@socketsecurity/lib 6.0.9 → 6.0.10

package/dist/external/std-env.js

@@ -0,0 +1,323 @@
+const { ObjectCreate: _p_ObjectCreate } = require('../primordials/object.js')
+"use strict";
+/**
+ * Bundled from std-env
+ * This is a zero-dependency bundle created by rolldown.
+ */
+'use strict';
+
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", {
+	value,
+	configurable: true
+});
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) {
+		__defProp(target, name, {
+			get: all[name],
+			enumerable: true
+		});
+	}
+	if (!no_symbols) {
+		__defProp(target, Symbol.toStringTag, { value: "Module" });
+	}
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") {
+		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+			key = keys[i];
+			if (!__hasOwnProp.call(to, key) && key !== except) {
+				__defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+		}
+	}
+	return to;
+};
+var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+//#endregion
+
+//#region node_modules/.pnpm/std-env@4.1.0/node_modules/std-env/dist/index.mjs
+var dist_exports = /* @__PURE__ */ __exportAll({
+	agent: () => s,
+	agentInfo: () => o,
+	detectAgent: () => a,
+	detectProvider: () => u,
+	env: () => e,
+	hasTTY: () => h,
+	hasWindow: () => g,
+	isAgent: () => c,
+	isBun: () => k,
+	isCI: () => m,
+	isColorSupported: () => T,
+	isDebug: () => _,
+	isDeno: () => A,
+	isDevelopment: () => b,
+	isEdgeLight: () => N,
+	isFastly: () => j,
+	isLinux: () => C,
+	isMacOS: () => w,
+	isMinimal: () => x,
+	isNetlify: () => M,
+	isNode: () => O,
+	isProduction: () => y,
+	isTest: () => v,
+	isWindows: () => S,
+	isWorkerd: () => P,
+	nodeENV: () => n,
+	nodeMajorVersion: () => D,
+	nodeVersion: () => E,
+	platform: () => p,
+	process: () => t,
+	provider: () => f,
+	providerInfo: () => d,
+	runtime: () => R,
+	runtimeInfo: () => L
+});
+function i(t, n) {
+	return () => {
+		let r = e[t];
+		return r ? n.test(r) : !1;
+	};
+}
+function a() {
+	let t = e.AI_AGENT;
+	if (t) return { name: t.toLowerCase() };
+	for (let [t, n] of r) for (let r of n) if (typeof r == `string` ? e[r] : r()) return { name: t };
+	return {};
+}
+function u() {
+	for (let t of l) if (e[t[1] || t[0]]) return {
+		name: t[0].toLowerCase(),
+		...t[2]
+	};
+	return e.SHELL === `/bin/jsh` && t.versions?.webcontainer ? {
+		name: `stackblitz`,
+		ci: !1
+	} : {
+		name: ``,
+		ci: !1
+	};
+}
+function I() {
+	let e = F.find((e) => e[0]);
+	if (e) return { name: e[1] };
+}
+var e, t, n, r, o, s, c, l, d, f, p, m, h, g, _, v, y, b, x, S, C, w, T, E, D, O, k, A, j, M, N, P, F, L, R;
+var init_dist = __esmMin((() => {
+	e = globalThis.process?.env || _p_ObjectCreate(null);
+	t = globalThis.process || { env: e };
+	n = t !== void 0 && t.env && t.env.NODE_ENV || void 0;
+	r = [
+		[`claude`, [`CLAUDECODE`, `CLAUDE_CODE`]],
+		[`replit`, [`REPL_ID`]],
+		[`gemini`, [`GEMINI_CLI`]],
+		[`codex`, [`CODEX_SANDBOX`, `CODEX_THREAD_ID`]],
+		[`opencode`, [`OPENCODE`]],
+		[`pi`, [i(`PATH`, /\.pi[\\/]agent/)]],
+		[`auggie`, [`AUGMENT_AGENT`]],
+		[`goose`, [`GOOSE_PROVIDER`]],
+		[`devin`, [i(`EDITOR`, /devin/)]],
+		[`cursor`, [`CURSOR_AGENT`]],
+		[`kiro`, [i(`TERM_PROGRAM`, /kiro/)]]
+	];
+	o = a();
+	s = o.name;
+	c = !!o.name;
+	l = [
+		[`APPVEYOR`],
+		[
+			`AWS_AMPLIFY`,
+			`AWS_APP_ID`,
+			{ ci: !0 }
+		],
+		[`AZURE_PIPELINES`, `SYSTEM_TEAMFOUNDATIONCOLLECTIONURI`],
+		[`AZURE_STATIC`, `INPUT_AZURE_STATIC_WEB_APPS_API_TOKEN`],
+		[`APPCIRCLE`, `AC_APPCIRCLE`],
+		[`BAMBOO`, `bamboo_planKey`],
+		[`BITBUCKET`, `BITBUCKET_COMMIT`],
+		[`BITRISE`, `BITRISE_IO`],
+		[`BUDDY`, `BUDDY_WORKSPACE_ID`],
+		[`BUILDKITE`],
+		[`CIRCLE`, `CIRCLECI`],
+		[`CIRRUS`, `CIRRUS_CI`],
+		[
+			`CLOUDFLARE_PAGES`,
+			`CF_PAGES`,
+			{ ci: !0 }
+		],
+		[
+			`CLOUDFLARE_WORKERS`,
+			`WORKERS_CI`,
+			{ ci: !0 }
+		],
+		[`GOOGLE_CLOUDRUN`, `K_SERVICE`],
+		[`GOOGLE_CLOUDRUN_JOB`, `CLOUD_RUN_JOB`],
+		[`CODEBUILD`, `CODEBUILD_BUILD_ARN`],
+		[`CODEFRESH`, `CF_BUILD_ID`],
+		[`DRONE`],
+		[`DRONE`, `DRONE_BUILD_EVENT`],
+		[`DSARI`],
+		[`GITHUB_ACTIONS`],
+		[`GITLAB`, `GITLAB_CI`],
+		[`GITLAB`, `CI_MERGE_REQUEST_ID`],
+		[`GOCD`, `GO_PIPELINE_LABEL`],
+		[`LAYERCI`],
+		[`JENKINS`, `JENKINS_URL`],
+		[`HUDSON`, `HUDSON_URL`],
+		[`MAGNUM`],
+		[`NETLIFY`],
+		[
+			`NETLIFY`,
+			`NETLIFY_LOCAL`,
+			{ ci: !1 }
+		],
+		[`NEVERCODE`],
+		[`RENDER`],
+		[`SAIL`, `SAILCI`],
+		[`SEMAPHORE`],
+		[`SCREWDRIVER`],
+		[`SHIPPABLE`],
+		[`SOLANO`, `TDDIUM`],
+		[`STRIDER`],
+		[`TEAMCITY`, `TEAMCITY_VERSION`],
+		[`TRAVIS`],
+		[`VERCEL`, `NOW_BUILDER`],
+		[
+			`VERCEL`,
+			`VERCEL`,
+			{ ci: !1 }
+		],
+		[
+			`VERCEL`,
+			`VERCEL_ENV`,
+			{ ci: !1 }
+		],
+		[`APPCENTER`, `APPCENTER_BUILD_ID`],
+		[
+			`CODESANDBOX`,
+			`CODESANDBOX_SSE`,
+			{ ci: !1 }
+		],
+		[
+			`CODESANDBOX`,
+			`CODESANDBOX_HOST`,
+			{ ci: !1 }
+		],
+		[`STACKBLITZ`],
+		[`STORMKIT`],
+		[`CLEAVR`],
+		[`ZEABUR`],
+		[
+			`CODESPHERE`,
+			`CODESPHERE_APP_ID`,
+			{ ci: !0 }
+		],
+		[`RAILWAY`, `RAILWAY_PROJECT_ID`],
+		[`RAILWAY`, `RAILWAY_SERVICE_ID`],
+		[`DENO-DEPLOY`, `DENO_DEPLOY`],
+		[`DENO-DEPLOY`, `DENO_DEPLOYMENT_ID`],
+		[
+			`FIREBASE_APP_HOSTING`,
+			`FIREBASE_APP_HOSTING`,
+			{ ci: !0 }
+		],
+		[
+			`EDGEONE_PAGES`,
+			`EO_PAGES_CI`,
+			{ ci: !0 }
+		]
+	];
+	d = u();
+	f = d.name;
+	p = t.platform || ``;
+	m = !!e.CI || d.ci !== !1;
+	h = !!t.stdout?.isTTY;
+	g = typeof window < `u`;
+	_ = !!e.DEBUG;
+	v = n === `test` || !!e.TEST;
+	y = n === `production` || e.MODE === `production`;
+	b = n === `dev` || n === `development` || e.MODE === `development`;
+	x = !!e.MINIMAL || m || v || !h;
+	S = /^win/i.test(p);
+	C = /^linux/i.test(p);
+	w = /^darwin/i.test(p);
+	T = !e.NO_COLOR && (!!e.FORCE_COLOR || (h || S) && e.TERM !== `dumb` || m);
+	E = (t.versions?.node || ``).replace(/^v/, ``) || null;
+	D = Number(E?.split(`.`)[0]) || null;
+	O = !!t?.versions?.node;
+	k = `Bun` in globalThis;
+	A = `Deno` in globalThis;
+	j = `fastly` in globalThis;
+	M = `Netlify` in globalThis;
+	N = `EdgeRuntime` in globalThis;
+	P = globalThis.undefined?.userAgent === `Cloudflare-Workers`;
+	F = [
+		[M, `netlify`],
+		[N, `edge-light`],
+		[P, `workerd`],
+		[j, `fastly`],
+		[A, `deno`],
+		[k, `bun`],
+		[O, `node`]
+	];
+	L = I();
+	R = L?.name || ``;
+}));
+
+//#endregion
+//#region src/external/std-env.js
+module.exports = (init_dist(), __toCommonJS(dist_exports));
+
+//#endregion
+exports.agent = s;
+exports.agentInfo = o;
+exports.detectAgent = a;
+exports.detectProvider = u;
+exports.env = e;
+exports.hasTTY = h;
+exports.hasWindow = g;
+exports.isAgent = c;
+exports.isBun = k;
+exports.isCI = m;
+exports.isColorSupported = T;
+exports.isDebug = _;
+exports.isDeno = A;
+exports.isDevelopment = b;
+exports.isEdgeLight = N;
+exports.isFastly = j;
+exports.isLinux = C;
+exports.isMacOS = w;
+exports.isMinimal = x;
+exports.isNetlify = M;
+exports.isNode = O;
+exports.isProduction = y;
+exports.isTest = v;
+exports.isWindows = S;
+exports.isWorkerd = P;
+exports.nodeENV = n;
+exports.nodeMajorVersion = D;
+exports.nodeVersion = E;
+exports.platform = p;
+exports.process = t;
+exports.provider = f;
+exports.providerInfo = d;
+exports.runtime = R;
+exports.runtimeInfo = L;

package/dist/external/streaming-iterables.d.ts

@@ -0,0 +1,11 @@
+export function parallelMap<T, R>(
+  concurrency: number,
+  mapper: (value: T) => Promise<R> | R,
+  iterable: AsyncIterable<T> | Iterable<T>,
+): AsyncIterableIterator<R>
+
+export function transform<T, R>(
+  concurrency: number,
+  func: (data: T) => R | Promise<R>,
+  iterable: AsyncIterable<T> | Iterable<T>,
+): AsyncIterableIterator<R>

package/dist/external/supports-color.d.ts

@@ -0,0 +1 @@
+export { supportsColor as default } from './external-pack'

package/dist/external/tar-fs.d.ts

@@ -0,0 +1,31 @@
+import type { Readable, Writable } from 'node:stream'
+
+export interface PackOptions {
+  entries?: string[]
+  dereference?: boolean
+  filter?: (name: string) => boolean
+  fs?: any
+  ignore?: (name: string) => boolean
+  map?: (header: any) => any
+  mapStream?: (stream: Readable, header: any) => Readable
+  pack?: any
+  sort?: boolean
+  strip?: number
+}
+
+export interface ExtractOptions {
+  dereference?: boolean
+  filter?: (name: string, header: any) => boolean
+  fs?: any
+  ignore?: (name: string, header: any) => boolean
+  map?: (header: any) => any
+  mapStream?: (stream: Readable, header: any) => Readable
+  readable?: boolean
+  strip?: number
+  strict?: boolean
+  umask?: number
+  writable?: boolean
+}
+
+export function pack(cwd: string, opts?: PackOptions): Readable
+export function extract(cwd: string, opts?: ExtractOptions): Writable

package/dist/external/validate-npm-package-name.d.ts

@@ -0,0 +1,4 @@
+import type { NpmPack } from './npm-pack'
+
+declare const validateNpmPackageName: NpmPack['validateNpmPackageName']
+export default validateNpmPackageName

package/dist/external/which.d.ts

@@ -0,0 +1,25 @@
+export interface WhichOptions {
+  path?: string
+  pathExt?: string
+  all?: boolean
+  nothrow?: boolean
+}
+
+interface WhichFunction {
+  (cmd: string, options: WhichOptions & { all: true }): Promise<string[]>
+  (
+    cmd: string,
+    options: WhichOptions & { nothrow: true; all?: false },
+  ): Promise<string | null>
+  (cmd: string, options?: WhichOptions): Promise<string>
+
+  sync(cmd: string, options: WhichOptions & { all: true }): string[]
+  sync(
+    cmd: string,
+    options: WhichOptions & { nothrow: true; all?: false },
+  ): string | null
+  sync(cmd: string, options?: WhichOptions): string
+}
+
+declare const which: WhichFunction
+export default which

package/dist/external/which.js

@@ -76,7 +76,7 @@ var require_posix = /* @__PURE__ */ __commonJSMin(((exports) => {
 		const myGroups = options.groups ?? process.getgroups?.() ?? [];
 		const myGid = options.gid ?? process.getgid?.() ?? myGroups[0];
 		if (myUid === void 0 || myGid === void 0) throw new _p_ErrorCtor("cannot get uid or gid");
-		const groups = new _p_SetCtor([myGid, ...myGroups]);
+		const groups = /* @__PURE__ */ new _p_SetCtor([myGid, ...myGroups]);
 		const mod = stat.mode;
 		const uid = stat.uid;
 		const gid = stat.gid;
@@ -206,7 +206,7 @@ var require_cjs = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 
 //#endregion
-//#region node_modules/.pnpm/which@5.0.0/node_modules/which/lib/index.js
+//#region node_modules/.pnpm/which@7.0.0/node_modules/which/lib/index.js
 var require_lib = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { isexe, sync: isexeSync } = require_cjs();
 	const { join, delimiter, sep, posix } = require("path");

package/dist/external/yargs-parser.d.ts

@@ -0,0 +1,2 @@
+declare const yargsParser: any
+export default yargsParser

package/dist/external/yargs-parser.js

@@ -14,7 +14,14 @@ var __name = (target, value) => __defProp(target, "name", {
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
 var __exportAll = (all, no_symbols) => {
 	let target = {};
 	for (var name in all) {
@@ -48,7 +55,7 @@ var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["modu
 let util = require("util");
 let path = require("path");
 let fs = require("fs");
-let node_module = require("node:module");
+let node_module = require("module");
 
 const { ArrayIsArray: _p_ArrayIsArray } = require('../primordials/array.js')
 
@@ -534,7 +541,8 @@ var init_yargs_parser = __esmMin((() => {
 				const splitKey = key.split(".");
 				setKey(argv, splitKey, value);
 				if (flags.aliases[key]) flags.aliases[key].forEach(function(x) {
-					setKey(argv, x.split("."), value);
+					const keyProperties = x.split(".");
+					setKey(argv, keyProperties, value);
 				});
 				if (splitKey.length > 1 && configuration["dot-notation"]) (flags.aliases[splitKey[0]] || []).forEach(function(x) {
 					let keyProperties = x.split(".");

package/dist/external/yoctocolors-cjs.d.ts

@@ -0,0 +1,51 @@
+export interface YoctoColors {
+  // Modifiers
+  reset: (text: string) => string
+  bold: (text: string) => string
+  dim: (text: string) => string
+  italic: (text: string) => string
+  underline: (text: string) => string
+  overline: (text: string) => string
+  inverse: (text: string) => string
+  hidden: (text: string) => string
+  strikethrough: (text: string) => string
+
+  // Colors
+  black: (text: string) => string
+  red: (text: string) => string
+  green: (text: string) => string
+  yellow: (text: string) => string
+  blue: (text: string) => string
+  magenta: (text: string) => string
+  cyan: (text: string) => string
+  white: (text: string) => string
+  gray: (text: string) => string
+  grey: (text: string) => string
+
+  // Bright colors
+  blackBright: (text: string) => string
+  redBright: (text: string) => string
+  greenBright: (text: string) => string
+  yellowBright: (text: string) => string
+  blueBright: (text: string) => string
+  magentaBright: (text: string) => string
+  cyanBright: (text: string) => string
+  whiteBright: (text: string) => string
+
+  // Background colors
+  bgBlack: (text: string) => string
+  bgRed: (text: string) => string
+  bgGreen: (text: string) => string
+  bgYellow: (text: string) => string
+  bgBlue: (text: string) => string
+  bgMagenta: (text: string) => string
+  bgCyan: (text: string) => string
+  bgWhite: (text: string) => string
+
+  // RGB colors
+  rgb: (r: number, g: number, b: number) => (text: string) => string
+  bgRgb: (r: number, g: number, b: number) => (text: string) => string
+}
+
+declare const yoctocolorsCjs: YoctoColors
+export default yoctocolorsCjs

package/dist/external-tools/bazel/asset-names.d.ts

@@ -39,7 +39,7 @@ export interface BazelDownloadOptions {
      */
     version: string;
     /**
-     * Fleet platform-arch token — looked up in `BAZEL_ASSET_MAP`. Returns
+     * Socket platform-arch token — looked up in `BAZEL_ASSET_MAP`. Returns
      * `undefined` when no entry exists for the target.
      */
     platformArch: string;

package/dist/external-tools/bazel/from-download.d.ts

@@ -20,7 +20,7 @@ export interface BazelFromDownloadOptions {
      */
     version: string;
     /**
-     * Fleet platform-arch token, e.g. `'darwin-arm64'`.
+     * Socket platform-arch token, e.g. `'darwin-arm64'`.
      */
     platformArch: string;
     /**

package/dist/external-tools/bazel/resolve.d.ts

@@ -31,5 +31,8 @@ export interface ResolveBazelOptions {
 }
 export declare function cacheKey(options: ResolveBazelOptions | undefined): string;
 export declare function doResolveBazel(options?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;
+/**
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
+ */
 export declare function resetBazelResolution(): void;
 export declare function resolveBazel(options?: ResolveBazelOptions | undefined): Promise<ResolvedBazel | undefined>;

package/dist/external-tools/bazel/resolve.js

@@ -42,6 +42,9 @@ async function doResolveBazel(options) {
 	if (options?.downloadIfMissing) return require_external_tools_bazel_from_download.bazelFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
+/**
+* @unused No internal or Socket consumers (exercised only by its unit tests).
+*/
 function resetBazelResolution() {
 	resolutionCache.clear();
 }

package/dist/external-tools/cdxgen/asset-names.d.ts

@@ -12,9 +12,9 @@
  *   https://github.com/CycloneDX/cdxgen/releases/download/v<X.Y.Z>/cdxgen-<os>-<arch>[-musl][-slim][.exe]
  *   Reference: https://github.com/CycloneDX/cdxgen/releases. Single source of
  *   truth: the SEA binary IS the install path. The legacy `@cyclonedx/cdxgen`
- *   npm package is not used as a fallback — every platform-arch the fleet
- *   supports has a SEA build, and routing through npm for unsupported targets
- *   would silently use a different distribution (different bundle composition,
+ *   npm package is not used as a fallback — every platform-arch Socket supports
+ *   has a SEA build, and routing through npm for unsupported targets would
+ *   silently use a different distribution (different bundle composition,
  *   different startup cost, different version-pin surface). One install path;
  *   one cached binary.
  */
@@ -36,8 +36,8 @@ export interface CdxgenDownloadOptions {
      */
     version: string;
     /**
-     * Fleet platform-arch token — looked up in the asset map. Returns `undefined`
-     * when no entry exists for the target.
+     * Socket platform-arch token — looked up in the asset map. Returns
+     * `undefined` when no entry exists for the target.
      */
     platformArch: string;
     /**

package/dist/external-tools/cdxgen/asset-names.js

@@ -18,9 +18,9 @@ const require_primordials_object = require('../../primordials/object.js');
 *   https://github.com/CycloneDX/cdxgen/releases/download/v<X.Y.Z>/cdxgen-<os>-<arch>[-musl][-slim][.exe]
 *   Reference: https://github.com/CycloneDX/cdxgen/releases. Single source of
 *   truth: the SEA binary IS the install path. The legacy `@cyclonedx/cdxgen`
-*   npm package is not used as a fallback — every platform-arch the fleet
-*   supports has a SEA build, and routing through npm for unsupported targets
-*   would silently use a different distribution (different bundle composition,
+*   npm package is not used as a fallback — every platform-arch Socket supports
+*   has a SEA build, and routing through npm for unsupported targets would
+*   silently use a different distribution (different bundle composition,
 *   different startup cost, different version-pin surface). One install path;
 *   one cached binary.
 */

package/dist/external-tools/cdxgen/from-download.d.ts

@@ -5,7 +5,7 @@
  *   wrapper) with sidecar `.sha256` files; this helper passes the pinned
  *   integrity through `downloadToolArchive`, then copies the downloaded blob to
  *   `cdxgen[.exe]` and chmods it 0o755. Platforms upstream doesn't ship a SEA
- *   for (none today; the asset map covers all 8 fleet targets) return
+ *   for (none today; the asset map covers all 8 Socket targets) return
  *   `undefined` — callers should fall back to `cdxgenFromNpm()` for those.
  */
 import type { BinaryDownloader } from '../from-download';
@@ -18,7 +18,7 @@ export interface CdxgenFromDownloadOptions {
      */
     version: string;
     /**
-     * Fleet platform-arch token, e.g. `'darwin-arm64'`.
+     * Socket platform-arch token, e.g. `'darwin-arm64'`.
      */
     platformArch: string;
     /**

package/dist/external-tools/cdxgen/from-download.js

@@ -20,7 +20,7 @@ node_path = require_runtime.__toESM(node_path);
 *   wrapper) with sidecar `.sha256` files; this helper passes the pinned
 *   integrity through `downloadToolArchive`, then copies the downloaded blob to
 *   `cdxgen[.exe]` and chmods it 0o755. Platforms upstream doesn't ship a SEA
-*   for (none today; the asset map covers all 8 fleet targets) return
+*   for (none today; the asset map covers all 8 Socket targets) return
 *   `undefined` — callers should fall back to `cdxgenFromNpm()` for those.
 */
 async function cdxgenFromDownload(options) {

package/dist/external-tools/cdxgen/resolve.d.ts

@@ -6,7 +6,7 @@
  *   2. PATH — `cdxgen` on the system PATH
  *   3. download — upstream SEA binary from the GitHub release (slim by default;
  *      pass `variant: 'full'` for the bun+deno-bundled flavor) Single source of
- *      truth: SEA binary only. No npm-package fallback — every fleet
+ *      truth: SEA binary only. No npm-package fallback — every Socket
  *      platform-arch is covered by the SEA matrix, and routing through npm
  *      would split the install surface in two for no benefit. Returns
  *      `undefined` if all of the enabled sources miss. Memoized per
@@ -28,5 +28,8 @@ export interface ResolveCdxgenOptions {
 }
 export declare function cacheKey(options: ResolveCdxgenOptions | undefined): string;
 export declare function doResolveCdxgen(options?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;
+/**
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
+ */
 export declare function resetCdxgenResolution(): void;
 export declare function resolveCdxgen(options?: ResolveCdxgenOptions | undefined): Promise<ResolvedCdxgen | undefined>;

package/dist/external-tools/cdxgen/resolve.js

@@ -15,7 +15,7 @@ const require_external_tools_cdxgen_from_vfs = require('./from-vfs.js');
 *   2. PATH — `cdxgen` on the system PATH
 *   3. download — upstream SEA binary from the GitHub release (slim by default;
 *      pass `variant: 'full'` for the bun+deno-bundled flavor) Single source of
-*      truth: SEA binary only. No npm-package fallback — every fleet
+*      truth: SEA binary only. No npm-package fallback — every Socket
 *      platform-arch is covered by the SEA matrix, and routing through npm
 *      would split the install surface in two for no benefit. Returns
 *      `undefined` if all of the enabled sources miss. Memoized per
@@ -46,6 +46,9 @@ async function doResolveCdxgen(options) {
 	if (options?.downloadIfMissing) return require_external_tools_cdxgen_from_download.cdxgenFromDownload(options.downloadIfMissing);
 }
 /* c8 ignore start - test-only escape hatch. */
+/**
+* @unused No internal or Socket consumers (exercised only by its unit tests).
+*/
 function resetCdxgenResolution() {
 	resolutionCache.clear();
 }

package/dist/external-tools/cdxgen/types.d.ts

@@ -1,7 +1,7 @@
 /**
  * @file Shared types for cdxgen resolution. cdxgen ships per-platform SEA
  *   binaries starting in v12.0.x — that's the single install path. The legacy
- *   `@cyclonedx/cdxgen` npm package is NOT used as a fallback: every fleet
+ *   `@cyclonedx/cdxgen` npm package is NOT used as a fallback: every Socket
  *   platform-arch has a SEA build, and routing through npm for any target would
  *   silently use a different distribution (different bundle composition,
  *   different startup cost). One install path; one cached binary. The future