@vltpkg/cli-js 1.0.2 → 1.0.4

package/{chunk-3MBSXZ62.js → chunk-WNDUKE42.js}

@@ -13,16 +13,19 @@ import {
   asDepID,
   baseDepID,
   splitDepID
-} from "./chunk-FM5DQZVN.js";
-import {
-  I
-} from "./chunk-7NHXV6AH.js";
+} from "./chunk-OCJDISSI.js";
 import {
   loadPackageJson
 } from "./chunk-E74WGW5C.js";
+import {
+  I
+} from "./chunk-LPIBYUMT.js";
 import {
   XDG
 } from "./chunk-XNLSTHDK.js";
+import {
+  defaultRegistryName
+} from "./chunk-IITIX4ID.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";
@@ -250,16 +253,20 @@ var __CODE_SPLIT_SCRIPT_NAME = resolve(import.meta.dirname, "security-archive-sr
 // ../../src/security-archive/src/index.ts
 var SOCKET_API_V0_URL = "https://api.socket.dev/v0/purl?alerts=true";
 var SOCKET_PUBLIC_API_TOKEN = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
-var targetSecurityRegisty = "https://registry.npmjs.org/";
-var usesTargetRegistry = (node) => {
-  const depID = node.id;
-  const specOptions = node.options;
-  const [nodeType, nodeRegistry] = splitDepID(depID);
-  if (nodeType !== "registry") {
-    return false;
-  }
-  const reg = specOptions.registries?.[nodeRegistry];
-  return reg === targetSecurityRegisty;
+var npmRegistryURL = "https://registry.npmjs.org/";
+var normalizeRegistryURL = (url) => url.endsWith("/") ? url : `${url}/`;
+var nodeRegistryURL = (node) => {
+  const [type, reg] = splitDepID(node.id);
+  if (type !== "registry") return;
+  const url = /^https?:\/\//.test(reg) ? reg : node.options.registries?.[reg];
+  return url ? normalizeRegistryURL(url) : void 0;
+};
+var usesNpmRegistry = (node) => {
+  const origin = nodeRegistryURL(node);
+  if (!origin) return false;
+  if (origin === npmRegistryURL) return true;
+  const npmAlias = node.options.registries?.[defaultRegistryName];
+  return !!npmAlias && normalizeRegistryURL(npmAlias) === origin;
 };
 var { version } = loadPackageJson(
   import.meta.filename,
@@ -412,7 +419,7 @@ var SecurityArchive = class _SecurityArchive extends I {
     const queue = /* @__PURE__ */ new Set();
     for (const node of this.#nodesByID.values()) {
       const normalizedId = baseDepID(node.id);
-      if (usesTargetRegistry(node) && !this.has(normalizedId) && !this.#expired.has(normalizedId)) {
+      if (usesNpmRegistry(node) && !this.has(normalizedId) && !this.#expired.has(normalizedId)) {
         const purl = `pkg:npm/${node.name}@${node.version}`;
         queue.add({ purl });
       }
@@ -512,12 +519,12 @@ var SecurityArchive = class _SecurityArchive extends I {
     }
   }
   /**
-   * Validates that all public-registry packages in the nodes
+   * Validates that all npm-ecosystem packages in the nodes
    * have a valid report data in the current in-memory cache.
    */
   #validateReportData() {
     for (const node of this.#nodesByID.values()) {
-      if (usesTargetRegistry(node)) {
+      if (usesNpmRegistry(node)) {
         if (!this.has(baseDepID(node.id))) {
           this.ok = false;
           return;

package/{chunk-NS4VFXHX.js → chunk-XU5SMHXP.js}

@@ -12,7 +12,7 @@ var require = _vlt_createRequire(import.meta.filename);
 import {
   Spec,
   kCustomInspect
-} from "./chunk-Q46JRSZU.js";
+} from "./chunk-IITIX4ID.js";
 
 // ../../src/spec/src/index.ts
 import { homedir } from "node:os";

package/{chunk-CTDFRLS4.js → chunk-YRKCPGWZ.js}

@@ -13,17 +13,17 @@ import {
   Ct,
   Qn,
   require_lib
-} from "./chunk-FWKQ7YDF.js";
+} from "./chunk-ZWKI5OSF.js";
 import {
   minimatch
-} from "./chunk-F2GLBPGQ.js";
+} from "./chunk-PDLEQEZ3.js";
+import {
+  Spec
+} from "./chunk-XU5SMHXP.js";
 import {
   parse,
   stringify
 } from "./chunk-HTOTG4TS.js";
-import {
-  Spec
-} from "./chunk-NS4VFXHX.js";
 import {
   error
 } from "./chunk-WZWDS3W4.js";