inup 1.5.5 → 1.6.0

package/dist/services/background-audit.js

@@ -3,11 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BackgroundAuditTracker = void 0;
 const utils_1 = require("../utils");
 class BackgroundAuditTracker {
-    constructor() {
-        this.pending = new Map();
-        this.inFlight = new Set();
-        this.completed = new Set();
-    }
+    pending = new Map();
+    inFlight = new Set();
+    completed = new Set();
     enqueue(packages) {
         let added = 0;
         for (const pkg of packages) {

package/dist/services/cache-manager.js

@@ -3,13 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.packageCache = exports.CacheManager = void 0;
 const config_1 = require("../config");
 const persistent_cache_1 = require("./persistent-cache");
-/**
- * Unified cache manager that handles both in-memory and persistent disk caching.
- * Consolidates caching logic used across registry services.
- */
+// Single TTL policy for both memory and disk.
 class CacheManager {
+    memoryCache = new Map();
+    ttl;
     constructor(ttl = config_1.CACHE_TTL) {
-        this.memoryCache = new Map();
         this.ttl = ttl;
     }
     /**
@@ -24,11 +22,11 @@ class CacheManager {
         }
         // Check persistent disk cache (survives restarts)
         const diskCached = persistent_cache_1.persistentCache.get(key);
-        if (diskCached) {
+        if (diskCached && Date.now() - diskCached.timestamp < this.ttl) {
             // Populate in-memory cache for subsequent accesses
             this.memoryCache.set(key, {
                 data: diskCached,
-                timestamp: Date.now(),
+                timestamp: diskCached.timestamp,
             });
             return diskCached;
         }

package/dist/services/http/inflight.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InflightMap = void 0;
+class InflightMap {
+    map = new Map();
+    async dedupe(key, fn) {
+        const existing = this.map.get(key);
+        if (existing) {
+            return await existing;
+        }
+        const promise = fn().finally(() => {
+            this.map.delete(key);
+        });
+        this.map.set(key, promise);
+        return await promise;
+    }
+    clear() {
+        this.map.clear();
+    }
+}
+exports.InflightMap = InflightMap;
+//# sourceMappingURL=inflight.js.map

package/dist/services/http/retry.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isTransientNetworkError = exports.isRetryableStatus = exports.sleep = void 0;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+exports.sleep = sleep;
+const isRetryableStatus = (statusCode) => statusCode === 408 || statusCode === 429 || statusCode >= 500;
+exports.isRetryableStatus = isRetryableStatus;
+const isTransientNetworkError = (error) => {
+    if (!(error instanceof Error)) {
+        return false;
+    }
+    const maybeCode = error.code;
+    return (error.name === 'AbortError' ||
+        error.name === 'HeadersTimeoutError' ||
+        error.name === 'BodyTimeoutError' ||
+        error.name === 'ConnectTimeoutError' ||
+        error.name === 'SocketError' ||
+        maybeCode === 'UND_ERR_HEADERS_TIMEOUT' ||
+        maybeCode === 'UND_ERR_BODY_TIMEOUT' ||
+        maybeCode === 'UND_ERR_CONNECT_TIMEOUT' ||
+        maybeCode === 'UND_ERR_SOCKET' ||
+        maybeCode === 'ENOTFOUND' ||
+        maybeCode === 'EAI_AGAIN' ||
+        maybeCode === 'ECONNRESET' ||
+        maybeCode === 'ECONNREFUSED' ||
+        maybeCode === 'ETIMEDOUT' ||
+        maybeCode === 'EPIPE');
+};
+exports.isTransientNetworkError = isTransientNetworkError;
+//# sourceMappingURL=retry.js.map

package/dist/services/index.js

@@ -18,7 +18,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./npm-registry"), exports);
-__exportStar(require("./jsdelivr-registry"), exports);
 __exportStar(require("../features/changelog"), exports);
 __exportStar(require("./version-checker"), exports);
 __exportStar(require("./vulnerability-checker"), exports);

package/dist/services/npm-registry.js

@@ -1,42 +1,8 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.fetchPackageVersions = fetchPackageVersions;
 exports.clearPackageCache = clearPackageCache;
 exports.closeRegistryPool = closeRegistryPool;
-const semver = __importStar(require("semver"));
 const undici_1 = require("undici");
 const node_zlib_1 = require("node:zlib");
 const node_util_1 = require("node:util");
@@ -44,8 +10,10 @@ const gunzipAsync = (0, node_util_1.promisify)(node_zlib_1.gunzip);
 const inflateAsync = (0, node_util_1.promisify)(node_zlib_1.inflate);
 const brotliDecompressAsync = (0, node_util_1.promisify)(node_zlib_1.brotliDecompress);
 const config_1 = require("../config");
-const jsdelivr_registry_1 = require("./jsdelivr-registry");
-const inFlightLookups = new Map();
+const version_1 = require("../utils/version");
+const retry_1 = require("./http/retry");
+const inflight_1 = require("./http/inflight");
+const inFlightLookups = new inflight_1.InflightMap();
 const registryOrigin = new URL(config_1.NPM_REGISTRY_URL).origin;
 const registryPathPrefix = new URL(config_1.NPM_REGISTRY_URL).pathname.replace(/\/$/, '');
 // Few connections + many requests per connection = maximum keep-alive reuse.
@@ -54,60 +22,18 @@ const registryPathPrefix = new URL(config_1.NPM_REGISTRY_URL).pathname.replace(/
 const registryPool = new undici_1.Pool(registryOrigin, {
     connections: 6,
     pipelining: 1,
-    keepAliveTimeout: 30000,
-    keepAliveMaxTimeout: 600000,
+    keepAliveTimeout: 30_000,
+    keepAliveMaxTimeout: 600_000,
     headersTimeout: 0,
     bodyTimeout: 0,
-    connectTimeout: 15000,
+    connectTimeout: 15_000,
     allowH2: false,
 });
 const MAX_REGISTRY_ATTEMPTS = 3;
 const RETRY_BACKOFF_MS = [500, 1500, 3000];
-const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-const isRetryableStatus = (statusCode) => statusCode === 408 || statusCode === 429 || statusCode >= 500;
-const isTransientNetworkError = (error) => {
-    if (!(error instanceof Error)) {
-        return false;
-    }
-    const maybeCode = error.code;
-    return (error.name === 'AbortError' ||
-        error.name === 'HeadersTimeoutError' ||
-        error.name === 'BodyTimeoutError' ||
-        error.name === 'ConnectTimeoutError' ||
-        error.name === 'SocketError' ||
-        maybeCode === 'UND_ERR_HEADERS_TIMEOUT' ||
-        maybeCode === 'UND_ERR_BODY_TIMEOUT' ||
-        maybeCode === 'UND_ERR_CONNECT_TIMEOUT' ||
-        maybeCode === 'UND_ERR_SOCKET' ||
-        maybeCode === 'ENOTFOUND' ||
-        maybeCode === 'EAI_AGAIN' ||
-        maybeCode === 'ECONNRESET' ||
-        maybeCode === 'ECONNREFUSED' ||
-        maybeCode === 'ETIMEDOUT' ||
-        maybeCode === 'EPIPE');
-};
-const fetchFromJsdelivrFallback = async (packageName, currentVersion) => {
-    const jsdelivrData = await (0, jsdelivr_registry_1.getAllPackageDataFromJsdelivr)([packageName], currentVersion ? new Map([[packageName, currentVersion]]) : undefined);
-    return jsdelivrData.get(packageName) ?? { latestVersion: 'unknown', allVersions: [] };
-};
 async function getFreshPackageData(packageName, currentVersion) {
     const cacheKey = `${packageName}@${currentVersion ?? ''}`;
-    const inFlight = inFlightLookups.get(cacheKey);
-    if (inFlight) {
-        return await inFlight;
-    }
-    const lookupPromise = fetchPackageFromRegistryWithFallback(packageName, currentVersion).finally(() => {
-        inFlightLookups.delete(cacheKey);
-    });
-    inFlightLookups.set(cacheKey, lookupPromise);
-    return await lookupPromise;
-}
-function parseVersions(raw) {
-    const data = JSON.parse(raw);
-    const allVersions = Object.keys(data.versions || {}).filter((v) => /^[0-9]+\.[0-9]+\.[0-9]+$/.test(v));
-    const sortedVersions = allVersions.sort(semver.rcompare);
-    const latestVersion = sortedVersions.length > 0 ? sortedVersions[0] : 'unknown';
-    return { latestVersion, allVersions };
+    return inFlightLookups.dedupe(cacheKey, () => fetchPackageFromRegistry(packageName));
 }
 const encodeRegistryPath = (packageName) => {
     const encodedName = packageName.startsWith('@')
@@ -130,7 +56,7 @@ async function attemptRegistryFetch(path) {
         });
         if (statusCode < 200 || statusCode >= 300) {
             await body.dump().catch(() => undefined);
-            if (isRetryableStatus(statusCode)) {
+            if ((0, retry_1.isRetryableStatus)(statusCode)) {
                 return { kind: 'retryable' };
             }
             return { kind: 'not-found' };
@@ -153,10 +79,10 @@ async function attemptRegistryFetch(path) {
         else {
             decoded = raw;
         }
-        return { kind: 'success', data: parseVersions(decoded.toString('utf8')) };
+        return { kind: 'success', data: (0, version_1.parseVersions)(decoded.toString('utf8')) };
     }
     catch (error) {
-        if (isTransientNetworkError(error)) {
+        if ((0, retry_1.isTransientNetworkError)(error)) {
             return { kind: 'transient' };
         }
         // Unknown error: treat as transient so we try the fallback rather than
@@ -174,24 +100,20 @@ async function fetchFromRegistryWithRetries(path) {
         lastOutcome = outcome;
         if (attempt < MAX_REGISTRY_ATTEMPTS - 1) {
             const backoff = RETRY_BACKOFF_MS[Math.min(attempt, RETRY_BACKOFF_MS.length - 1)];
-            await sleep(backoff);
+            await (0, retry_1.sleep)(backoff);
         }
     }
     return lastOutcome;
 }
-async function fetchPackageFromRegistryWithFallback(packageName, currentVersion) {
+async function fetchPackageFromRegistry(packageName) {
     const path = encodeRegistryPath(packageName);
     const outcome = await fetchFromRegistryWithRetries(path);
     if (outcome.kind === 'success') {
         return outcome.data;
     }
-    if (outcome.kind === 'not-found') {
-        return { latestVersion: 'unknown', allVersions: [] };
-    }
-    // Only reach here after exhausted retries against real errors — try jsdelivr
-    // as last-resort safety net so we don't silently return 'unknown'.
-    const fallback = await fetchFromJsdelivrFallback(packageName, currentVersion).catch(() => null);
-    return fallback ?? { latestVersion: 'unknown', allVersions: [] };
+    // Not found, or exhausted retries against real errors: report unavailable.
+    // The registry is the single source of truth — there is no secondary fetch.
+    return { latestVersion: 'unknown', allVersions: [] };
 }
 /**
  * Fetches version data for a list of packages from the npm registry.
@@ -201,9 +123,10 @@ async function fetchPackageFromRegistryWithFallback(packageName, currentVersion)
  *   It doesn't interact with batch size — batches exist only to group
  *   emissions for the UI.
  * - No per-request timeouts: slow responses are allowed to finish. Real
- *   network errors are retried with exponential backoff; after that, we
- *   fall back to jsdelivr as a last resort. A result is never silently
- *   dropped due to slowness.
+ *   network errors are retried with exponential backoff; after the retry
+ *   budget is exhausted the package is reported as unavailable
+ *   (`latestVersion: 'unknown'`). A result is never silently dropped due to
+ *   slowness.
  *
  * Callbacks:
  * - `onBatchReady` fires once a whole emission batch has resolved, in

package/dist/services/package-manager-detector.js

@@ -56,8 +56,8 @@ class PackageManagerDetector {
         if (fromLockFile) {
             return fromLockFile;
         }
-        // 3. Fallback to npm
-        console.log(chalk_1.default.yellow('⚠️  No package manager detected. Defaulting to npm. Consider adding a "packageManager" field to your package.json.'));
+        // 3. Fallback to npm. Warn on stderr so it never corrupts --json output on stdout.
+        console.error(chalk_1.default.yellow('⚠️  No package manager detected. Defaulting to npm. Consider adding a "packageManager" field to your package.json.'));
         return PACKAGE_MANAGERS.npm;
     }
     /**
@@ -92,6 +92,8 @@ class PackageManagerDetector {
         const lockFileChecks = [
             { pm: PACKAGE_MANAGERS.pnpm, path: (0, path_1.join)(cwd, 'pnpm-lock.yaml') },
             { pm: PACKAGE_MANAGERS.bun, path: (0, path_1.join)(cwd, 'bun.lockb') },
+            // Bun >= 1.2 writes a text `bun.lock` instead of the binary `bun.lockb`.
+            { pm: PACKAGE_MANAGERS.bun, path: (0, path_1.join)(cwd, 'bun.lock') },
             { pm: PACKAGE_MANAGERS.yarn, path: (0, path_1.join)(cwd, 'yarn.lock') },
             { pm: PACKAGE_MANAGERS.npm, path: (0, path_1.join)(cwd, 'package-lock.json') },
         ];
@@ -107,7 +109,8 @@ class PackageManagerDetector {
         }
         // If multiple lock files, use most recently modified
         if (existingLocks.length > 1) {
-            console.log(chalk_1.default.yellow('⚠️  Multiple lock files detected. Using most recently modified. Consider cleaning up unused lock files.'));
+            // stderr so it never corrupts --json output on stdout.
+            console.error(chalk_1.default.yellow('⚠️  Multiple lock files detected. Using most recently modified. Consider cleaning up unused lock files.'));
             existingLocks.sort((a, b) => b.mtime - a.mtime);
         }
         return existingLocks[0].pm;

package/dist/services/persistent-cache.js

@@ -7,21 +7,22 @@ exports.persistentCache = void 0;
 const fs_1 = require("fs");
 const path_1 = require("path");
 const env_paths_1 = __importDefault(require("env-paths"));
-// Cache TTL: 24 hours for disk cache (much longer than in-memory 5 minutes)
-const DISK_CACHE_TTL = 24 * 60 * 60 * 1000;
+const config_1 = require("../config");
 // Maximum cache size (number of packages)
 const MAX_CACHE_ENTRIES = 5000;
 // Cache file format version (increment when structure changes)
-const CACHE_VERSION = 1;
+const CACHE_VERSION = 2;
 /**
  * Persistent cache manager for package registry data.
  * Stores cache on disk for fast repeated runs across CLI invocations.
  */
 class PersistentCacheManager {
+    cacheDir;
+    indexPath;
+    index = null;
+    dirty = false;
     constructor() {
-        this.index = null;
-        this.dirty = false;
-        const paths = (0, env_paths_1.default)('inup');
+        const paths = (0, env_paths_1.default)(config_1.PACKAGE_NAME);
         this.cacheDir = (0, path_1.join)(paths.cache, 'registry');
         this.indexPath = (0, path_1.join)(this.cacheDir, 'index.json');
     }
@@ -93,13 +94,6 @@ class PersistentCacheManager {
         if (!entry) {
             return null;
         }
-        // Check TTL
-        if (Date.now() - entry.timestamp > DISK_CACHE_TTL) {
-            // Expired, remove from index
-            delete index.entries[packageName];
-            this.dirty = true;
-            return null;
-        }
         // Read the actual cache file
         try {
             const filePath = (0, path_1.join)(this.cacheDir, entry.file);
@@ -113,6 +107,7 @@ class PersistentCacheManager {
             return {
                 latestVersion: cached.latestVersion,
                 allVersions: cached.allVersions,
+                timestamp: entry.timestamp,
             };
         }
         catch {

package/dist/types/domain.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=domain.js.map

package/dist/types/streaming.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=streaming.js.map

package/dist/types/ui.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ui.js.map

package/dist/types.js

@@ -1,3 +1,20 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types/domain"), exports);
+__exportStar(require("./types/ui"), exports);
+__exportStar(require("./types/streaming"), exports);
 //# sourceMappingURL=types.js.map

package/dist/ui/controllers/package-info-modal-controller.js

@@ -38,12 +38,10 @@ const semver = __importStar(require("semver"));
 const services_1 = require("../../services");
 const RELEASE_NOTES_LOAD_DEBOUNCE_MS = 120;
 class PackageInfoModalController {
-    constructor() {
-        this.abortController = null;
-        this.pendingReleaseNotesVersion = null;
-        this.releaseNotesDebounceTimer = null;
-        this.resolveDebouncedLoad = null;
-    }
+    abortController = null;
+    pendingReleaseNotesVersion = null;
+    releaseNotesDebounceTimer = null;
+    resolveDebouncedLoad = null;
     /**
      * Cancel any in-flight hydrate/release-notes fetches.
      * Safe to call multiple times or when nothing is in flight.
@@ -68,32 +66,11 @@ class PackageInfoModalController {
         if (!metadata) {
             return null;
         }
-        const result = {
-            description: metadata.description,
-            homepage: metadata.homepage,
-            repository: metadata.releaseNotes,
-            weeklyDownloads: metadata.weeklyDownloads,
-            author: metadata.author,
-            license: metadata.license,
-        };
-        state.description = result.description;
-        state.homepage = result.homepage;
-        state.repository = result.repository;
-        state.weeklyDownloads = result.weeklyDownloads;
-        state.author = result.author;
-        state.license = result.license;
         // Compute the version range for release notes
         const targetVersion = state.selectedOption === 'range' ? state.rangeVersion : state.latestVersion;
-        if (state.allVersions && state.allVersions.length > 0) {
-            state.releaseNotesVersions = this.buildReleaseNotesVersionQueue(state.allVersions, state.currentVersion, targetVersion);
-        }
-        else {
-            // No allVersions available — just show the target version
-            state.releaseNotesVersions = [targetVersion];
-        }
-        state.releaseNotesLoaded = new Map();
-        state.releaseNotesViewIndex = 0;
-        state.releaseNotesLoadingVersion = undefined;
+        const releaseNotesVersions = state.allVersions && state.allVersions.length > 0
+            ? this.buildReleaseNotesVersionQueue(state.allVersions, state.currentVersion, targetVersion)
+            : [targetVersion];
         this.pendingReleaseNotesVersion = null;
         if (this.releaseNotesDebounceTimer) {
             clearTimeout(this.releaseNotesDebounceTimer);
@@ -101,7 +78,21 @@ class PackageInfoModalController {
         }
         this.resolveDebouncedLoad?.(false);
         this.resolveDebouncedLoad = null;
-        return result;
+        return {
+            name: state.name,
+            patch: {
+                description: metadata.description,
+                homepage: metadata.homepage,
+                repository: metadata.releaseNotes,
+                weeklyDownloads: metadata.weeklyDownloads,
+                author: metadata.author,
+                license: metadata.license,
+                releaseNotesVersions,
+                releaseNotesLoaded: new Map(),
+                releaseNotesViewIndex: 0,
+                releaseNotesLoadingVersion: undefined,
+            },
+        };
     }
     /**
      * Load release notes for a specific version by index.

package/dist/ui/controllers/vulnerability-audit-controller.js

@@ -4,11 +4,9 @@ exports.VulnerabilityAuditController = void 0;
 const services_1 = require("../../services");
 const vulnerability_1 = require("../presenters/vulnerability");
 class VulnerabilityAuditController {
-    constructor() {
-        this.tracker = new services_1.BackgroundAuditTracker();
-        this.cache = new Map();
-        this.drainPromise = null;
-    }
+    tracker = new services_1.BackgroundAuditTracker();
+    cache = new Map();
+    drainPromise = null;
     getCachedSummary(packageName, currentVersionSpecifier, type) {
         return this.cache.get(this.getCacheKey(packageName, currentVersionSpecifier, type));
     }
@@ -25,16 +23,18 @@ class VulnerabilityAuditController {
             this.drain(selectionStates, onUpdate);
         }
     }
-    drain(selectionStates, onUpdate) {
+    async drain(selectionStates, onUpdate) {
         if (this.drainPromise) {
-            return;
+            return [];
         }
+        const allUpdates = [];
         this.drainPromise = (async () => {
             while (true) {
                 const batch = this.tracker.reserveNextBatch(20);
                 if (batch.packageNames.length === 0) {
                     break;
                 }
+                const batchUpdates = [];
                 try {
                     const vulnerabilityData = await (0, services_1.fetchVulnerabilities)(batch.packages);
                     const batchNames = new Set(batch.packageNames);
@@ -55,8 +55,8 @@ class VulnerabilityAuditController {
                             url: item.url,
                         })), vulnerability.highestSeverity);
                         const merged = (0, vulnerability_1.mergeVulnerabilitySummary)(state.vulnerability, summary);
-                        state.vulnerability = merged;
                         this.cache.set(this.getCacheKey(state.name, state.currentVersionSpecifier, state.type), merged);
+                        batchUpdates.push({ name: state.name, patch: { vulnerability: merged } });
                     }
                 }
                 catch {
@@ -64,6 +64,13 @@ class VulnerabilityAuditController {
                 }
                 finally {
                     this.tracker.markCompleted(batch.packageNames);
+                    for (const update of batchUpdates) {
+                        for (const state of selectionStates) {
+                            if (state.name === update.name)
+                                Object.assign(state, update.patch);
+                        }
+                    }
+                    allUpdates.push(...batchUpdates);
                     onUpdate?.();
                 }
             }
@@ -73,6 +80,8 @@ class VulnerabilityAuditController {
                 this.drain(selectionStates, onUpdate);
             }
         });
+        await this.drainPromise;
+        return allUpdates;
     }
     getCacheKey(packageName, currentVersionSpecifier, type) {
         return `${packageName}@${currentVersionSpecifier}@${type}`;

package/dist/ui/index.js

@@ -21,4 +21,7 @@ __exportStar(require("./modal"), exports);
 __exportStar(require("./presenters"), exports);
 __exportStar(require("./controllers"), exports);
 __exportStar(require("./input-handler"), exports);
+__exportStar(require("./keymap"), exports);
+__exportStar(require("./themes"), exports);
+__exportStar(require("./themes-colors"), exports);
 //# sourceMappingURL=index.js.map