@socketsecurity/lib 6.0.6 → 6.0.8

package/dist/objects/predicates.js

@@ -1,8 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_primordials_object = require('../primordials/object.js');
 const require_arrays_predicates = require('../arrays/predicates.js');
+const require_primordials_object = require('../primordials/object.js');
 
 //#region src/objects/predicates.ts
 /**
@@ -31,7 +31,6 @@ const require_arrays_predicates = require('../arrays/predicates.js');
 *
 * @returns `true` if obj has enumerable own properties, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function hasKeys(obj) {
 	if (obj === null || obj === void 0) return false;
 	for (const key in obj) if (require_primordials_object.ObjectHasOwn(obj, key)) return true;
@@ -58,7 +57,6 @@ function hasKeys(obj) {
 *
 * @returns `true` if obj has the property as an own property, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function hasOwn(obj, propKey) {
 	if (obj === null || obj === void 0) return false;
 	return require_primordials_object.ObjectHasOwn(obj, propKey);
@@ -83,7 +81,6 @@ function hasOwn(obj, propKey) {
 *
 * @returns `true` if value is an object (including arrays), `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isObject(value) {
 	return value !== null && typeof value === "object";
 }
@@ -107,7 +104,6 @@ function isObject(value) {
 *
 * @returns `true` if value is a plain object, `false` otherwise
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isPlainObject(value) {
 	if (value === null || typeof value !== "object" || require_arrays_predicates.isArray(value)) return false;
 	const proto = require_primordials_object.ObjectGetPrototypeOf(value);

package/dist/objects/sort.js

@@ -35,11 +35,10 @@ const require_sorts_natural = require('../sorts/natural.js');
 *
 * @returns Negative if a < b, positive if a > b, zero if equal
 */
-/*@__NO_SIDE_EFFECTS__*/
 function entryKeyComparator(a, b) {
 	const keyA = a[0];
 	const keyB = b[0];
-	return /* @__PURE__ */ require_sorts_natural.localeCompare(typeof keyA === "string" ? keyA : String(keyA), typeof keyB === "string" ? keyB : String(keyB));
+	return require_sorts_natural.localeCompare(typeof keyA === "string" ? keyA : String(keyA), typeof keyB === "string" ? keyB : String(keyB));
 }
 /**
 * Get all own property entries (key-value pairs) from an object.
@@ -58,7 +57,6 @@ function entryKeyComparator(a, b) {
 *
 * @returns Array of [key, value] tuples, or empty array for null/undefined
 */
-/*@__NO_SIDE_EFFECTS__*/
 function objectEntries(obj) {
 	if (obj === null || obj === void 0) return [];
 	const keys = require_primordials_reflect.ReflectOwnKeys(obj);
@@ -87,9 +85,8 @@ function objectEntries(obj) {
 *
 * @returns A new object with sorted keys
 */
-/*@__NO_SIDE_EFFECTS__*/
 function toSortedObject(obj) {
-	return /* @__PURE__ */ toSortedObjectFromEntries(/* @__PURE__ */ objectEntries(obj));
+	return toSortedObjectFromEntries(objectEntries(obj));
 }
 /**
 * Create an object from entries with sorted keys.
@@ -112,14 +109,13 @@ function toSortedObject(obj) {
 *
 * @returns A new object with sorted keys
 */
-/*@__NO_SIDE_EFFECTS__*/
 function toSortedObjectFromEntries(entries) {
 	const otherEntries = [];
 	const symbolEntries = [];
 	for (const entry of entries) if (typeof entry[0] === "symbol") symbolEntries.push(entry);
 	else otherEntries.push(entry);
 	if (!otherEntries.length && !symbolEntries.length) return {};
-	return require_primordials_object.ObjectFromEntries([...symbolEntries.sort(entryKeyComparator), ...otherEntries.sort(entryKeyComparator)]);
+	return require_primordials_object.ObjectFromEntries([...symbolEntries.toSorted(entryKeyComparator), ...otherEntries.toSorted(entryKeyComparator)]);
 }
 
 //#endregion

package/dist/packages/edit-class.d.ts

@@ -1,7 +1,7 @@
 /**
  * @file The `EditablePackageJson` class factory. Split out of
  *   `packages/edit.ts` for size hygiene. Wraps `@npmcli/package-json` with
- *   Socket-specific knobs: path tracking, a `_canSave` guard for content-only
+ *   Socket-specific knobs: path tracking, a `canSave` guard for content-only
  *   instances, async + sync save paths that honor `EditablePackageJsonOptions`
  *   formatting.
  *
@@ -14,7 +14,7 @@ import type { EditablePackageJsonInstance } from './edit';
  * class. Not exported because consumers go through
  * `getEditablePackageJsonClass()`.
  */
-interface EditablePackageJsonConstructor {
+export interface EditablePackageJsonConstructor {
     new (): EditablePackageJsonInstance;
     fixSteps: unknown[];
     normalizeSteps: unknown[];
@@ -36,4 +36,3 @@ interface EditablePackageJsonConstructor {
  *   ```
  */
 export declare function getEditablePackageJsonClass(): EditablePackageJsonConstructor;
-export {};

package/dist/packages/edit-class.js

@@ -18,13 +18,13 @@ let src_external__npmcli_package_json_lib_sort = require("../external/@npmcli/pa
 /**
 * @file The `EditablePackageJson` class factory. Split out of
 *   `packages/edit.ts` for size hygiene. Wraps `@npmcli/package-json` with
-*   Socket-specific knobs: path tracking, a `_canSave` guard for content-only
+*   Socket-specific knobs: path tracking, a `canSave` guard for content-only
 *   instances, async + sync save paths that honor `EditablePackageJsonOptions`
 *   formatting.
 *
 *   - `getEditablePackageJsonClass` — lazy class accessor (Webpack-safe)
 */
-let _EditablePackageJsonClass;
+let cachedEditablePackageJsonClass;
 /**
 * Get the EditablePackageJson class for package.json manipulation.
 *
@@ -35,37 +35,36 @@ let _EditablePackageJsonClass;
 *   console.log(pkg.content.name)
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getEditablePackageJsonClass() {
-	if (_EditablePackageJsonClass === void 0) _EditablePackageJsonClass = class EditablePackageJson extends src_external__npmcli_package_json.default {
+	if (cachedEditablePackageJsonClass === void 0) cachedEditablePackageJsonClass = class EditablePackageJson extends src_external__npmcli_package_json.default {
 		static fixSteps = src_external__npmcli_package_json.default.fixSteps;
 		static normalizeSteps = src_external__npmcli_package_json.default.normalizeSteps;
 		static prepareSteps = src_external__npmcli_package_json.default.prepareSteps;
-		_canSave = true;
-		_path = void 0;
-		_readFileContent = "";
-		_readFileJson = void 0;
+		canSave = true;
+		pkgPath = void 0;
+		readFileContent = "";
+		readFileJson = void 0;
 		get content() {
 			return super.content;
 		}
 		get filename() {
-			const path = this._path;
-			if (!path) return "";
-			if (require_primordials_string.StringPrototypeEndsWith(path, "package.json")) return path;
-			return (/* @__PURE__ */ require_node_path.getNodePath()).join(path, "package.json");
+			const pkgPath = this.pkgPath;
+			if (!pkgPath) return "";
+			if (require_primordials_string.StringPrototypeEndsWith(pkgPath, "package.json")) return pkgPath;
+			return require_node_path.getNodePath().join(pkgPath, "package.json");
 		}
 		static async create(path, opts = {}) {
-			const p = new _EditablePackageJsonClass();
+			const p = new cachedEditablePackageJsonClass();
 			await p.create(path);
 			return opts.data ? p.update(opts.data) : p;
 		}
-		static async fix(path, opts) {
-			const p = new _EditablePackageJsonClass();
+		static async fix(path, options) {
+			const p = new cachedEditablePackageJsonClass();
 			await p.load(path, true);
-			return await p.fix(opts);
+			return await p.fix(options);
 		}
 		static async load(path, opts = {}) {
-			const p = new _EditablePackageJsonClass();
+			const p = new cachedEditablePackageJsonClass();
 			if (!opts.create) return await p.load(path);
 			try {
 				return await p.load(path);
@@ -74,19 +73,19 @@ function getEditablePackageJsonClass() {
 				return p.create(path);
 			}
 		}
-		static async normalize(path, opts) {
-			const p = new _EditablePackageJsonClass();
+		static async normalize(path, options) {
+			const p = new cachedEditablePackageJsonClass();
 			await p.load(path);
-			return await p.normalize(opts);
+			return await p.normalize(options);
 		}
-		static async prepare(path, opts) {
-			const p = new _EditablePackageJsonClass();
+		static async prepare(path, options) {
+			const p = new cachedEditablePackageJsonClass();
 			await p.load(path, true);
-			return await p.prepare(opts);
+			return await p.prepare(options);
 		}
 		create(path) {
 			super.create(path);
-			this._path = path;
+			this.pkgPath = path;
 			return this;
 		}
 		async fix(opts = {}) {
@@ -95,7 +94,7 @@ function getEditablePackageJsonClass() {
 		}
 		fromContent(data) {
 			super.fromContent(data);
-			this._canSave = false;
+			this.canSave = false;
 			return this;
 		}
 		fromJSON(data) {
@@ -103,17 +102,17 @@ function getEditablePackageJsonClass() {
 			return this;
 		}
 		async load(path, create) {
-			this._path = path;
-			const { promises: fsPromises } = /* @__PURE__ */ require_node_fs.getNodeFs();
+			this.pkgPath = path;
+			const { promises: fsPromises } = require_node_fs.getNodeFs();
 			let parseErr;
 			try {
-				this._readFileContent = await (0, src_external__npmcli_package_json_lib_read_package.read)(this.filename);
+				this.readFileContent = await (0, src_external__npmcli_package_json_lib_read_package.read)(this.filename);
 			} catch (e) {
 				if (!create) throw e;
 				parseErr = e;
 			}
 			if (parseErr) {
-				const indexFile = (/* @__PURE__ */ require_node_path.getNodePath()).resolve(this.path || "", "index.js");
+				const indexFile = require_node_path.getNodePath().resolve(this.path || "", "index.js");
 				let indexFileContent;
 				try {
 					indexFileContent = await fsPromises.readFile(indexFile, "utf8");
@@ -125,11 +124,11 @@ function getEditablePackageJsonClass() {
 				} catch {
 					throw parseErr;
 				}
-				this._canSave = false;
+				this.canSave = false;
 				return this;
 			}
-			this.fromJSON(this._readFileContent);
-			this._readFileJson = (0, src_external__npmcli_package_json_lib_read_package.parse)(this._readFileContent);
+			this.fromJSON(this.readFileContent);
+			this.readFileJson = (0, src_external__npmcli_package_json_lib_read_package.parse)(this.readFileContent);
 			return this;
 		}
 		async normalize(opts = {}) {
@@ -137,42 +136,47 @@ function getEditablePackageJsonClass() {
 			return this;
 		}
 		get path() {
-			return this._path;
+			return this.pkgPath;
 		}
 		async prepare(opts = {}) {
 			await super.prepare(opts);
 			return this;
 		}
 		async save(options) {
-			if (!this._canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No package.json to save to");
-			if (!require_json_format.shouldSave(this.content, this._readFileJson, this._readFileContent, {
+			options = {
+				__proto__: null,
+				...options
+			};
+			if (!this.canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No package.json to save to");
+			if (!require_json_format.shouldSave(this.content, this.readFileJson, this.readFileContent, {
 				...options,
 				sortFn: options?.sort ? src_external__npmcli_package_json_lib_sort.packageSort : void 0
 			})) return false;
 			const content = require_json_format.stripFormattingSymbols(this.content);
 			const fileContent = require_json_format.stringifyWithFormatting(options?.sort ? (0, src_external__npmcli_package_json_lib_sort.packageSort)(content) : content, require_json_format.getFormattingFromContent(this.content));
-			const { promises: fsPromises } = /* @__PURE__ */ require_node_fs.getNodeFs();
+			const { promises: fsPromises } = require_node_fs.getNodeFs();
 			await fsPromises.writeFile(this.filename, fileContent);
-			this._readFileContent = fileContent;
-			this._readFileJson = (0, src_external__npmcli_package_json_lib_read_package.parse)(fileContent);
+			this.readFileContent = fileContent;
+			this.readFileJson = (0, src_external__npmcli_package_json_lib_read_package.parse)(fileContent);
 			return true;
 		}
 		saveSync(options) {
-			if (!this._canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No package.json to save to");
+			if (!this.canSave || this.content === void 0) throw new require_primordials_error.ErrorCtor("No package.json to save to");
 			const { ignoreWhitespace = false, sort = false } = {
 				__proto__: null,
 				...options
 			};
 			const { [Symbol.for("indent")]: indent, [Symbol.for("newline")]: newline, ...rest } = this.content;
 			const content = sort ? (0, src_external__npmcli_package_json_lib_sort.packageSort)(rest) : rest;
-			if (ignoreWhitespace && (/* @__PURE__ */ require_node_util.getNodeUtil()).isDeepStrictEqual(content, this._readFileJson)) return false;
+			const util = require_node_util.getNodeUtil();
+			if (ignoreWhitespace && util.isDeepStrictEqual(content, this.readFileJson)) return false;
 			const format = indent === void 0 || indent === null ? "  " : indent;
 			const eol = newline === void 0 || newline === null ? "\n" : newline;
 			const fileContent = `${require_primordials_json.JSONStringify(content, void 0, format)}\n`.replace(/\n/g, eol);
-			if (!ignoreWhitespace && fileContent.trim() === this._readFileContent.trim()) return false;
-			(/* @__PURE__ */ require_node_fs.getNodeFs()).writeFileSync(this.filename, fileContent);
-			this._readFileContent = fileContent;
-			this._readFileJson = (0, src_external__npmcli_package_json_lib_read_package.parse)(fileContent);
+			if (!ignoreWhitespace && fileContent.trim() === this.readFileContent.trim()) return false;
+			require_node_fs.getNodeFs().writeFileSync(this.filename, fileContent);
+			this.readFileContent = fileContent;
+			this.readFileJson = (0, src_external__npmcli_package_json_lib_read_package.parse)(fileContent);
 			return true;
 		}
 		update(content) {
@@ -184,18 +188,19 @@ function getEditablePackageJsonClass() {
 				__proto__: null,
 				...options
 			};
-			if (!this._canSave || this.content === void 0) return false;
+			if (!this.canSave || this.content === void 0) return false;
 			const { [Symbol.for("indent")]: indent, [Symbol.for("newline")]: newline, ...rest } = this.content;
 			const content = sort ? (0, src_external__npmcli_package_json_lib_sort.packageSort)(rest) : rest;
-			if (ignoreWhitespace && (/* @__PURE__ */ require_node_util.getNodeUtil()).isDeepStrictEqual(content, this._readFileJson)) return false;
+			const util = require_node_util.getNodeUtil();
+			if (ignoreWhitespace && util.isDeepStrictEqual(content, this.readFileJson)) return false;
 			const format = indent === void 0 || indent === null ? "  " : indent;
 			const eol = newline === void 0 || newline === null ? "\n" : newline;
 			const fileContent = `${require_primordials_json.JSONStringify(content, void 0, format)}\n`.replace(/\n/g, eol);
-			if (!ignoreWhitespace && fileContent.trim() === this._readFileContent.trim()) return false;
+			if (!ignoreWhitespace && fileContent.trim() === this.readFileContent.trim()) return false;
 			return true;
 		}
 	};
-	return _EditablePackageJsonClass;
+	return cachedEditablePackageJsonClass;
 }
 
 //#endregion

package/dist/packages/edit.js

@@ -3,9 +3,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_paths_predicates = require('../paths/predicates.js');
 const require_primordials_json = require('../primordials/json.js');
-const require_packages_normalize = require('./normalize.js');
-const require_paths_packages = require('../paths/packages.js');
 const require_packages_edit_class = require('./edit-class.js');
+const require_paths_packages = require('../paths/packages.js');
+const require_packages_normalize = require('./normalize.js');
 
 //#region src/packages/edit.ts
 /**
@@ -35,18 +35,17 @@ const require_packages_edit_class = require('./edit-class.js');
 *   )
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 async function toEditablePackageJson(pkgJson, options) {
 	const { path: filepath, ...restOptions } = {
 		__proto__: null,
 		...options
 	};
 	const { normalize, ...normalizeOptions } = restOptions;
-	const EditablePackageJson = /* @__PURE__ */ require_packages_edit_class.getEditablePackageJsonClass();
-	if (typeof filepath !== "string") return new EditablePackageJson().fromContent(normalize ? /* @__PURE__ */ require_packages_normalize.normalizePackageJson(pkgJson, normalizeOptions) : pkgJson);
-	const pkgJsonPath = /* @__PURE__ */ require_paths_packages.resolvePackageJsonDirname(filepath);
-	return (await EditablePackageJson.load(pkgJsonPath, { create: true })).fromJSON(`${require_primordials_json.JSONStringify(normalize ? /* @__PURE__ */ require_packages_normalize.normalizePackageJson(pkgJson, {
-		.../* @__PURE__ */ require_paths_predicates.isNodeModules(pkgJsonPath) ? {} : { preserve: ["repository"] },
+	const EditablePackageJson = require_packages_edit_class.getEditablePackageJsonClass();
+	if (typeof filepath !== "string") return new EditablePackageJson().fromContent(normalize ? require_packages_normalize.normalizePackageJson(pkgJson, normalizeOptions) : pkgJson);
+	const pkgJsonPath = require_paths_packages.resolvePackageJsonDirname(filepath);
+	return (await EditablePackageJson.load(pkgJsonPath, { create: true })).fromJSON(`${require_primordials_json.JSONStringify(normalize ? require_packages_normalize.normalizePackageJson(pkgJson, {
+		...require_paths_predicates.isNodeModules(pkgJsonPath) ? {} : { preserve: ["repository"] },
 		...normalizeOptions
 	}) : pkgJson, void 0, 2)}\n`);
 }
@@ -62,18 +61,17 @@ async function toEditablePackageJson(pkgJson, options) {
 *   )
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function toEditablePackageJsonSync(pkgJson, options) {
 	const { path: filepath, ...restOptions } = {
 		__proto__: null,
 		...options
 	};
 	const { normalize, ...normalizeOptions } = restOptions;
-	const EditablePackageJson = /* @__PURE__ */ require_packages_edit_class.getEditablePackageJsonClass();
-	if (typeof filepath !== "string") return new EditablePackageJson().fromContent(normalize ? /* @__PURE__ */ require_packages_normalize.normalizePackageJson(pkgJson, normalizeOptions) : pkgJson);
-	const pkgJsonPath = /* @__PURE__ */ require_paths_packages.resolvePackageJsonDirname(filepath);
-	return new EditablePackageJson().create(pkgJsonPath).fromJSON(`${require_primordials_json.JSONStringify(normalize ? /* @__PURE__ */ require_packages_normalize.normalizePackageJson(pkgJson, {
-		.../* @__PURE__ */ require_paths_predicates.isNodeModules(pkgJsonPath) ? {} : { preserve: ["repository"] },
+	const EditablePackageJson = require_packages_edit_class.getEditablePackageJsonClass();
+	if (typeof filepath !== "string") return new EditablePackageJson().fromContent(normalize ? require_packages_normalize.normalizePackageJson(pkgJson, normalizeOptions) : pkgJson);
+	const pkgJsonPath = require_paths_packages.resolvePackageJsonDirname(filepath);
+	return new EditablePackageJson().create(pkgJsonPath).fromJSON(`${require_primordials_json.JSONStringify(normalize ? require_packages_normalize.normalizePackageJson(pkgJson, {
+		...require_paths_predicates.isNodeModules(pkgJsonPath) ? {} : { preserve: ["repository"] },
 		...normalizeOptions
 	}) : pkgJson, void 0, 2)}\n`);
 }

package/dist/packages/exports.js

@@ -2,13 +2,13 @@
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_primordials_error = require('../primordials/error.js');
+const require_arrays_predicates = require('../arrays/predicates.js');
+const require_primordials_object = require('../primordials/object.js');
+const require_objects_predicates = require('../objects/predicates.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
 const require_primordials_string = require('../primordials/string.js');
 const require_primordials_array = require('../primordials/array.js');
-const require_primordials_map_set = require('../primordials/map-set.js');
-const require_primordials_object = require('../primordials/object.js');
 const require_constants_sentinels = require('../constants/sentinels.js');
-const require_arrays_predicates = require('../arrays/predicates.js');
-const require_objects_predicates = require('../objects/predicates.js');
 
 //#region src/packages/exports.ts
 /**
@@ -26,7 +26,6 @@ const require_objects_predicates = require('../objects/predicates.js');
 *   // types === './dist/index.d.ts'
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function findTypesForSubpath(entryExports, subpath) {
 	const queue = [entryExports];
 	let pos = 0;
@@ -36,14 +35,14 @@ function findTypesForSubpath(entryExports, subpath) {
 		if (require_arrays_predicates.isArray(value)) for (let i = 0, { length } = value; i < length; i += 1) {
 			const item = value[i];
 			if (item === subpath) return value.types;
-			if (/* @__PURE__ */ require_objects_predicates.isObject(item)) queue.push(item);
+			if (require_objects_predicates.isObject(item)) queue.push(item);
 		}
-		else if (/* @__PURE__ */ require_objects_predicates.isObject(value)) {
+		else if (require_objects_predicates.isObject(value)) {
 			const keys = require_primordials_object.ObjectGetOwnPropertyNames(value);
 			for (let i = 0, { length } = keys; i < length; i += 1) {
 				const item = value[keys[i]];
 				if (item === subpath) return value.types;
-				if (/* @__PURE__ */ require_objects_predicates.isObject(item)) queue.push(item);
+				if (require_objects_predicates.isObject(item)) queue.push(item);
 			}
 		}
 	}
@@ -57,20 +56,19 @@ function findTypesForSubpath(entryExports, subpath) {
 *   getExportFilePaths(exports) // ['./dist/index.js', './dist/utils.js']
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getExportFilePaths(entryExports) {
-	if (!/* @__PURE__ */ require_objects_predicates.isObject(entryExports)) return [];
+	if (!require_objects_predicates.isObject(entryExports)) return [];
 	const paths = [];
 	for (const key of require_primordials_object.ObjectGetOwnPropertyNames(entryExports)) {
 		if (!require_primordials_string.StringPrototypeStartsWith(key, ".")) continue;
 		const value = entryExports[key];
 		if (typeof value === "string") require_primordials_array.ArrayPrototypePush(paths, value);
-		else if (/* @__PURE__ */ require_objects_predicates.isObject(value)) for (const subKey of require_primordials_object.ObjectGetOwnPropertyNames(value)) {
+		else if (require_objects_predicates.isObject(value)) for (const subKey of require_primordials_object.ObjectGetOwnPropertyNames(value)) {
 			const subValue = value[subKey];
 			if (typeof subValue === "string") require_primordials_array.ArrayPrototypePush(paths, subValue);
 			else if (require_arrays_predicates.isArray(subValue)) {
 				for (const item of subValue) if (typeof item === "string") require_primordials_array.ArrayPrototypePush(paths, item);
-				else if (/* @__PURE__ */ require_objects_predicates.isObject(item)) for (const nestedKey of require_primordials_object.ObjectGetOwnPropertyNames(item)) {
+				else if (require_objects_predicates.isObject(item)) for (const nestedKey of require_primordials_object.ObjectGetOwnPropertyNames(item)) {
 					const nestedValue = item[nestedKey];
 					if (typeof nestedValue === "string") require_primordials_array.ArrayPrototypePush(paths, nestedValue);
 				}
@@ -88,9 +86,8 @@ function getExportFilePaths(entryExports) {
 *   getSubpaths(exports) // ['.', './utils']
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function getSubpaths(entryExports) {
-	if (!/* @__PURE__ */ require_objects_predicates.isObject(entryExports)) return [];
+	if (!require_objects_predicates.isObject(entryExports)) return [];
 	return require_primordials_object.ObjectGetOwnPropertyNames(entryExports).filter((key) => require_primordials_string.StringPrototypeStartsWith(key, "."));
 }
 /**
@@ -102,9 +99,8 @@ function getSubpaths(entryExports) {
 *   isConditionalExports({ '.': './index.js' }) // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isConditionalExports(entryExports) {
-	if (!/* @__PURE__ */ require_objects_predicates.isPlainObject(entryExports)) return false;
+	if (!require_objects_predicates.isPlainObject(entryExports)) return false;
 	const keys = require_primordials_object.ObjectGetOwnPropertyNames(entryExports);
 	const { length } = keys;
 	if (!length) return false;
@@ -123,9 +119,8 @@ function isConditionalExports(entryExports) {
 *   isSubpathExports({ import: './index.mjs' }) // false
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function isSubpathExports(entryExports) {
-	if (/* @__PURE__ */ require_objects_predicates.isPlainObject(entryExports)) {
+	if (require_objects_predicates.isPlainObject(entryExports)) {
 		const keys = require_primordials_object.ObjectGetOwnPropertyNames(entryExports);
 		for (let i = 0, { length } = keys; i < length; i += 1) if (keys[i]?.charCodeAt(0) === 46) return true;
 	}
@@ -143,11 +138,10 @@ function isSubpathExports(entryExports) {
 *   // { '.': './index.js' }
 *   ```
 */
-/*@__NO_SIDE_EFFECTS__*/
 function resolvePackageJsonEntryExports(entryExports) {
 	if (typeof entryExports === "string" || require_arrays_predicates.isArray(entryExports)) return { ".": entryExports };
-	if (/* @__PURE__ */ isConditionalExports(entryExports)) return entryExports;
-	return /* @__PURE__ */ require_objects_predicates.isObject(entryExports) ? entryExports : void 0;
+	if (isConditionalExports(entryExports)) return entryExports;
+	return require_objects_predicates.isObject(entryExports) ? entryExports : void 0;
 }
 
 //#endregion

package/dist/packages/fetch.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @file Network-facing package helpers: the lazily-initialized
+ *   make-fetch-happen fetcher (shared cache) and GitHub tarball-URL resolution
+ *   for a package spec.
+ */
+import makeFetchHappen from '../external/make-fetch-happen';
+export declare function getFetcher(): ReturnType<typeof makeFetchHappen.defaults>;
+/**
+ * Resolve GitHub tarball URL for a package specifier.
+ *
+ * @example
+ *   ;```typescript
+ *   const url = await resolveGitHubTgzUrl('my-pkg@1.0.0', '/tmp/my-project')
+ *   ```
+ */
+export declare function resolveGitHubTgzUrl(pkgNameOrId: string, where?: unknown): Promise<string>;

package/dist/packages/fetch.js

@@ -0,0 +1,81 @@
+"use strict";
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.js');
+const require_objects_predicates = require('../objects/predicates.js');
+const require_packages_specs = require('./specs.js');
+const require_constants_packages = require('../constants/packages.js');
+const require_packages_read = require('./read.js');
+let src_external_npm_package_arg = require("../external/npm-package-arg");
+src_external_npm_package_arg = require_runtime.__toESM(src_external_npm_package_arg);
+let src_external_make_fetch_happen = require("../external/make-fetch-happen");
+src_external_make_fetch_happen = require_runtime.__toESM(src_external_make_fetch_happen);
+
+//#region src/packages/fetch.ts
+/**
+* @file Network-facing package helpers: the lazily-initialized
+*   make-fetch-happen fetcher (shared cache) and GitHub tarball-URL resolution
+*   for a package spec.
+*/
+const pacoteCachePath = require_constants_packages.getPacoteCachePath();
+let cachedFetcher;
+function getFetcher() {
+	if (cachedFetcher === void 0) cachedFetcher = src_external_make_fetch_happen.default.defaults({
+		cachePath: pacoteCachePath,
+		cache: "force-cache"
+	});
+	return cachedFetcher;
+}
+/**
+* Resolve GitHub tarball URL for a package specifier.
+*
+* @example
+*   ;```typescript
+*   const url = await resolveGitHubTgzUrl('my-pkg@1.0.0', '/tmp/my-project')
+*   ```
+*/
+async function resolveGitHubTgzUrl(pkgNameOrId, where) {
+	const whereIsPkgJson = require_objects_predicates.isPlainObject(where);
+	const pkgJson = whereIsPkgJson ? where : await require_packages_read.readPackageJson(where, { normalize: true });
+	if (!pkgJson) return "";
+	const { version } = pkgJson;
+	const parsedSpec = (0, src_external_npm_package_arg.default)(pkgNameOrId, whereIsPkgJson ? void 0 : where);
+	if (require_packages_specs.isGitHubTgzSpec(parsedSpec)) return parsedSpec.saveSpec || "";
+	const isGitHubUrl = require_packages_specs.isGitHubUrlSpec(parsedSpec);
+	const repository = pkgJson.repository;
+	const { project, user } = (isGitHubUrl ? parsedSpec.hosted : require_packages_specs.getRepoUrlDetails(repository?.url)) || {
+		project: "",
+		user: ""
+	};
+	/* c8 ignore start - External GitHub API calls */
+	if (user && project) {
+		const fetcher = getFetcher();
+		let apiUrl = "";
+		if (isGitHubUrl) apiUrl = require_packages_specs.gitHubTagRefUrl(user, project, parsedSpec.gitCommittish || "");
+		else {
+			const versionStr = version;
+			apiUrl = require_packages_specs.gitHubTagRefUrl(user, project, `v${versionStr}`);
+			if (!(await fetcher(apiUrl, { method: "head" })).ok) {
+				apiUrl = require_packages_specs.gitHubTagRefUrl(user, project, versionStr);
+				if (!(await fetcher(apiUrl, { method: "head" })).ok) apiUrl = "";
+			}
+		}
+		if (apiUrl) {
+			const resp = await fetcher(apiUrl);
+			let json;
+			try {
+				json = await resp.json();
+			} catch {
+				json = void 0;
+			}
+			const sha = json?.object?.sha;
+			if (sha) return require_packages_specs.gitHubTgzUrl(user, project, sha);
+		}
+	}
+	/* c8 ignore stop */
+	return "";
+}
+
+//#endregion
+exports.getFetcher = getFetcher;
+exports.resolveGitHubTgzUrl = resolveGitHubTgzUrl;

package/dist/packages/find.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @file Find the nearest package.json (or other marker) walking up from an
+ *   `import.meta` — the package-domain wrapper over the generic `findUpSync`
+ *   lookup in `fs/find`. Lives here (not in `paths/`) because it touches the
+ *   filesystem; `paths/packages.ts` stays pure path-string shaping.
+ */
+export interface FindUpPackageJsonOptions {
+    /**
+     * Names to look for. Defaults to `['package.json']`. Pass alternate markers
+     * for non-package roots (e.g. `['pnpm-workspace.yaml']` for the workspace
+     * root in a pnpm monorepo).
+     */
+    names?: readonly string[] | undefined;
+    /**
+     * Optional ancestor boundary. Useful when a script is run from a deeply
+     * nested fixture and you don't want to escape the test's tmpdir. Defaults to
+     * the filesystem root.
+     */
+    stopAt?: string | undefined;
+}
+/**
+ * Find the nearest `package.json` walking up from `import.meta`. Returns the
+ * absolute path to the file (normalized to forward slashes), matching the
+ * `findUp` / `findUpSync` return shape. Throws when no marker is found — every
+ * script using this helper lives inside a package and should resolve.
+ *
+ * Use this instead of `path.join(__dirname, '..', '..'[, '..'])`. The ascent
+ * count is computed at runtime from the actual filesystem layout, not
+ * hard-coded into the source, so the helper stays correct across refactors that
+ * move scripts between directories.
+ *
+ * Pair with `readPackageJson` to find AND parse the nearest package.json:
+ *
+ * @example
+ *   ;```ts
+ *   const pkgJsonPath = findUpPackageJson(import.meta)
+ *   // → '/abs/path/to/package.json'
+ *   const pkg = await readPackageJson(pkgJsonPath)
+ *   console.log(pkg?.name)
+ *
+ *   // Workspace root in a pnpm monorepo:
+ *   const wsRoot = findUpPackageJson(import.meta, {
+ *     names: ['pnpm-workspace.yaml'],
+ *   })
+ *   ```
+ *
+ * @param meta - `import.meta` from the calling script.
+ * @param options - Override marker name(s) or set a stopAt boundary.
+ *
+ * @returns Absolute, normalized path to the marker file.
+ *
+ * @throws When no marker is found between the script and the filesystem root
+ *   (or `stopAt`).
+ */
+export declare function findUpPackageJson(meta: ImportMeta, options?: FindUpPackageJsonOptions | undefined): string;