@visulima/vis 1.0.0-alpha.1 → 1.0.0-alpha.11

package/dist/packem_shared/typosquats-C-bCh3PX.js

@@ -0,0 +1,1210 @@
+import { createRequire as __cjs_createRequire } from "node:module";
+
+const __cjs_require = __cjs_createRequire(import.meta.url);
+
+const __cjs_getProcess = typeof globalThis !== "undefined" && typeof globalThis.process !== "undefined" ? globalThis.process : process;
+
+const __cjs_getBuiltinModule = (module) => {
+    // Check if we're in Node.js and version supports getBuiltinModule
+    if (typeof __cjs_getProcess !== "undefined" && __cjs_getProcess.versions && __cjs_getProcess.versions.node) {
+        const [major, minor] = __cjs_getProcess.versions.node.split(".").map(Number);
+        // Node.js 20.16.0+ and 22.3.0+
+        if (major > 22 || (major === 22 && minor >= 3) || (major === 20 && minor >= 16)) {
+            return __cjs_getProcess.getBuiltinModule(module);
+        }
+    }
+    // Fallback to createRequire
+    return __cjs_require(module);
+};
+
+const {
+  createInterface
+} = __cjs_getBuiltinModule("node:readline");
+import { red, yellow } from '@visulima/colorize';
+import { isAccessibleSync, readJsonSync } from '@visulima/fs';
+import { join } from '@visulima/path';
+import { g as getDefaultExportFromCjs } from './_commonjsHelpers-BqLXS_qQ.js';
+import { p as pail } from '../packem_chunks/bin.js';
+
+var ajv = [
+	"aj",
+	"aju",
+	"av",
+	"avj",
+	"ejv",
+	"jav",
+	"jv"
+];
+var angular = [
+	"angula",
+	"angular-node",
+	"angularjs"
+];
+var autoprefixer = [
+	"auto-prefixer"
+];
+var axios = [
+	"aaxios",
+	"aios",
+	"axio",
+	"axioos",
+	"axios-node",
+	"axioss",
+	"axis",
+	"axiso",
+	"axois",
+	"axos",
+	"axxios"
+];
+var babel = [
+	"abel",
+	"babbel",
+	"babe",
+	"babel-js",
+	"babel-node",
+	"babl",
+	"bable",
+	"bbael",
+	"bebel"
+];
+var bcrypt = [
+	"bcrpyt",
+	"bcrypt-node",
+	"brcypt",
+	"crypt",
+	"dcrypt"
+];
+var bcryptjs = [
+	"bcryptjs-node",
+	"dcryptjs"
+];
+var bunyan = [
+	"bunan",
+	"bunya",
+	"bunyan-node",
+	"buynan"
+];
+var chai = [
+	"cai",
+	"cha",
+	"chaijs",
+	"chal",
+	"chi",
+	"chia",
+	"hai"
+];
+var chalk = [
+	"cahlk",
+	"calk",
+	"cchalk",
+	"ch4lk",
+	"cha1k",
+	"chaalk",
+	"chaik",
+	"chak",
+	"chakl",
+	"chalk-node",
+	"chalkk",
+	"challk",
+	"chhalk",
+	"chlak",
+	"chlk",
+	"halk",
+	"hcalk"
+];
+var cheerio = [
+	"cheero",
+	"cherio"
+];
+var color = [
+	"c0lor",
+	"ccolor",
+	"clor",
+	"colo",
+	"coloor",
+	"color-js",
+	"colorjs",
+	"colorr",
+	"colr",
+	"coolor",
+	"coolr"
+];
+var colors = [
+	"ccolors",
+	"colors-node",
+	"colorss",
+	"colorz",
+	"colrs",
+	"coolors"
+];
+var commander = [
+	"c0mmander",
+	"ccommander",
+	"cmmander",
+	"cmomander",
+	"co-mmander",
+	"comamnder",
+	"comander",
+	"comm4nder",
+	"commaander",
+	"commader",
+	"commadner",
+	"commamder",
+	"command3r",
+	"commandder",
+	"commande",
+	"commandeer",
+	"commander-js",
+	"commanderr",
+	"commandr",
+	"commandre",
+	"commanedr",
+	"commaner",
+	"commannder",
+	"commender",
+	"commmander",
+	"commnader",
+	"commnder",
+	"coommander",
+	"ocmmander",
+	"ommander"
+];
+var cors = [
+	"cor",
+	"corss",
+	"cos",
+	"cosr",
+	"cros",
+	"crs",
+	"ors"
+];
+var dayjs = [
+	"days"
+];
+var debug = [
+	"d3bug",
+	"dbeug",
+	"dbug",
+	"ddebug",
+	"debbug",
+	"debg",
+	"debgu",
+	"debu",
+	"debu9",
+	"debug-js",
+	"debug-node",
+	"debugg",
+	"debugjs",
+	"debuug",
+	"deebug",
+	"deubg",
+	"deug",
+	"ebug",
+	"edbug"
+];
+var dotenv = [
+	"dot-env",
+	"dotenv-node",
+	"dotenvjs",
+	"dotevn"
+];
+var electron = [
+	"3lectron",
+	"eectron",
+	"eelctron",
+	"eelectron",
+	"el3ctron",
+	"elcetron",
+	"elctron",
+	"elecctron",
+	"elecron",
+	"elecrton",
+	"electon",
+	"electorn",
+	"electr0n",
+	"electrn",
+	"electrno",
+	"electro",
+	"electrom",
+	"electron-node",
+	"electronn",
+	"electroon",
+	"electrron",
+	"electtron",
+	"eleectron",
+	"eletcron",
+	"eletron",
+	"ellectron",
+	"lectron",
+	"leectron"
+];
+var esbuild = [
+	"asbuild",
+	"ebuild",
+	"esbuild-node",
+	"esbuildjs",
+	"ezbuild",
+	"sbuild"
+];
+var eslint = [
+	"aslint",
+	"elint",
+	"eslint-js",
+	"eslint-node",
+	"eslit",
+	"ezlint",
+	"slint"
+];
+var express = [
+	"eexpress",
+	"epress",
+	"epxress",
+	"experss",
+	"expess",
+	"exppress",
+	"expreess",
+	"expres",
+	"express-node",
+	"expressjs",
+	"expresss",
+	"exprress",
+	"exprses",
+	"exprss",
+	"exress",
+	"exrpess",
+	"exxpress",
+	"xepress",
+	"xpress"
+];
+var fastify = [
+	"astify"
+];
+var firebase = [
+	"firebasejs"
+];
+var formidable = [
+	"form1dable"
+];
+var glob = [
+	"glb",
+	"glo",
+	"glob-js",
+	"globjs",
+	"gob",
+	"golb",
+	"lob"
+];
+var got = [
+	"go",
+	"goot",
+	"gotjs",
+	"gott",
+	"gt",
+	"gto",
+	"ogt",
+	"ot",
+	"qot"
+];
+var helmet = [
+	"helmetjs",
+	"helnet"
+];
+var hono = [
+	"homo",
+	"hon",
+	"hoo",
+	"hoon",
+	"ohno",
+	"ono"
+];
+var inquirer = [
+	"inquire",
+	"inquirer-js",
+	"nquirer"
+];
+var ioredis = [
+	"iredis"
+];
+var jest = [
+	"ejst",
+	"est",
+	"jast",
+	"jes",
+	"jestjs",
+	"jestt",
+	"jet",
+	"jets",
+	"jst"
+];
+var jimp = [
+	"imp",
+	"jim",
+	"jip",
+	"jmp"
+];
+var joi = [
+	"ji",
+	"jio",
+	"jo",
+	"joii",
+	"jol",
+	"oi",
+	"oji"
+];
+var jsdom = [
+	"jdom",
+	"jsdm",
+	"jsdo",
+	"jsdom-js",
+	"jsdon",
+	"jsom",
+	"sdom"
+];
+var jsonwebtoken = [
+	"jsonwebtoken-js",
+	"jsonwebtoken-node"
+];
+var koa = [
+	"ka",
+	"kao",
+	"ko",
+	"koaa",
+	"koajs",
+	"koe",
+	"oa",
+	"oka"
+];
+var lodash = [
+	"1odash",
+	"iodash",
+	"l0dash",
+	"ldash",
+	"ldoash",
+	"llodash",
+	"lo-dash",
+	"loadsh",
+	"loash",
+	"lobash",
+	"lod4sh",
+	"lodaash",
+	"lodah",
+	"lodahs",
+	"lodas",
+	"lodash-node",
+	"lodashh",
+	"lodassh",
+	"loddash",
+	"lodesh",
+	"lodsah",
+	"lodsh",
+	"loodash",
+	"odash",
+	"oldash"
+];
+var lucia = [
+	"luca",
+	"luci",
+	"lucie"
+];
+var luxon = [
+	"luon",
+	"luxo",
+	"luxon-js"
+];
+var micromatch = [
+	"imcromatch",
+	"mciromatch",
+	"micormatch",
+	"micrmoatch",
+	"micro-match",
+	"microamtch",
+	"micromacth",
+	"micromathc",
+	"micromtach",
+	"mircomatch"
+];
+var minimatch = [
+	"minimath"
+];
+var mocha = [
+	"mcha",
+	"mmocha",
+	"moca",
+	"moch",
+	"mocha-js",
+	"moha",
+	"nocha",
+	"ocha"
+];
+var moment = [
+	"m0ment",
+	"mment",
+	"mmoent",
+	"mmoment",
+	"moemnt",
+	"moent",
+	"mom3nt",
+	"momeent",
+	"momemt",
+	"momen",
+	"momen7",
+	"momennt",
+	"moment-js",
+	"momentjs",
+	"momentt",
+	"momet",
+	"mometn",
+	"momment",
+	"momnet",
+	"momnt",
+	"monent",
+	"mooment",
+	"oment",
+	"omment"
+];
+var mongoose = [
+	"mognoose",
+	"mogoose",
+	"mongoos",
+	"mongose",
+	"monqoose",
+	"moongoose"
+];
+var morgan = [
+	"moran",
+	"organ"
+];
+var multer = [
+	"muler",
+	"multer-js",
+	"muter"
+];
+var mysql2 = [
+	"mysql"
+];
+var next = [
+	"ext",
+	"mext",
+	"n3xt",
+	"naxt",
+	"net",
+	"netx",
+	"nex",
+	"next-js",
+	"next-node",
+	"nextjs",
+	"nxt"
+];
+var nodemailer = [
+	"node-mailer",
+	"nodemailer-js"
+];
+var nodemon = [
+	"nodemo",
+	"nodemonjs",
+	"nodmeon"
+];
+var ora = [
+	"oar",
+	"or",
+	"ora-node",
+	"ore",
+	"ra",
+	"roa"
+];
+var parcel = [
+	"arcel",
+	"parce",
+	"parceljs"
+];
+var passport = [
+	"passport-js"
+];
+var phaser = [
+	"phase",
+	"phaser-node"
+];
+var pino = [
+	"ino",
+	"pimo",
+	"pin",
+	"pino-node",
+	"pinojs",
+	"pio",
+	"pion"
+];
+var playwright = [
+	"playright",
+	"playwright-js"
+];
+var postcss = [
+	"postcss-js",
+	"postcss-node",
+	"potscss"
+];
+var prettier = [
+	"pettier",
+	"pprettier",
+	"pretier",
+	"prettierjs",
+	"prettierr",
+	"prtetier"
+];
+var prisma = [
+	"prima",
+	"prism",
+	"prisma-js",
+	"prismajs",
+	"prizma"
+];
+var puppeteer = [
+	"pupeteer"
+];
+var ramda = [
+	"rada",
+	"rama",
+	"ramd",
+	"randa"
+];
+var react = [
+	"eact",
+	"eract",
+	"r3act",
+	"raact",
+	"ract",
+	"raect",
+	"re4ct",
+	"reaact",
+	"reac",
+	"reac7",
+	"reacct",
+	"react-node",
+	"reactjs",
+	"reactt",
+	"reat",
+	"reatc",
+	"recat",
+	"rect",
+	"reeact",
+	"reect",
+	"rreact"
+];
+var redis = [
+	"erdis",
+	"radis",
+	"rdis",
+	"redi",
+	"redis-js",
+	"redis-node",
+	"rediss",
+	"rediz",
+	"reds",
+	"reis",
+	"rredis"
+];
+var resend = [
+	"resen",
+	"rsend"
+];
+var rollup = [
+	"ollup",
+	"rollup-js",
+	"rollup-node"
+];
+var sass = [
+	"ass",
+	"asss",
+	"sas",
+	"sass-node",
+	"sess",
+	"ssas",
+	"sss"
+];
+var semver = [
+	"emver",
+	"seemver",
+	"semver-node",
+	"semvre",
+	"senver",
+	"sever"
+];
+var sequelize = [
+	"sequelize-js",
+	"sequelize-node"
+];
+var sharp = [
+	"harp",
+	"shap",
+	"shar",
+	"sharp-js",
+	"sharpjs"
+];
+var stripe = [
+	"stipe",
+	"strip",
+	"stripe-node",
+	"tripe"
+];
+var supabase = [
+	"supabase-js"
+];
+var svelte = [
+	"suelte",
+	"svelt3",
+	"svelte-js",
+	"sveltejs",
+	"velte"
+];
+var tailwindcss = [
+	"tailwindcss-js"
+];
+var tauri = [
+	"auri",
+	"taui"
+];
+var three = [
+	"hree",
+	"htree",
+	"thee",
+	"there",
+	"three-js",
+	"three-node",
+	"tree"
+];
+var tsx = [
+	"stx",
+	"sx",
+	"ts",
+	"tsxx",
+	"ttsx",
+	"tx",
+	"txs",
+	"tzx"
+];
+var typescript = [
+	"ttypescript",
+	"typecript",
+	"typescipt",
+	"typescript-node",
+	"typescriptjs",
+	"typescrit",
+	"typescritp"
+];
+var underscore = [
+	"udnerscore",
+	"undercore",
+	"underscoer",
+	"underscore-node",
+	"underscroe",
+	"undersocre",
+	"undesrcore"
+];
+var uuid = [
+	"uid",
+	"uud",
+	"uudi",
+	"uui",
+	"uuid-js",
+	"uuid-node",
+	"uuidjs",
+	"vuid"
+];
+var vite = [
+	"ite",
+	"vie",
+	"vit",
+	"vita",
+	"vite-node",
+	"vitee",
+	"vlte",
+	"vte"
+];
+var vitest = [
+	"itest",
+	"uitest",
+	"vitestjs",
+	"vitezt",
+	"vittest",
+	"vtest"
+];
+var vue = [
+	"ue",
+	"uue",
+	"uve",
+	"ve",
+	"veu",
+	"vu",
+	"vu3",
+	"vua",
+	"vue-node",
+	"vuee",
+	"vuejs",
+	"vuue",
+	"vve",
+	"vvue"
+];
+var webpack = [
+	"web-pack",
+	"weback",
+	"webpac",
+	"webpack-node",
+	"webpackjs",
+	"webpak",
+	"weebpack",
+	"wepack",
+	"wepback"
+];
+var winston = [
+	"winson",
+	"winston-js",
+	"winstoon"
+];
+var yup = [
+	"up",
+	"uyp",
+	"yp",
+	"yu",
+	"yupjs",
+	"yupp"
+];
+var zod = [
+	"od",
+	"zd",
+	"zdo",
+	"zo",
+	"zob",
+	"zod-js",
+	"zodjs"
+];
+const autoBlocklistData = {
+	ajv: ajv,
+	angular: angular,
+	autoprefixer: autoprefixer,
+	"aws-sdk": [
+	"awssdk",
+	"ews-sdk"
+],
+	axios: axios,
+	babel: babel,
+	bcrypt: bcrypt,
+	bcryptjs: bcryptjs,
+	"body-parser": [
+	"body-paresr",
+	"body-parse",
+	"body-parser-js",
+	"body_parser"
+],
+	bunyan: bunyan,
+	chai: chai,
+	chalk: chalk,
+	cheerio: cheerio,
+	color: color,
+	colors: colors,
+	commander: commander,
+	"cookie-parser": [
+	"cookie-parse",
+	"cookieparser"
+],
+	cors: cors,
+	"cross-env": [
+	"crossenv"
+],
+	"date-fns": [
+	"data-fns",
+	"date-fn"
+],
+	dayjs: dayjs,
+	debug: debug,
+	dotenv: dotenv,
+	electron: electron,
+	esbuild: esbuild,
+	eslint: eslint,
+	express: express,
+	fastify: fastify,
+	firebase: firebase,
+	formidable: formidable,
+	glob: glob,
+	got: got,
+	helmet: helmet,
+	hono: hono,
+	inquirer: inquirer,
+	ioredis: ioredis,
+	jest: jest,
+	jimp: jimp,
+	joi: joi,
+	jsdom: jsdom,
+	jsonwebtoken: jsonwebtoken,
+	koa: koa,
+	lodash: lodash,
+	lucia: lucia,
+	luxon: luxon,
+	micromatch: micromatch,
+	minimatch: minimatch,
+	mocha: mocha,
+	moment: moment,
+	mongoose: mongoose,
+	morgan: morgan,
+	multer: multer,
+	mysql2: mysql2,
+	next: next,
+	"node-fetch": [
+	"node-fecth",
+	"node-fethc",
+	"node.fetch"
+],
+	nodemailer: nodemailer,
+	nodemon: nodemon,
+	ora: ora,
+	parcel: parcel,
+	passport: passport,
+	phaser: phaser,
+	pino: pino,
+	playwright: playwright,
+	postcss: postcss,
+	prettier: prettier,
+	prisma: prisma,
+	puppeteer: puppeteer,
+	ramda: ramda,
+	react: react,
+	"react-dom": [
+	"eact-dom",
+	"eract-dom",
+	"r3act-dom",
+	"ract-dom",
+	"raect-dom",
+	"re4ct-dom",
+	"reaact-dom",
+	"reac-dom",
+	"reac7-dom",
+	"reacct-dom",
+	"react-bom",
+	"react-d0m",
+	"react-ddom",
+	"react-dm",
+	"react-dmo",
+	"react-do",
+	"react-domm",
+	"react-don",
+	"react-doom",
+	"react-odm",
+	"react-om",
+	"react.dom",
+	"reactdom",
+	"reactt-dom",
+	"reat-dom",
+	"reatc-dom",
+	"recat-dom",
+	"rect-dom",
+	"reeact-dom",
+	"rreact-dom"
+],
+	redis: redis,
+	resend: resend,
+	rollup: rollup,
+	sass: sass,
+	semver: semver,
+	sequelize: sequelize,
+	sharp: sharp,
+	"socket.io": [
+	"ocket.io",
+	"oscket.io",
+	"scket.io",
+	"scoket.io",
+	"soccket.io",
+	"socekt.io",
+	"socet.io",
+	"sock3t.io",
+	"socke.io",
+	"socke7.io",
+	"sockeet.io",
+	"socket.1o",
+	"socket.i",
+	"socket.iio",
+	"socket.ioo",
+	"socket.lo",
+	"socket.o",
+	"socket.oi",
+	"sockett.io",
+	"sockket.io",
+	"sockt.io",
+	"sockte.io",
+	"sokcet.io",
+	"soket.io",
+	"soocket.io",
+	"ssocket.io"
+],
+	stripe: stripe,
+	supabase: supabase,
+	svelte: svelte,
+	tailwindcss: tailwindcss,
+	tauri: tauri,
+	three: three,
+	"ts-node": [
+	"tts-node"
+],
+	tsx: tsx,
+	typescript: typescript,
+	underscore: underscore,
+	uuid: uuid,
+	vite: vite,
+	vitest: vitest,
+	vue: vue,
+	webpack: webpack,
+	winston: winston,
+	yup: yup,
+	zod: zod
+};
+
+var typosquatsManual;
+var hasRequiredTyposquatsManual;
+
+function requireTyposquatsManual () {
+	if (hasRequiredTyposquatsManual) return typosquatsManual;
+	hasRequiredTyposquatsManual = 1;
+	typosquatsManual = {
+		"@tanstack/start": [
+		"start-tanstack-app",
+		"tanstack",
+		"tanstack-app",
+		"tanstack-start"
+	]
+	};
+	return typosquatsManual;
+}
+
+var typosquatsManualExports = /*@__PURE__*/ requireTyposquatsManual();
+const manualBlocklistData = /*@__PURE__*/getDefaultExportFromCjs(typosquatsManualExports);
+
+const SUBSTITUTIONS = {
+  a: ["4", "e"],
+  b: ["d"],
+  d: ["b"],
+  e: ["3", "a"],
+  g: ["9", "q"],
+  i: ["1", "l"],
+  l: ["1", "i"],
+  m: ["n"],
+  n: ["m"],
+  o: ["0"],
+  s: ["5", "z"],
+  t: ["7"],
+  u: ["v"],
+  v: ["u"]
+};
+const SCOPED_BRAND_SUFFIXES = ["app", "cli", "core", "kit", "lib", "pkg", "sdk"];
+const generateVariants = (name) => {
+  const variants = /* @__PURE__ */ new Set();
+  if (name.length < 3) {
+    return variants;
+  }
+  for (let i = 0; i < name.length; i++) {
+    const isSeparator = name[i] === "-" || name[i] === "." || name[i] === "_";
+    if (!isSeparator) {
+      variants.add(name.slice(0, i) + name.slice(i + 1));
+    }
+    if (!isSeparator) {
+      variants.add(name.slice(0, i) + name[i] + name.slice(i));
+    }
+    if (i < name.length - 1 && name[i] !== name[i + 1]) {
+      const nextIsSeparator = name[i + 1] === "-" || name[i + 1] === "." || name[i + 1] === "_";
+      if (!isSeparator && !nextIsSeparator) {
+        const chars = name.split("");
+        [chars[i], chars[i + 1]] = [chars[i + 1], chars[i]];
+        variants.add(chars.join(""));
+      }
+    }
+    const ch = name[i].toLowerCase();
+    const subs = SUBSTITUTIONS[ch];
+    if (subs) {
+      for (const replacement of subs) {
+        variants.add(name.slice(0, i) + replacement + name.slice(i + 1));
+      }
+    }
+  }
+  const SEP_RE = /[-._]/g;
+  const hasSeparator = SEP_RE.test(name);
+  if (hasSeparator) {
+    variants.add(name.replaceAll(SEP_RE, ""));
+    variants.add(name.replaceAll(SEP_RE, "-"));
+    variants.add(name.replaceAll(SEP_RE, "."));
+    variants.add(name.replaceAll(SEP_RE, "_"));
+  } else if (name.length > 5) {
+    for (let i = 2; i < name.length - 2; i++) {
+      variants.add(`${name.slice(0, i)}-${name.slice(i)}`);
+      variants.add(`${name.slice(0, i)}.${name.slice(i)}`);
+      variants.add(`${name.slice(0, i)}_${name.slice(i)}`);
+    }
+  }
+  if (!name.startsWith("@")) {
+    variants.add(`${name}-js`);
+    variants.add(`${name}js`);
+    variants.add(`${name}-node`);
+  }
+  if (name.startsWith("@")) {
+    const slash = name.indexOf("/");
+    if (slash > 1 && slash < name.length - 1) {
+      const scope = name.slice(1, slash);
+      const sub = name.slice(slash + 1);
+      if (scope.length >= 3) {
+        variants.add(scope);
+      }
+      for (const sep of ["", "-", ".", "_"]) {
+        variants.add(`${scope}${sep}${sub}`);
+        variants.add(`${sub}${sep}${scope}`);
+      }
+      for (const suffix of SCOPED_BRAND_SUFFIXES) {
+        variants.add(`${scope}-${suffix}`);
+        variants.add(`${sub}-${scope}-${suffix}`);
+        variants.add(`${suffix}-${scope}-${sub}`);
+      }
+    }
+  }
+  variants.delete(name);
+  return variants;
+};
+let cachedBlocklist;
+let cachedReverseLookup;
+const loadBlocklist = () => {
+  if (!cachedBlocklist) {
+    const merged = {};
+    for (const source of [autoBlocklistData, manualBlocklistData]) {
+      for (const [legitimate, typosquats] of Object.entries(source)) {
+        const bucket = merged[legitimate] ?? (merged[legitimate] = []);
+        for (const typo of typosquats) {
+          if (!bucket.includes(typo)) {
+            bucket.push(typo);
+          }
+        }
+      }
+    }
+    cachedBlocklist = merged;
+  }
+  return cachedBlocklist;
+};
+const getReverseLookup = () => {
+  if (!cachedReverseLookup) {
+    cachedReverseLookup = /* @__PURE__ */ new Map();
+    for (const [legitimate, typosquats] of Object.entries(loadBlocklist())) {
+      for (const typo of typosquats) {
+        cachedReverseLookup.set(typo, legitimate);
+      }
+    }
+  }
+  return cachedReverseLookup;
+};
+const bareName = (packageName) => packageName.startsWith("@") ? packageName.split("/")[1] ?? packageName : packageName;
+const checkTyposquat = (packageName) => {
+  const bare = bareName(packageName);
+  const blocklisted = getReverseLookup().get(bare);
+  if (blocklisted) {
+    return { input: packageName, legitimate: blocklisted, method: "blocklist" };
+  }
+  for (const legitimate of Object.keys(loadBlocklist())) {
+    if (generateVariants(legitimate).has(bare)) {
+      return { input: packageName, legitimate, method: "heuristic" };
+    }
+  }
+  return void 0;
+};
+const checkTyposquats = (packageNames, allowlist) => {
+  const allowed = allowlist ? new Set(allowlist) : void 0;
+  const matches = [];
+  for (const name of packageNames) {
+    if (allowed?.has(name)) {
+      continue;
+    }
+    const match = checkTyposquat(name);
+    if (match) {
+      matches.push(match);
+    }
+  }
+  return matches;
+};
+const printTyposquatWarnings = (matches, context) => {
+  pail.warn("");
+  pail.warn(red(`Possible typosquat${matches.length === 1 ? "" : "s"} ${context}:`));
+  for (const match of matches) {
+    const method = match.method === "blocklist" ? "known typosquat" : "similar name";
+    pail.warn(`  ${yellow("⚠")} ${red(match.input)} — did you mean ${yellow(match.legitimate)}? (${method})`);
+  }
+  pail.warn("");
+};
+const askConfirmation = async (question) => {
+  if (!process.stdin.isTTY) {
+    pail.warn("Aborting: potential typosquat detected in non-interactive mode. Use --no-typosquat-check to skip.");
+    return void 0;
+  }
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  const answer = await new Promise((resolve) => {
+    rl.question(question, (a) => {
+      resolve(a.trim().toLowerCase());
+    });
+  });
+  rl.close();
+  return answer;
+};
+const runTyposquatCheck = async (packageNames, allowlist) => {
+  const matches = checkTyposquats(packageNames, allowlist);
+  if (matches.length === 0) {
+    return { ok: true, packages: packageNames };
+  }
+  printTyposquatWarnings(matches, "detected");
+  const answer = await askConfirmation(
+    `Use suggested package${matches.length === 1 ? "" : "s"} instead? [S]uggested / [y]es, keep original / [N]o, abort (default: N) `
+  );
+  if (answer === void 0) {
+    return { ok: false, packages: packageNames };
+  }
+  if (answer === "s" || answer === "suggested") {
+    const replacements = new Map(matches.map((m) => [m.input, m.legitimate]));
+    const corrected = packageNames.map((name) => replacements.get(name) ?? name);
+    return { ok: true, packages: corrected };
+  }
+  if (answer === "y" || answer === "yes") {
+    return { ok: true, packages: packageNames };
+  }
+  return { ok: false, packages: packageNames };
+};
+const ALIAS_RE = /^(?:npm|pnpm|yarn):(.+?)(?:@.*)?$/;
+const parseAliasTarget = (value) => {
+  const match = ALIAS_RE.exec(value);
+  return match?.[1];
+};
+const readDepsFromPackageJson = (packageJsonPath) => {
+  if (!isAccessibleSync(packageJsonPath)) {
+    return [];
+  }
+  const pkg = readJsonSync(packageJsonPath);
+  const allDeps = {
+    ...pkg.dependencies,
+    ...pkg.devDependencies,
+    ...pkg.optionalDependencies,
+    ...pkg.peerDependencies
+  };
+  const names = /* @__PURE__ */ new Set();
+  for (const [key, value] of Object.entries(allDeps)) {
+    names.add(key);
+    const aliasTarget = parseAliasTarget(value);
+    if (aliasTarget) {
+      names.add(aliasTarget);
+    }
+  }
+  return [...names];
+};
+const scanDepsForTyposquats = async (cwd, allowlist) => {
+  const packageJsonPath = join(cwd, "package.json");
+  const depNames = readDepsFromPackageJson(packageJsonPath);
+  if (depNames.length === 0) {
+    return true;
+  }
+  const matches = checkTyposquats(depNames, allowlist);
+  if (matches.length === 0) {
+    return true;
+  }
+  printTyposquatWarnings(matches, "in package.json dependencies");
+  pail.warn("Fix the package name in package.json before proceeding.");
+  const answer = await askConfirmation("Continue anyway? [y/N] ");
+  return answer === "y" || answer === "yes";
+};
+
+export { runTyposquatCheck as r, scanDepsForTyposquats as s };