
+ *   const tarball = await packPackage('lodash@4.17.21')
+ *   ```
+ */
+export declare function packPackage(spec: string, options?: PacoteOptions): Promise<unknown>;

package/dist/packages/tarball.js

@@ -0,0 +1,79 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_process_abort = require('../process/abort.js');
+const require_constants_packages = require('../constants/packages.js');
+let src_external_cacache = require("../external/cacache");
+src_external_cacache = require_runtime.__toESM(src_external_cacache);
+let src_external_pacote = require("../external/pacote");
+src_external_pacote = require_runtime.__toESM(src_external_pacote);
+let src_external_libnpmpack = require("../external/libnpmpack");
+src_external_libnpmpack = require_runtime.__toESM(src_external_libnpmpack);
+
+//#region src/packages/tarball.ts
+/**
+* @file Package tarball operations: extract a package to a directory and pack a
+*   spec into a tarball, both via pacote/libnpmpack with the shared packument
+*   cache.
+*/
+const abortSignal = require_process_abort.getAbortSignal();
+const packumentCache = require_constants_packages.getPackumentCache();
+const pacoteCachePath = require_constants_packages.getPacoteCachePath();
+/**
+* Extract a package to a destination directory.
+*
+* @example
+*   ;```typescript
+*   await extractPackage('lodash@4.17.21', { dest: '/tmp/lodash' })
+*   ```
+*/
+async function extractPackage(pkgNameOrId, options, callback) {
+	let actualCallback = callback;
+	let actualOptions = options;
+	if (arguments.length === 2 && typeof options === "function") {
+		actualCallback = options;
+		actualOptions = void 0;
+	}
+	const { dest, tmpPrefix, ...extractOptions_ } = {
+		__proto__: null,
+		...actualOptions
+	};
+	const extractOptions = {
+		packumentCache,
+		preferOffline: true,
+		...extractOptions_
+	};
+	/* c8 ignore start - External package registry extraction */
+	if (typeof dest === "string") {
+		await src_external_pacote.default.extract(pkgNameOrId, dest, extractOptions);
+		if (typeof actualCallback === "function") await actualCallback(dest);
+	} else await src_external_cacache.default.tmp.withTmp(pacoteCachePath, { tmpPrefix }, async (tmpDirPath) => {
+		await src_external_pacote.default.extract(pkgNameOrId, tmpDirPath, extractOptions);
+		if (typeof actualCallback === "function") await actualCallback(tmpDirPath);
+	});
+	/* c8 ignore stop */
+}
+/**
+* Pack a package tarball using pacote.
+*
+* @example
+*   ;```typescript
+*   const tarball = await packPackage('lodash@4.17.21')
+*   ```
+*/
+async function packPackage(spec, options) {
+	/* c8 ignore start - External package registry packing */
+	return await (0, src_external_libnpmpack.default)(spec, {
+		__proto__: null,
+		signal: abortSignal,
+		...options,
+		packumentCache,
+		preferOffline: true
+	});
+	/* c8 ignore stop */
+}
+
+//#endregion
+exports.extractPackage = extractPackage;
+exports.packPackage = packPackage;

package/dist/packages/types.d.ts

@@ -5,10 +5,11 @@
  *   `licenses`. Pure types, no runtime side effects.
  */
 import type { CategoryString } from '../eco/types';
+import type { EditablePackageJsonInstance } from './edit';
 type PackageExports = {
     [path: string]: unknown;
 };
-export type EditablePackageJson = import('./edit').EditablePackageJsonInstance;
+export type EditablePackageJson = EditablePackageJsonInstance;
 /**
  * Extended PackageJson type based on NPMCliPackageJson.Content with
  * Socket-specific additions.
@@ -28,34 +29,34 @@ export type PackageJson = {
     typings?: string | undefined;
     bin?: string | Record<string, string> | undefined;
     author?: string | {
-        name?: string;
-        email?: string;
-        url?: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        url?: string | undefined;
     } | undefined;
     contributors?: Array<string | {
-        name?: string;
-        email?: string;
-        url?: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        url?: string | undefined;
     }> | undefined;
     maintainers?: Array<string | {
-        name?: string;
-        email?: string;
-        url?: string;
+        name?: string | undefined;
+        email?: string | undefined;
+        url?: string | undefined;
     }> | undefined;
     repository?: string | {
-        type?: string;
-        url?: string;
-        directory?: string;
+        type?: string | undefined;
+        url?: string | undefined;
+        directory?: string | undefined;
     } | undefined;
     homepage?: string | undefined;
     bugs?: string | {
-        url?: string;
-        email?: string;
+        url?: string | undefined;
+        email?: string | undefined;
     } | undefined;
     license?: string | undefined;
     licenses?: Array<{
-        type?: string;
-        url?: string;
+        type?: string | undefined;
+        url?: string | undefined;
     }> | undefined;
     scripts?: Record<string, string> | undefined;
     dependencies?: Record<string, string> | undefined;
@@ -80,11 +81,11 @@ export type PackageJson = {
     cpu?: string[] | undefined;
     packageManager?: string | undefined;
     workspaces?: string[] | {
-        packages?: string[];
+        packages?: string[] | undefined;
     } | undefined;
     socket?: {
-        categories?: CategoryString | CategoryString[];
-        interop?: string | string[];
+        categories?: CategoryString | CategoryString[] | undefined;
+        interop?: string | string[] | undefined;
         [key: string]: unknown;
     } | undefined;
 };

package/dist/packages/validation.js

@@ -19,7 +19,6 @@ src_external_validate_npm_package_name = require_runtime.__toESM(src_external_va
 *   isBlessedPackageName('lodash') // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isBlessedPackageName(name) {
 	return typeof name === "string" && (name === "sfw" || name === "socket" || require_primordials_string.StringPrototypeStartsWith(name, "@socketoverride/") || require_primordials_string.StringPrototypeStartsWith(name, "@socketregistry/") || require_primordials_string.StringPrototypeStartsWith(name, "@socketsecurity/"));
 }
@@ -32,7 +31,6 @@ function isBlessedPackageName(name) {
 *   isRegistryFetcherType('git') // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isRegistryFetcherType(type) {
 	return type === "alias" || type === "range" || type === "tag" || type === "version";
 }
@@ -45,7 +43,6 @@ function isRegistryFetcherType(type) {
 *   isValidPackageName('.invalid') // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isValidPackageName(name) {
 	return (0, src_external_validate_npm_package_name.default)(name).validForOldPackages;
 }

package/dist/paths/_internal.d.ts

@@ -8,6 +8,7 @@
  *   - `getUrl` — lazy `node:url` loader
  *   - `pathLikeToString` — `string | Buffer | URL` → `string`
  */
+import type nodeUrl from 'node:url';
 export declare const CHAR_BACKWARD_SLASH = 92;
 export declare const CHAR_COLON = 58;
 export declare const CHAR_FORWARD_SLASH = 47;
@@ -26,7 +27,7 @@ export declare const slashRegExp: RegExp;
  *
  * @private
  */
-export declare function getUrl(): typeof import('node:url');
+export declare function getUrl(): typeof nodeUrl;
 /**
  * Convert a path-like value to a string.
  *

package/dist/paths/_internal.js

@@ -2,20 +2,10 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_primordials_buffer = require('../primordials/buffer.js');
-const require_primordials_string = require('../primordials/string.js');
 const require_constants_platform = require('../constants/platform.js');
+const require_primordials_string = require('../primordials/string.js');
 
 //#region src/paths/_internal.ts
-/**
-* @file Shared internals for the `paths/` module — the leaf-level primitives
-*   every other path leaf depends on. Kept as a single file so `normalize`,
-*   `predicates`, `conversion`, and `resolve` can layer above it without
-*   circular imports.
-*
-*   - char-code constants + shared regexps
-*   - `getUrl` — lazy `node:url` loader
-*   - `pathLikeToString` — `string | Buffer | URL` → `string`
-*/
 const CHAR_BACKWARD_SLASH = 92;
 const CHAR_COLON = 58;
 const CHAR_FORWARD_SLASH = 47;
@@ -23,10 +13,10 @@ const CHAR_LOWERCASE_A = 97;
 const CHAR_LOWERCASE_Z = 122;
 const CHAR_UPPERCASE_A = 65;
 const CHAR_UPPERCASE_Z = 90;
-const msysDriveRegExp = /^\/([a-zA-Z])(\/|$)/;
-const nodeModulesPathRegExp = /(?:^|[/\\])node_modules(?:[/\\]|$)/;
+const msysDriveRegExp = /^\/([a-zA-Z])($|\/)/;
+const nodeModulesPathRegExp = /(?:[/\\]|^)node_modules(?:$|[/\\])/;
 const slashRegExp = /[/\\]/;
-let _url;
+let cachedUrl;
 /**
 * Lazily load the url module.
 *
@@ -35,10 +25,9 @@ let _url;
 *
 * @private
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getUrl() {
-	if (_url === void 0) _url = /*@__PURE__*/ require("node:url");
-	return _url;
+	if (cachedUrl === void 0) cachedUrl = /*@__PURE__*/ require("node:url");
+	return cachedUrl;
 }
 /**
 * Convert a path-like value to a string.
@@ -61,12 +50,11 @@ function getUrl() {
 * @returns {string} The string representation, or empty string for
 *   null/undefined.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function pathLikeToString(pathLike) {
 	if (pathLike === null || pathLike === void 0) return "";
 	if (typeof pathLike === "string") return pathLike;
 	if (require_primordials_buffer.BufferIsBuffer(pathLike)) return pathLike.toString("utf8");
-	const url = /* @__PURE__ */ getUrl();
+	const url = getUrl();
 	if (pathLike instanceof URL) try {
 		return url.fileURLToPath(pathLike);
 	} catch {

package/dist/paths/conversion.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../primordials/string.js');
 const require_constants_platform = require('../constants/platform.js');
+const require_primordials_string = require('../primordials/string.js');
 const require_paths__internal = require('./_internal.js');
 const require_paths_normalize = require('./normalize.js');
 
@@ -34,9 +34,8 @@ const require_paths_normalize = require('./normalize.js');
 *
 * @returns {string} Native Windows path or normalized Unix path
 */
-/*@__NO_SIDE_EFFECTS__*/
 function fromUnixPath(pathLike) {
-	const normalized = /* @__PURE__ */ require_paths_normalize.normalizePath(pathLike);
+	const normalized = require_paths_normalize.normalizePath(pathLike);
 	/* c8 ignore start */
 	if (require_constants_platform.WIN32) return normalized.replace(/\//g, "\\");
 	/* c8 ignore stop */
@@ -59,9 +58,8 @@ function fromUnixPath(pathLike) {
 *
 * @returns {string[]} Array of path segments, or empty array for empty paths
 */
-/*@__NO_SIDE_EFFECTS__*/
 function splitPath(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	if (filepath === "") return [];
 	return filepath.split(require_paths__internal.slashRegExp);
 }
@@ -83,9 +81,8 @@ function splitPath(pathLike) {
 *
 * @returns {string} Unix-style POSIX path
 */
-/*@__NO_SIDE_EFFECTS__*/
 function toUnixPath(pathLike) {
-	const normalized = /* @__PURE__ */ require_paths_normalize.normalizePath(pathLike);
+	const normalized = require_paths_normalize.normalizePath(pathLike);
 	/* c8 ignore start */
 	if (require_constants_platform.WIN32) return normalized.replace(/^([A-Z]):/i, (_, letter) => `/${letter.toLowerCase()}`);
 	/* c8 ignore stop */
@@ -107,9 +104,8 @@ function toUnixPath(pathLike) {
 *
 * @returns {string} The path without leading `./` / `.\`, or unchanged
 */
-/*@__NO_SIDE_EFFECTS__*/
 function trimLeadingDotSlash(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	if (require_primordials_string.StringPrototypeStartsWith(filepath, "./") || require_primordials_string.StringPrototypeStartsWith(filepath, ".\\")) return filepath.slice(2);
 	return filepath;
 }

package/dist/paths/filenames.d.ts

@@ -10,6 +10,5 @@ export declare const README_MD = "README.md";
 export declare const CHANGELOG_MD = "CHANGELOG.md";
 export declare const MANIFEST_JSON = "manifest.json";
 export declare const EXTENSIONS_JSON = "extensions.json";
-export declare const ESLINT_CONFIG_JS = "eslint.config.js";
 export declare const GITIGNORE = ".gitignore";
 export declare const DOT_PACKAGE_LOCK_JSON = ".package-lock.json";

package/dist/paths/filenames.js

@@ -15,14 +15,12 @@ const README_MD = "README.md";
 const CHANGELOG_MD = "CHANGELOG.md";
 const MANIFEST_JSON = "manifest.json";
 const EXTENSIONS_JSON = "extensions.json";
-const ESLINT_CONFIG_JS = "eslint.config.js";
 const GITIGNORE = ".gitignore";
 const DOT_PACKAGE_LOCK_JSON = ".package-lock.json";
 
 //#endregion
 exports.CHANGELOG_MD = CHANGELOG_MD;
 exports.DOT_PACKAGE_LOCK_JSON = DOT_PACKAGE_LOCK_JSON;
-exports.ESLINT_CONFIG_JS = ESLINT_CONFIG_JS;
 exports.EXTENSIONS_JSON = EXTENSIONS_JSON;
 exports.GITIGNORE = GITIGNORE;
 exports.LICENSE = LICENSE;

package/dist/paths/normalize.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../primordials/string.js');
 const require_constants_platform = require('../constants/platform.js');
+const require_primordials_string = require('../primordials/string.js');
 const require_strings_search = require('../strings/search.js');
 const require_paths__internal = require('./_internal.js');
 const require_paths_conversion = require('./conversion.js');
@@ -59,9 +59,8 @@ function msysDriveToNative(normalized) {
 * (HTTP requests, file uploads, URL parameters), you MUST validate for path traversal
 * attacks BEFORE calling this function.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function normalizePath(pathLike) {
-	const filepath = /* @__PURE__ */ require_paths__internal.pathLikeToString(pathLike);
+	const filepath = require_paths__internal.pathLikeToString(pathLike);
 	const { length } = filepath;
 	if (length === 0) return ".";
 	if (length < 2) return length === 1 && require_primordials_string.StringPrototypeCharCodeAt(filepath, 0) === 92 ? "/" : filepath;
@@ -115,7 +114,7 @@ function normalizePath(pathLike) {
 		}
 		if (start) prefix = "/";
 	}
-	let nextIndex = /* @__PURE__ */ require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
+	let nextIndex = require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
 	/* c8 ignore start */
 	if (nextIndex === -1) {
 		const segment = filepath.slice(start);
@@ -164,7 +163,7 @@ function normalizePath(pathLike) {
 			start += 1;
 			code = require_primordials_string.StringPrototypeCharCodeAt(filepath, start);
 		}
-		nextIndex = /* @__PURE__ */ require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
+		nextIndex = require_strings_search.search(filepath, require_paths__internal.slashRegExp, { fromIndex: start });
 	}
 	const lastSegment = filepath.slice(start);
 	if (lastSegment.length > 0 && lastSegment !== ".") if (lastSegment === "..") {

package/dist/paths/packages.js

@@ -14,25 +14,22 @@ const require_node_path = require('../node/path.js');
 * POSIX and Windows-style separators so paths captured on either platform
 * classify the same regardless of the host we're running on.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isPackageJsonFile(filepath) {
 	return filepath === "package.json" || require_primordials_string.StringPrototypeEndsWith(filepath, "/package.json") || require_primordials_string.StringPrototypeEndsWith(filepath, "\\package.json");
 }
 /**
 * Resolve directory path from a package.json file path.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function resolvePackageJsonDirname(filepath) {
-	if (/* @__PURE__ */ isPackageJsonFile(filepath)) return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).dirname(filepath));
-	return /* @__PURE__ */ require_paths_normalize.normalizePath(filepath);
+	if (isPackageJsonFile(filepath)) return require_paths_normalize.normalizePath(require_node_path.getNodePath().dirname(filepath));
+	return require_paths_normalize.normalizePath(filepath);
 }
 /**
 * Resolve full path to package.json from a directory or file path.
 */
-/*@__NO_SIDE_EFFECTS__*/
 function resolvePackageJsonPath(filepath) {
-	if (/* @__PURE__ */ isPackageJsonFile(filepath)) return /* @__PURE__ */ require_paths_normalize.normalizePath(filepath);
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(filepath, "package.json"));
+	if (isPackageJsonFile(filepath)) return require_paths_normalize.normalizePath(filepath);
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(filepath, "package.json"));
 }
 
 //#endregion