node-power-user 2.1.1 → 2.1.3

package/dist/commands/install.js

@@ -36,6 +36,14 @@ module.exports = async function (options) {
   try {
     await socket.wrap(command, { force: options.force });
   } catch (e) {
+    // npm itself failed (ERESOLVE, network, peer-dep conflict) — not a Socket block.
+    // The npm error was already printed above; just acknowledge and stop.
+    if (e.reason === 'npm-failed') {
+      logger.log('');
+      logger.log('Fix the npm error above (e.g. resolve peer-dep conflicts) and retry.');
+      return;
+    }
+
     const flaggedPackages = e.flaggedPackages || [];
 
     if (flaggedPackages.length > 0) {

package/dist/commands/outdated.js

@@ -264,12 +264,20 @@ module.exports = async function (options) {
   try {
     await socket.wrap(installCmd, { force: options.force });
   } catch (e) {
-    const flaggedPackages = e.flaggedPackages || [];
-
     // Restore package.json since the bulk install failed
     jetpack.write(packageJsonPath, packageJsonBackup);
     logger.log('package.json has been restored to its original state.');
 
+    // npm itself failed (ERESOLVE, network, peer-dep conflict) — not a Socket block.
+    // The npm error was already printed above; just acknowledge and stop.
+    if (e.reason === 'npm-failed') {
+      logger.log('');
+      logger.log('Fix the npm error above (e.g. resolve peer-dep conflicts) and retry.');
+      return { allPackages, updated: false, target: action };
+    }
+
+    const flaggedPackages = e.flaggedPackages || [];
+
     // Trace which of the requested packages bring in the flagged deps
     const riskyParents = new Set();
 

package/dist/lib/socket.js

@@ -72,12 +72,21 @@ async function wrap(command, options) {
     console.log(output);
   }
 
-  // Check for risk warnings in output
-  const hasRisks = exitedWithError
-    || (/new risk|warning|alert|socket found|exiting due to risks/i.test(output)
-      && !/no new risks/i.test(output));
+  // Distinguish a real Socket risk-block from a generic npm failure.
+  // Socket prints its own markers when it blocks; npm failures (ERESOLVE,
+  // network errors, peer-dep conflicts) just exit non-zero with npm errors.
+  const socketBlocked = /new risk|socket found|exiting due to risks/i.test(output)
+    && !/no new risks/i.test(output);
+
+  // Subprocess failed but Socket didn't actually block — surface the npm error honestly.
+  if (exitedWithError && !socketBlocked) {
+    logger.error('npm install failed. See the error output above.');
+    const err = new Error('npm install failed.');
+    err.reason = 'npm-failed';
+    throw err;
+  }
 
-  if (!hasRisks) {
+  if (!socketBlocked) {
     return;
   }
 
@@ -95,6 +104,7 @@ async function wrap(command, options) {
   if (!options.force) {
     logger.error('Refusing to install. Review the risks above, then use --force to bypass.');
     const err = new Error('Socket detected supply chain risks.');
+    err.reason = 'socket-blocked';
     err.flaggedPackages = flaggedPackages;
     throw err;
   }
@@ -130,12 +140,16 @@ async function audit(options) {
     console.log(output);
   }
 
-  // Check for risk warnings in output
-  const hasRisks = exitedWithError
-    || (/new risk|warning|alert|socket found|exiting due to risks/i.test(output)
-      && !/no new risks/i.test(output));
+  // Distinguish a real Socket risk-finding from a generic audit-subprocess failure.
+  const socketFoundRisks = /new risk|socket found|exiting due to risks/i.test(output)
+    && !/no new risks/i.test(output);
+
+  if (exitedWithError && !socketFoundRisks) {
+    logger.warn('Socket audit subprocess failed (not a risk finding). See output above.');
+    return;
+  }
 
-  if (!hasRisks) {
+  if (!socketFoundRisks) {
     logger.log(logger.format.green('Socket audit passed — no risks detected.'));
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-power-user",
-  "version": "2.1.1",
+  "version": "2.1.3",
   "description": "Easy tools for every Node.js developer!",
   "main": "dist/index.js",
   "scripts": {
@@ -22,7 +22,8 @@
     "input": "./src",
     "output": "./dist",
     "replace": {},
-    "type": "copy"
+    "type": "copy",
+    "hooks": {}
   },
   "repository": {
     "type": "git",
@@ -40,20 +41,20 @@
   },
   "homepage": "https://itwcreativeworks.com",
   "dependencies": {
-    "@inquirer/prompts": "^8.3.2",
+    "@inquirer/prompts": "^8.4.3",
     "chalk": "^5.6.2",
     "cli-progress": "^3.12.0",
     "fs-jetpack": "^5.1.0",
     "itwcw-package-analytics": "^1.0.8",
     "node-powertools": "^3.0.0",
     "npm-api": "^1.0.1",
-    "npm-check-updates": "^20.0.0",
+    "npm-check-updates": "^22.2.0",
     "table": "^6.9.0",
     "wonderful-version": "^1.3.2",
     "yargs": "^18.0.0"
   },
   "devDependencies": {
     "mocha": "^11.7.5",
-    "prepare-package": "^2.0.7"
+    "prepare-package": "^2.1.0"
   }
 }