@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/dlx/manifest.d.ts

@@ -27,12 +27,12 @@
  */
 export interface PackageDetails {
     installed_version: string;
-    size?: number;
+    size?: number | undefined;
     update_check?: {
         last_check: number;
         last_notification: number;
         latest_known: string;
-    };
+    } | undefined;
 }
 /**
  * Details for binary download entries.
@@ -47,8 +47,8 @@ export interface BinaryDetails {
     size: number;
     source: {
         type: 'download' | 'extract';
-        url?: string;
-        path?: string;
+        url?: string | undefined;
+        path?: string | undefined;
     };
     /**
      * Update check metadata (same structure as packages).
@@ -57,7 +57,7 @@ export interface BinaryDetails {
         last_check: number;
         last_notification: number;
         latest_known: string;
-    };
+    } | undefined;
 }
 /**
  * Unified manifest entry for all cached items (packages and binaries). Shared
@@ -81,7 +81,7 @@ export interface DlxManifestOptions {
     /**
      * Custom manifest file path (defaults to ~/.socket/_dlx/.dlx-manifest.json).
      */
-    manifestPath?: string;
+    manifestPath?: string | undefined;
 }
 /**
  * Type guard for binary entries.

package/dist/dlx/manifest.js

@@ -1,10 +1,10 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../primordials/object.js');
 const require_node_fs = require('../node/fs.js');
 const require_node_path = require('../node/path.js');
 const require_primordials_date = require('../primordials/date.js');
-const require_primordials_object = require('../primordials/object.js');
 const require_primordials_json = require('../primordials/json.js');
 const require_errors_message = require('../errors/message.js');
 const require_logger_default = require('../logger/default.js');
@@ -38,8 +38,8 @@ const require_fs_read_file = require('../fs/read-file.js');
 *   - Binary metadata tracking
 *   - Rate limiting registry requests
 */
-const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-const path = /* @__PURE__ */ require_node_path.getNodePath();
+const fs = require_node_fs.getNodeFs();
+const path = require_node_path.getNodePath();
 const logger = require_logger_default.getDefaultLogger();
 /**
 * Manifest file name.
@@ -92,7 +92,7 @@ var DlxManifest = class {
 	readManifest() {
 		try {
 			if (!fs.existsSync(this.manifestPath)) return { __proto__: null };
-			const rawContent = /* @__PURE__ */ require_fs_read_file.readFileUtf8Sync(this.manifestPath);
+			const rawContent = require_fs_read_file.readFileUtf8Sync(this.manifestPath);
 			const content = (typeof rawContent === "string" ? rawContent : rawContent.toString("utf8")).trim();
 			if (!content) return { __proto__: null };
 			return require_primordials_json.JSONParse(content);
@@ -172,7 +172,7 @@ var DlxManifest = class {
 	getAllPackages() {
 		try {
 			if (!fs.existsSync(this.manifestPath)) return [];
-			const rawContent = /* @__PURE__ */ require_fs_read_file.readFileUtf8Sync(this.manifestPath);
+			const rawContent = require_fs_read_file.readFileUtf8Sync(this.manifestPath);
 			const content = (typeof rawContent === "string" ? rawContent : rawContent.toString("utf8")).trim();
 			if (!content) return [];
 			return require_primordials_object.ObjectKeys(require_primordials_json.JSONParse(content));

package/dist/dlx/package.d.ts

@@ -20,9 +20,9 @@
  *   - dlx/binary.ts: Downloads standalone binaries from URLs
  *   - dlx/package.ts: Installs npm packages from registries Implementation:
  *   - Uses Arborist for package installation (like npx, no npm CLI required)
- *   - Split into downloadPackage() and executePackage() for flexibility
+ *   - Split into downloadNpmPackage() and executePackage() for flexibility
  *   - dlxPackage() combines both for convenience Module shape: this file holds
- *     the three async orchestrators (`dlxPackage`, `downloadPackage`,
+ *     the three async orchestrators (`dlxPackage`, `downloadNpmPackage`,
  *     `ensurePackageInstalled`) and the synchronous `executePackage`. The
  *     supporting surface lives in sibling leaves and is re-exported here so
  *     existing `dlx/package` importers keep working unchanged:
@@ -33,7 +33,7 @@
  *   - lazy `node:fs` / `node:path` + LRU cache — `./_internal`
  */
 import { spawn } from '../process/spawn/child';
-import type { DlxPackageOptions, DlxPackageResult, DownloadPackageResult, EnsurePackageInstallOptions } from './types';
+import type { DlxPackageOptions, DlxPackageResult, DownloadNpmPackageResult, EnsurePackageInstallOptions } from './types';
 import type { SpawnExtra, SpawnOptions } from '../process/spawn/types';
 /**
  * Execute a package via DLX - install if needed and run its binary.
@@ -47,7 +47,7 @@ import type { SpawnExtra, SpawnOptions } from '../process/spawn/types';
  *   ;```typescript
  *   // Download and execute cdxgen
  *   const result = await dlxPackage(['--version'], {
- *     package: '@cyclonedx/cdxgen@10.0.0',
+ *     spec: '@cyclonedx/cdxgen@10.0.0',
  *   })
  *   await result.spawnPromise
  *   ```
@@ -61,15 +61,15 @@ export declare function dlxPackage(args: readonly string[] | string[], options:
  * @example
  *   ;```typescript
  *   // Install @socketsecurity/cli without running it
- *   const result = await downloadPackage({
- *     package: '@socketsecurity/cli@1.2.0',
+ *   const result = await downloadNpmPackage({
+ *     spec: '@socketsecurity/cli@1.2.0',
  *     force: true,
  *   })
  *   console.log('Installed to:', result.packageDir)
  *   console.log('Binary at:', result.binaryPath)
  *   ```
  */
-export declare function downloadPackage(options: DlxPackageOptions): Promise<DownloadPackageResult>;
+export declare function downloadNpmPackage(options: DlxPackageOptions): Promise<DownloadNpmPackageResult>;
 /**
  * Install package to ~/.socket/_dlx/<hash>/ if not already installed. Uses
  * pacote for installation (no npm CLI required). Protected by process lock to
@@ -91,7 +91,7 @@ export declare function ensurePackageInstalled(packageName: string, packageSpec:
 }>;
 /**
  * Execute a package's binary with cross-platform shell handling. The package
- * must already be installed (use downloadPackage first).
+ * must already be installed (use downloadNpmPackage first).
  *
  * On Windows, script files (.bat, .cmd, .ps1) require shell: true. Matches
  * npm/npx execution behavior.
@@ -99,7 +99,7 @@ export declare function ensurePackageInstalled(packageName: string, packageSpec:
  * @example
  *   ;```typescript
  *   // Execute an already-installed package
- *   const downloaded = await downloadPackage({ package: 'cowsay@1.5.0' })
+ *   const downloaded = await downloadNpmPackage({ spec: 'cowsay@1.5.0' })
  *   const result = await executePackage(
  *     downloaded.binaryPath,
  *     ['Hello World'],
@@ -112,4 +112,4 @@ export { binaryPathCacheSet } from './_internal';
 export { findBinaryPath, makePackageBinsExecutable, resolveBinaryPath, } from './binary-resolution';
 export { checkFirewallPurls, npmPurl } from './firewall';
 export { parsePackageSpec } from './spec';
-export type { DlxPackageOptions, DlxPackageResult, DownloadPackageResult, EnsurePackageInstallOptions, } from './types';
+export type { DlxPackageOptions, DlxPackageResult, DownloadNpmPackageResult, EnsurePackageInstallOptions, } from './types';

package/dist/dlx/package.js

@@ -44,9 +44,9 @@ src_external__npmcli_arborist = require_runtime.__toESM(src_external__npmcli_arb
 *   - dlx/binary.ts: Downloads standalone binaries from URLs
 *   - dlx/package.ts: Installs npm packages from registries Implementation:
 *   - Uses Arborist for package installation (like npx, no npm CLI required)
-*   - Split into downloadPackage() and executePackage() for flexibility
+*   - Split into downloadNpmPackage() and executePackage() for flexibility
 *   - dlxPackage() combines both for convenience Module shape: this file holds
-*     the three async orchestrators (`dlxPackage`, `downloadPackage`,
+*     the three async orchestrators (`dlxPackage`, `downloadNpmPackage`,
 *     `ensurePackageInstalled`) and the synchronous `executePackage`. The
 *     supporting surface lives in sibling leaves and is re-exported here so
 *     existing `dlx/package` importers keep working unchanged:
@@ -73,13 +73,17 @@ const rangeOperatorsRegExp = /[~^><=xX* ]|\|\|/;
 *   ;```typescript
 *   // Download and execute cdxgen
 *   const result = await dlxPackage(['--version'], {
-*     package: '@cyclonedx/cdxgen@10.0.0',
+*     spec: '@cyclonedx/cdxgen@10.0.0',
 *   })
 *   await result.spawnPromise
 *   ```
 */
 async function dlxPackage(args, options, spawnExtra) {
-	const downloadResult = await downloadPackage(options);
+	options = {
+		__proto__: null,
+		...options
+	};
+	const downloadResult = await downloadNpmPackage(options);
 	const spawnPromise = executePackage(downloadResult.binaryPath, args, options.spawnOptions, spawnExtra);
 	return {
 		...downloadResult,
@@ -94,16 +98,16 @@ async function dlxPackage(args, options, spawnExtra) {
 * @example
 *   ;```typescript
 *   // Install @socketsecurity/cli without running it
-*   const result = await downloadPackage({
-*     package: '@socketsecurity/cli@1.2.0',
+*   const result = await downloadNpmPackage({
+*     spec: '@socketsecurity/cli@1.2.0',
 *     force: true,
 *   })
 *   console.log('Installed to:', result.packageDir)
 *   console.log('Binary at:', result.binaryPath)
 *   ```
 */
-async function downloadPackage(options) {
-	const { binaryName, force: userForce, hash, installRoot, lockfile, package: packageSpec, yes } = {
+async function downloadNpmPackage(options) {
+	const { binaryName, force: userForce, hash, installRoot, lockfile, spec: packageSpec, yes } = {
 		__proto__: null,
 		...options
 	};
@@ -139,10 +143,10 @@ async function downloadPackage(options) {
 *   ```
 */
 async function ensurePackageInstalled(packageName, packageSpec, force, install) {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
-	const packageDir = /* @__PURE__ */ require_paths_normalize.normalizePath(install?.installRoot ?? path.join(require_paths_socket.getSocketDlxDir(), require_dlx_cache.generateCacheKey(packageSpec)));
-	const installedDir = /* @__PURE__ */ require_paths_normalize.normalizePath(path.join(packageDir, "node_modules", packageName));
+	const fs = require_node_fs.getNodeFs();
+	const path = require_node_path.getNodePath();
+	const packageDir = require_paths_normalize.normalizePath(install?.installRoot ?? path.join(require_paths_socket.getSocketDlxDir(), require_dlx_cache.generateCacheKey(packageSpec)));
+	const installedDir = require_paths_normalize.normalizePath(path.join(packageDir, "node_modules", packageName));
 	try {
 		await require_fs_safe.safeMkdir(packageDir);
 	} catch (e) {
@@ -200,7 +204,7 @@ async function ensurePackageInstalled(packageName, packageSpec, force, install)
 			const code = e?.code;
 			if (code === "E404" || code === "ETARGET") throw new require_primordials_error.ErrorCtor(`Package not found: ${packageSpec}\nVerify the package exists on npm registry and check the version.
 Visit https://www.npmjs.com/package/${packageName} to see available versions.`, { cause: e });
-			if (code === "ENOTFOUND" || code === "ETIMEDOUT" || code === "EAI_AGAIN") throw new require_primordials_error.ErrorCtor(`Network error installing ${packageSpec}\nCheck your internet connection and try again.`, { cause: e });
+			if (code === "EAI_AGAIN" || code === "ENOTFOUND" || code === "ETIMEDOUT") throw new require_primordials_error.ErrorCtor(`Network error installing ${packageSpec}\nCheck your internet connection and try again.`, { cause: e });
 			throw new require_primordials_error.ErrorCtor(`Failed to install package: ${packageSpec}\nDestination: ${installedDir}\nCheck npm registry connectivity or package name.`, { cause: e });
 		}
 		return {
@@ -214,7 +218,7 @@ Visit https://www.npmjs.com/package/${packageName} to see available versions.`,
 }
 /**
 * Execute a package's binary with cross-platform shell handling. The package
-* must already be installed (use downloadPackage first).
+* must already be installed (use downloadNpmPackage first).
 *
 * On Windows, script files (.bat, .cmd, .ps1) require shell: true. Matches
 * npm/npx execution behavior.
@@ -222,7 +226,7 @@ Visit https://www.npmjs.com/package/${packageName} to see available versions.`,
 * @example
 *   ;```typescript
 *   // Execute an already-installed package
-*   const downloaded = await downloadPackage({ package: 'cowsay@1.5.0' })
+*   const downloaded = await downloadNpmPackage({ spec: 'cowsay@1.5.0' })
 *   const result = await executePackage(
 *     downloaded.binaryPath,
 *     ['Hello World'],
@@ -241,7 +245,7 @@ function executePackage(binaryPath, args, spawnOptions, spawnExtra) {
 exports.binaryPathCacheSet = require_dlx__internal.binaryPathCacheSet;
 exports.checkFirewallPurls = require_dlx_firewall.checkFirewallPurls;
 exports.dlxPackage = dlxPackage;
-exports.downloadPackage = downloadPackage;
+exports.downloadNpmPackage = downloadNpmPackage;
 exports.ensurePackageInstalled = ensurePackageInstalled;
 exports.executePackage = executePackage;
 exports.findBinaryPath = require_dlx_binary_resolution.findBinaryPath;

package/dist/dlx/packages.js

@@ -24,7 +24,7 @@ const require_fs_read_dir = require('../fs/read-dir.js');
 *   ```
 */
 function isDlxPackageInstalled(packageName) {
-	return (/* @__PURE__ */ require_node_fs.getNodeFs()).existsSync(require_dlx_paths.getDlxInstalledPackageDir(packageName));
+	return require_node_fs.getNodeFs().existsSync(require_dlx_paths.getDlxInstalledPackageDir(packageName));
 }
 /**
 * List all packages installed in DLX.
@@ -37,7 +37,7 @@ function isDlxPackageInstalled(packageName) {
 */
 function listDlxPackages() {
 	try {
-		return /* @__PURE__ */ require_fs_read_dir.readDirNamesSync(require_paths_socket.getSocketDlxDir(), { sort: true });
+		return require_fs_read_dir.readDirNamesSync(require_paths_socket.getSocketDlxDir(), { sort: true });
 	} catch {
 		return [];
 	}
@@ -52,9 +52,9 @@ function listDlxPackages() {
 *   ```
 */
 async function listDlxPackagesAsync() {
-	const fs = /* @__PURE__ */ require_node_fs.getNodeFs();
+	const fs = require_node_fs.getNodeFs();
 	try {
-		return require_primordials_array.ArrayPrototypeFilter(await fs.promises.readdir(require_paths_socket.getSocketDlxDir(), { withFileTypes: true }), (e) => e.isDirectory()).map((e) => e.name).sort();
+		return require_primordials_array.ArrayPrototypeFilter(await fs.promises.readdir(require_paths_socket.getSocketDlxDir(), { withFileTypes: true }), (e) => e.isDirectory()).map((e) => e.name).toSorted();
 	} catch {
 		return [];
 	}

package/dist/dlx/paths.js

@@ -19,7 +19,7 @@ const require_paths_socket = require('../paths/socket.js');
 *   ```
 */
 function getDlxInstalledPackageDir(packageName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getDlxPackageNodeModulesDir(packageName), packageName));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getDlxPackageNodeModulesDir(packageName), packageName));
 }
 /**
 * Get the DLX installation directory for a specific package.
@@ -30,7 +30,7 @@ function getDlxInstalledPackageDir(packageName) {
 *   ```
 */
 function getDlxPackageDir(packageName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(require_paths_socket.getSocketDlxDir(), packageName));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(require_paths_socket.getSocketDlxDir(), packageName));
 }
 /**
 * Get the package.json path for a DLX installed package.
@@ -41,7 +41,7 @@ function getDlxPackageDir(packageName) {
 *   ```
 */
 function getDlxPackageJsonPath(packageName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getDlxInstalledPackageDir(packageName), "package.json"));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getDlxInstalledPackageDir(packageName), "package.json"));
 }
 /**
 * Get the node_modules directory for a DLX package installation.
@@ -52,7 +52,7 @@ function getDlxPackageJsonPath(packageName) {
 *   ```
 */
 function getDlxPackageNodeModulesDir(packageName) {
-	return /* @__PURE__ */ require_paths_normalize.normalizePath((/* @__PURE__ */ require_node_path.getNodePath()).join(getDlxPackageDir(packageName), "node_modules"));
+	return require_paths_normalize.normalizePath(require_node_path.getNodePath().join(getDlxPackageDir(packageName), "node_modules"));
 }
 /**
 * Check if a file path is within the Socket DLX directory. This is useful for
@@ -71,9 +71,9 @@ function getDlxPackageNodeModulesDir(packageName) {
 */
 function isInSocketDlx(filePath) {
 	if (!filePath) return false;
-	const path = /* @__PURE__ */ require_node_path.getNodePath();
-	const dlxDir = /* @__PURE__ */ require_paths_normalize.normalizePath(require_paths_socket.getSocketDlxDir());
-	return require_primordials_string.StringPrototypeStartsWith(/* @__PURE__ */ require_paths_normalize.normalizePath(path.resolve(filePath)), `${dlxDir}/`);
+	const path = require_node_path.getNodePath();
+	const dlxDir = require_paths_normalize.normalizePath(require_paths_socket.getSocketDlxDir());
+	return require_primordials_string.StringPrototypeStartsWith(require_paths_normalize.normalizePath(path.resolve(filePath)), `${dlxDir}/`);
 }
 
 //#endregion

package/dist/dlx/spec.js

@@ -32,7 +32,7 @@ function parsePackageSpec(spec) {
 	try {
 		/* c8 ignore next - External npm-package-arg call */
 		const parsed = (0, src_external_npm_package_arg.default)(spec);
-		const version = parsed.type === "tag" ? parsed.fetchSpec : parsed.type === "version" || parsed.type === "range" ? parsed.fetchSpec : void 0;
+		const version = parsed.type === "tag" ? parsed.fetchSpec : parsed.type === "range" || parsed.type === "version" ? parsed.fetchSpec : void 0;
 		return {
 			name: parsed.name || spec,
 			version

package/dist/dlx/types.d.ts

@@ -3,20 +3,16 @@
  *   of `dlx/package.ts` so consumers can import these types without pulling in
  *   the implementation.
  *
- *   - `DownloadPackageResult` — what `downloadPackage` returns
+ *   - `DownloadNpmPackageResult` — what `downloadNpmPackage` returns
  *   - `EnsurePackageInstallOptions` — shared install-pinning options
- *   - `DlxPackageOptions` — full options for `dlxPackage` / `downloadPackage`
+ *   - `DlxPackageOptions` — full options for `dlxPackage` / `downloadNpmPackage`
  *   - `DlxPackageResult` — what `dlxPackage` returns
  */
 import type { HashSpec } from '../integrity';
 import type { LockfileSpec } from './lockfile';
 import type { spawn } from '../process/spawn/child';
 import type { SpawnOptions } from '../process/spawn/types';
-export interface DownloadPackageResult {
-    /**
-     * Path to the installed package directory.
-     */
-    packageDir: string;
+export interface DownloadNpmPackageResult {
     /**
      * Path to the binary.
      */
@@ -25,6 +21,10 @@ export interface DownloadPackageResult {
      * Whether the package was newly installed.
      */
     installed: boolean;
+    /**
+     * Path to the installed package directory.
+     */
+    packageDir: string;
 }
 /**
  * Shared install-pinning options used by both {@link DlxPackageOptions} and the
@@ -80,38 +80,30 @@ export interface EnsurePackageInstallOptions {
     lockfile?: LockfileSpec | undefined;
 }
 export interface DlxPackageOptions extends EnsurePackageInstallOptions {
-    /**
-     * Package to install (e.g., '@cyclonedx/cdxgen@10.0.0'). Aligns with npx
-     * --package flag.
-     */
-    package: string;
     /**
      * Binary name to execute (optional - auto-detected in most cases).
      *
-     * Auto-detection logic: 1. If package has only one binary, uses it
+     * Auto-detection logic: 1. If the package has only one binary, uses it
      * automatically 2. Tries user-provided binaryName 3. Tries last segment of
-     * package name (e.g., 'cli' from '@socketsecurity/cli') 4. Falls back to
+     * the package name (e.g., 'cli' from '@socketsecurity/cli') 4. Falls back to
      * first binary.
      *
-     * Only needed when package has multiple binaries and auto-detection fails.
+     * Only needed when the package has multiple binaries and auto-detection
+     * fails.
      *
      * @example
      *   // Auto-detected (single binary)
-     *   { package: '@socketsecurity/cli' }  // Finds 'socket' binary automatically
+     *   { spec: '@socketsecurity/cli' }  // Finds 'socket' binary automatically
      *
      *   // Explicit (multiple binaries)
-     *   { package: 'some-tool', binaryName: 'specific-tool' }
+     *   { spec: 'some-tool', binaryName: 'specific-tool' }
      */
     binaryName?: string | undefined;
     /**
-     * Force reinstallation even if package exists. Aligns with npx --yes/-y flag
-     * behavior.
+     * Force reinstallation even if the package exists. Aligns with npx --yes/-y
+     * flag behavior.
      */
     force?: boolean | undefined;
-    /**
-     * Skip confirmation prompts (auto-approve). Aligns with npx --yes/-y flag.
-     */
-    yes?: boolean | undefined;
     /**
      * Suppress output (quiet mode). Aligns with npx --quiet/-q and pnpm
      * --silent/-s flags.
@@ -121,12 +113,17 @@ export interface DlxPackageOptions extends EnsurePackageInstallOptions {
      * Additional spawn options for the execution.
      */
     spawnOptions?: SpawnOptions | undefined;
-}
-export interface DlxPackageResult {
     /**
-     * Path to the installed package directory.
+     * Package spec to install (e.g., '@cyclonedx/cdxgen@10.0.0'). Aligns with npx
+     * --package flag. Named `spec` to match `downloadPipPackage({ spec })`.
      */
-    packageDir: string;
+    spec: string;
+    /**
+     * Skip confirmation prompts (auto-approve). Aligns with npx --yes/-y flag.
+     */
+    yes?: boolean | undefined;
+}
+export interface DlxPackageResult {
     /**
      * Path to the binary that was executed.
      */
@@ -135,6 +132,10 @@ export interface DlxPackageResult {
      * Whether the package was newly installed.
      */
     installed: boolean;
+    /**
+     * Path to the installed package directory.
+     */
+    packageDir: string;
     /**
      * The spawn promise for the running process.
      */

package/dist/eco/cargo/parse-lockfile.d.ts

@@ -27,7 +27,7 @@
  *      (parseCargoLock)
  *   4. **Cargo's own lockfile encoder** — the source of truth for the format we're
  *      parsing:
- *      https://github.com/rust-lang/cargo/blob/master/src/cargo/core/resolver/encode.rs
+ *      https://github.com/rust-lang/cargo/blob/0.86.0/src/cargo/core/resolver/encode.rs
  *      Lockfile format docs:
  *      https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html
  *      https://doc.rust-lang.org/cargo/reference/resolver.html#lockfile-format
@@ -40,7 +40,7 @@
  *     test/fixtures/sdxgen-bug-regressions/ cargo-patch-unused-no-leak/.
  */
 import type { PackageRef, ParsedLockfile } from '../manifest/types';
-type PackageIndex = Record<string, number | number[]>;
+export type PackageIndex = Record<string, number | number[]>;
 export interface CargoEntryState {
     name: string;
     version: string;
@@ -81,4 +81,3 @@ export declare function stripTomlString(value: string): string;
  */
 export declare function valueAfterEquals(line: string): string;
 export declare const parseCargoLock: (content: string) => ParsedLockfile;
-export {};

package/dist/eco/cargo/parse-lockfile.js

@@ -1,9 +1,9 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_object = require('../../primordials/object.js');
 const require_primordials_string = require('../../primordials/string.js');
 const require_primordials_array = require('../../primordials/array.js');
-const require_primordials_object = require('../../primordials/object.js');
 
 //#region src/eco/cargo/parse-lockfile.ts
 /**
@@ -35,7 +35,7 @@ const require_primordials_object = require('../../primordials/object.js');
 *      (parseCargoLock)
 *   4. **Cargo's own lockfile encoder** — the source of truth for the format we're
 *      parsing:
-*      https://github.com/rust-lang/cargo/blob/master/src/cargo/core/resolver/encode.rs
+*      https://github.com/rust-lang/cargo/blob/0.86.0/src/cargo/core/resolver/encode.rs
 *      Lockfile format docs:
 *      https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html
 *      https://doc.rust-lang.org/cargo/reference/resolver.html#lockfile-format
@@ -100,7 +100,7 @@ function jsParseCargoLock(content) {
 		const trimmed = require_primordials_string.StringPrototypeTrim(line);
 		if (trimmed.length === 0 || trimmed[0] === "#") continue;
 		if (trimmed[0] === "[") {
-			if (currentEntry && currentEntry.name) {
+			if (currentEntry?.name) {
 				require_primordials_array.ArrayPrototypePush(packages, freezeCargoEntry(currentEntry));
 				addToCargoIndex(packageIndex, currentEntry.name, packages.length - 1);
 			}
@@ -131,7 +131,7 @@ function jsParseCargoLock(content) {
 			}
 		} else if (require_primordials_string.StringPrototypeIndexOf(trimmed, "version") === 0) lockVersion = stripTomlString(valueAfterEquals(trimmed));
 	}
-	if (currentEntry && currentEntry.name) {
+	if (currentEntry?.name) {
 		require_primordials_array.ArrayPrototypePush(packages, freezeCargoEntry(currentEntry));
 		addToCargoIndex(packageIndex, currentEntry.name, packages.length - 1);
 	}
@@ -180,7 +180,7 @@ function parseInlineArray(value) {
 	const result = [];
 	let i = 0;
 	while (i < inner.length) {
-		while (i < inner.length && (inner[i] === " " || inner[i] === "	" || inner[i] === ",")) i++;
+		while (i < inner.length && (inner[i] === "	" || inner[i] === " " || inner[i] === ",")) i++;
 		if (i >= inner.length) break;
 		if (require_primordials_string.StringPrototypeCharCodeAt(inner, i) === 34) {
 			const closeIdx = require_primordials_string.StringPrototypeIndexOf(inner, "\"", i + 1);

package/dist/eco/manifest/analyze-lockfile.js

@@ -42,8 +42,8 @@ function jsAnalyzeLockfile(lockfile) {
 		avgDepth: 0
 	});
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const analyzeLockfile = _smol ? _smol.analyzeLockfile : jsAnalyzeLockfile;
+const smol = require_smol_manifest.getSmolManifest();
+const analyzeLockfile = smol ? smol.analyzeLockfile : jsAnalyzeLockfile;
 
 //#endregion
 exports.analyzeLockfile = analyzeLockfile;

package/dist/eco/manifest/detect-format.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_string = require('../../primordials/string.js');
 const require_primordials_object = require('../../primordials/object.js');
+const require_primordials_string = require('../../primordials/string.js');
 const require_smol_manifest = require('../../smol/manifest.js');
 const require_eco_cargo_lockfile_format = require('../cargo/lockfile-format.js');
 const require_eco_cargo_manifest_format = require('../cargo/manifest-format.js');
@@ -34,7 +34,7 @@ const COMPOSER_LOCK_FORMAT = require_primordials_object.ObjectFreeze({
 	format: "composer",
 	type: "lockfile"
 });
-const _jsSupportedFiles = require_primordials_object.ObjectFreeze({
+const jsSupportedFiles = require_primordials_object.ObjectFreeze({
 	__proto__: null,
 	manifests: require_primordials_object.ObjectFreeze([
 		require_eco_npm_manifest_format.PACKAGE_JSON_FILENAME,
@@ -64,9 +64,9 @@ function jsDetectFormat(filename) {
 		default: return;
 	}
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const detectFormat = _smol?.detectFormat ?? jsDetectFormat;
-const supportedFiles = _smol?.supportedFiles ?? _jsSupportedFiles;
+const smol = require_smol_manifest.getSmolManifest();
+const detectFormat = smol?.detectFormat ?? jsDetectFormat;
+const supportedFiles = smol?.supportedFiles ?? jsSupportedFiles;
 
 //#endregion
 exports.detectFormat = detectFormat;

package/dist/eco/manifest/find-packages.js

@@ -35,8 +35,8 @@ function jsFindPackages(lockfile, pattern) {
 	}
 	return result;
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const findPackages = _smol ? _smol.findPackages : jsFindPackages;
+const smol = require_smol_manifest.getSmolManifest();
+const findPackages = smol ? smol.findPackages : jsFindPackages;
 
 //#endregion
 exports.FIND_PACKAGES_PATTERN_MAX_LEN = FIND_PACKAGES_PATTERN_MAX_LEN;

package/dist/eco/manifest/get-package-versions.js

@@ -23,8 +23,8 @@ function jsGetPackageVersions(lockfile, name) {
 	}
 	return result;
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const getPackageVersions = _smol ? _smol.getPackageVersions : jsGetPackageVersions;
+const smol = require_smol_manifest.getSmolManifest();
+const getPackageVersions = smol ? smol.getPackageVersions : jsGetPackageVersions;
 
 //#endregion
 exports.getPackageVersions = getPackageVersions;

package/dist/eco/manifest/get-package.js

@@ -17,8 +17,8 @@ function jsGetPackage(lockfile, name) {
 	if (typeof idx === "number") return lockfile.packages[idx];
 	return lockfile.packages[idx[0]];
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const getPackage = _smol ? _smol.getPackage : jsGetPackage;
+const smol = require_smol_manifest.getSmolManifest();
+const getPackage = smol ? smol.getPackage : jsGetPackage;
 
 //#endregion
 exports.getPackage = getPackage;

package/dist/eco/manifest/parse-lockfile.js

@@ -36,8 +36,8 @@ function sniffLockfileFormat(content) {
 	if (require_primordials_string.StringPrototypeIndexOf(content, "yarn lockfile") !== -1 || require_primordials_string.StringPrototypeIndexOf(content, "__metadata:") !== -1) return "yarn";
 	if (require_primordials_string.StringPrototypeIndexOf(content, "lockfileVersion:") !== -1) return "pnpm";
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
-const parseLockfile = _smol ? (content, ecosystem, format) => _smol.parseLockfile(content, ecosystem, format) : jsParseLockfile;
+const smol = require_smol_manifest.getSmolManifest();
+const parseLockfile = smol ? (content, ecosystem, format) => smol.parseLockfile(content, ecosystem, format) : jsParseLockfile;
 
 //#endregion
 exports.jsParseLockfile = jsParseLockfile;

package/dist/eco/manifest/parse-manifest.js

@@ -20,9 +20,9 @@ function jsParseManifest(content, ecosystem) {
 		default: throw new require_eco_manifest_manifest_error.ManifestError(`Unsupported ecosystem: ${ecosystem}`, "ERR_UNSUPPORTED");
 	}
 }
-const _smol = /* @__PURE__ */ require_smol_manifest.getSmolManifest();
+const smol = require_smol_manifest.getSmolManifest();
 /* c8 ignore start - smol-fallback branch is smol Node binary only. */
-const smolParseManifest = _smol ? (content, ecosystem) => _smol.parseManifest(content, ecosystem) : void 0;
+const smolParseManifest = smol ? (content, ecosystem) => smol.parseManifest(content, ecosystem) : void 0;
 /* c8 ignore stop */
 const parseManifest = smolParseManifest ?? jsParseManifest;