socket 0.14.154 → 0.15.0

package/external/@socketsecurity/registry/lib/constants/maintained-node-versions.js

@@ -6,17 +6,15 @@
 // So we maintain a manual version list for now.
 // https://nodejs.org/en/about/previous-releases#looking-for-latest-release-of-a-version-branch
 //
-// Updated March 5th, 2025.
-const manualNext = '23.9.0'
-const manualCurr = '22.14.0'
-const manualPrev = '20.18.3'
-const manualLast = '18.20.7'
+// Updated May 5th, 2025.
+const manualNext = '24.0.0'
+const manualCurr = '22.15.0'
+const manualPrev = '20.19.1'
+const manualLast = '18.20.8'
 
 const browsersList = /*@__PURE__*/ require('../../external/browserslist')
-const semver = /*@__PURE__*/ require('../../external/semver')
-
 const query = browsersList('maintained node versions')
-  // Trim value, e.g. 'node 22.5.0' to '22.5.0'.
+  // Trim value, e.g. 'node 22.15.0' to '22.15.0'.
   .map(s => s.slice(5 /*'node '.length*/))
 // browsersList returns results in descending order.
 const queryNext = query.at(0) ?? manualNext
@@ -24,10 +22,9 @@ const queryCurr = query.at(1) ?? manualCurr
 const queryPrev = query.at(2) ?? manualPrev
 const queryLast = query.at(-1) ?? manualLast
 
-const next = semver.maxSatisfying(
-  [queryNext, manualNext],
-  `^${semver.major(queryNext)}`
-)
+const semver = /*@__PURE__*/ require('../../external/semver')
+const next = semver.gt(manualNext, queryNext) ? manualNext : queryNext
+
 const current = semver.maxSatisfying(
   [queryCurr, manualCurr],
   `^${semver.major(queryCurr)}`
@@ -36,10 +33,7 @@ const previous = semver.maxSatisfying(
   [queryPrev, manualPrev],
   `^${semver.major(queryPrev)}`
 )
-const last = semver.maxSatisfying(
-  [queryLast, manualLast],
-  `^${semver.major(queryLast)}`
-)
+const last = semver.lt(manualLast, queryLast) ? manualLast : queryLast
 
 module.exports = Object.freeze(
   Object.assign([last, previous, current, next], {

package/external/@socketsecurity/registry/lib/fs.d.ts

@@ -23,6 +23,7 @@ declare type BufferEncoding =
   | 'utf-16le'
   | 'ucs2'
   | 'ucs-2'
+declare type JsonContent = NPMCliPackageJson.Content
 declare type ReadFileOptions =
   | Remap<
       ObjectEncodingOptions & {
@@ -63,28 +64,29 @@ declare const Fs: {
   readJson(
     filepath: PathLike,
     options?: ReadJsonOptions | undefined
-  ): Promise<NPMCliPackageJson.Content>
+  ): Promise<JsonContent>
   readJsonSync(
     filepath: PathLike,
     options?: ReadJsonOptions | undefined
-  ): NPMCliPackageJson.Content
+  ): JsonContent
   remove(filepath: PathLike, options?: RmOptions): Promise<void>
   removeSync(filepath: PathLike, options?: RmOptions): void
   uniqueSync(filepath: PathLike): string
   writeJson(
     filepath: PathLike,
-    json: NPMCliPackageJson.Content,
+    json: JsonContent,
     options?: WriteJsonOptions | undefined
   ): Promise<void>
   writeJsonSync(
     filepath: PathLike,
-    json: NPMCliPackageJson.Content,
+    json: JsonContent,
     options?: WriteJsonOptions | undefined
   ): void
 }
 declare namespace Fs {
   export {
     BufferEncoding,
+    JsonContent,
     ReadFileOptions,
     ReadJsonOptions,
     ReadDirOptions,

package/external/@socketsecurity/registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/registry",
-  "version": "1.0.159",
+  "version": "1.0.161",
   "license": "MIT",
   "description": "Socket.dev registry helpers methods and metadata",
   "keywords": [
@@ -611,22 +611,22 @@
     "@socketregistry/yocto-spinner": "1.0.13",
     "@types/pacote": "11.1.8",
     "@yarnpkg/extensions": "2.0.5",
-    "browserslist": "4.24.4",
+    "browserslist": "4.24.5",
     "cacache": "19.0.1",
     "cross-env": "7.0.3",
     "del-cli": "6.0.0",
     "dev-null-cli": "2.0.0",
-    "eslint": "9.25.1",
+    "eslint": "9.26.0",
     "fast-sort": "3.4.1",
     "libnpmpack": "9.0.2",
     "make-fetch-happen": "14.0.3",
     "normalize-package-data": "6.0.1",
     "npm-package-arg": "12.0.2",
-    "npm-run-all2": "7.0.2",
-    "oxlint": "0.16.8",
+    "npm-run-all2": "8.0.1",
+    "oxlint": "0.16.9",
     "pacote": "21.0.0",
     "picomatch": "4.0.2",
-    "rollup": "4.40.1",
+    "rollup": "4.40.2",
     "semver": "7.7.1",
     "signal-exit": "4.1.0",
     "spdx-correct": "3.2.0",
@@ -637,7 +637,7 @@
     "yoctocolors-cjs": "2.1.2"
   },
   "engines": {
-    "node": ">=18.20.7"
+    "node": ">=18.20.8"
   },
   "files": [
     "*.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "0.14.154",
+  "version": "0.15.0",
   "description": "CLI tool for Socket.dev",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -82,9 +82,9 @@
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.27.1",
     "@biomejs/biome": "1.9.4",
-    "@cyclonedx/cdxgen": "11.2.6",
-    "@eslint/compat": "1.2.8",
-    "@eslint/js": "9.25.1",
+    "@cyclonedx/cdxgen": "11.2.7",
+    "@eslint/compat": "1.2.9",
+    "@eslint/js": "9.26.0",
     "@octokit/graphql": "8.2.2",
     "@octokit/openapi-types": "25.0.0",
     "@octokit/request-error": "6.1.8",
@@ -105,52 +105,52 @@
     "@socketregistry/is-interactive": "1.0.5",
     "@socketregistry/packageurl-js": "1.0.6",
     "@socketsecurity/config": "2.1.3",
-    "@socketsecurity/registry": "1.0.159",
-    "@socketsecurity/sdk": "1.4.30",
+    "@socketsecurity/registry": "1.0.161",
+    "@socketsecurity/sdk": "1.4.32",
     "@types/blessed": "0.1.25",
     "@types/cmd-shim": "5.0.2",
     "@types/micromatch": "4.0.9",
     "@types/mock-fs": "4.13.4",
-    "@types/node": "22.15.3",
+    "@types/node": "22.15.15",
     "@types/npmcli__arborist": "6.3.0",
     "@types/proc-log": "3.0.4",
     "@types/semver": "7.7.0",
     "@types/which": "3.0.4",
     "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/parser": "8.31.1",
-    "@vitest/coverage-v8": "3.1.2",
+    "@typescript-eslint/parser": "8.32.0",
+    "@vitest/coverage-v8": "3.1.3",
     "blessed": "0.1.81",
     "blessed-contrib": "4.11.0",
-    "browserslist": "4.24.4",
+    "browserslist": "4.24.5",
     "chalk-table": "1.0.2",
     "cmd-shim": "7.0.0",
     "cross-env": "7.0.3",
     "custompatch": "1.1.4",
     "del-cli": "6.0.0",
     "dev-null-cli": "2.0.0",
-    "eslint": "9.25.1",
+    "eslint": "9.26.0",
     "eslint-import-resolver-typescript": "4.3.4",
     "eslint-plugin-import-x": "4.11.0",
     "eslint-plugin-n": "17.17.0",
     "eslint-plugin-sort-destructure-keys": "2.0.0",
     "eslint-plugin-unicorn": "56.0.1",
-    "globals": "16.0.0",
+    "globals": "16.1.0",
     "hpagent": "1.2.0",
     "husky": "9.1.7",
     "ignore": "7.0.4",
-    "knip": "5.52.0",
-    "lint-staged": "15.5.1",
+    "knip": "5.55.0",
+    "lint-staged": "15.5.2",
     "magic-string": "0.30.17",
     "meow": "13.2.0",
     "micromatch": "4.0.8",
     "mock-fs": "5.5.0",
     "nock": "14.0.4",
     "npm-package-arg": "12.0.2",
-    "npm-run-all2": "7.0.2",
+    "npm-run-all2": "8.0.1",
     "open": "10.1.2",
-    "oxlint": "0.16.8",
+    "oxlint": "0.16.9",
     "pony-cause": "2.1.11",
-    "rollup": "4.40.1",
+    "rollup": "4.40.2",
     "semver": "7.7.1",
     "synp": "1.9.14",
     "terminal-link": "2.1.1",
@@ -158,9 +158,9 @@
     "tinyglobby": "0.2.13",
     "type-coverage": "2.29.7",
     "typescript": "5.8.3",
-    "typescript-eslint": "8.31.1",
+    "typescript-eslint": "8.32.0",
     "unplugin-purge-polyfills": "0.1.0",
-    "vitest": "3.1.2",
+    "vitest": "3.1.3",
     "which": "5.0.0",
     "yaml": "2.7.1",
     "yargs-parser": "21.1.1",
@@ -193,7 +193,7 @@
     "tiny-colors": "$yoctocolors-cjs",
     "typedarray": "npm:@socketregistry/typedarray@^1",
     "undici": "6.21.1",
-    "vite": "6.2.7",
+    "vite": "6.3.5",
     "xml2js": "0.5.0",
     "yaml": "2.7.1"
   },

package/dist/shadow-npm-paths.js

@@ -1,291 +0,0 @@
-'use strict'
-
-const fs = require('node:fs')
-const Module = require('node:module')
-const path = require('node:path')
-const logger = require('../external/@socketsecurity/registry/lib/logger')
-const path$1 = require('../external/@socketsecurity/registry/lib/path')
-const constants = require('./constants.js')
-const vendor = require('./vendor.js')
-const debug = require('../external/@socketsecurity/registry/lib/debug')
-const npm = require('../external/@socketsecurity/registry/lib/npm')
-const words = require('../external/@socketsecurity/registry/lib/words')
-const shadowNpmInject = require('./shadow-npm-inject.js')
-
-const { NODE_MODULES: NODE_MODULES$1, NPM: NPM$1, shadowBinPath } = constants
-function findBinPathDetailsSync(binName) {
-  const binPaths =
-    vendor.libExports$3.sync(binName, {
-      all: true,
-      nothrow: true
-    }) ?? []
-  let shadowIndex = -1
-  let theBinPath
-  for (let i = 0, { length } = binPaths; i < length; i += 1) {
-    const binPath = binPaths[i]
-    // Skip our bin directory if it's in the front.
-    if (path.dirname(binPath) === shadowBinPath) {
-      shadowIndex = i
-    } else {
-      theBinPath = npm.resolveBinPath(binPath)
-      break
-    }
-  }
-  return {
-    name: binName,
-    path: theBinPath,
-    shadowed: shadowIndex !== -1
-  }
-}
-function findNpmPathSync(npmBinPath) {
-  // Lazily access constants.WIN32.
-  const { WIN32 } = constants
-  let thePath = npmBinPath
-  while (true) {
-    const libNmNpmPath = path.join(thePath, 'lib', NODE_MODULES$1, NPM$1)
-    // mise puts its npm bin in a path like:
-    //   /Users/SomeUsername/.local/share/mise/installs/node/vX.X.X/bin/npm.
-    // HOWEVER, the location of the npm install is:
-    //   /Users/SomeUsername/.local/share/mise/installs/node/vX.X.X/lib/node_modules/npm.
-    if (
-      // Use existsSync here because statsSync, even with { throwIfNoEntry: false },
-      // will throw an ENOTDIR error for paths like ./a-file-that-exists/a-directory-that-does-not.
-      // See https://github.com/nodejs/node/issues/56993.
-      fs.existsSync(libNmNpmPath) &&
-      fs
-        .statSync(libNmNpmPath, {
-          throwIfNoEntry: false
-        })
-        ?.isDirectory()
-    ) {
-      thePath = path.join(libNmNpmPath, NPM$1)
-    }
-    const nmPath = path.join(thePath, NODE_MODULES$1)
-    if (
-      // npm bin paths may look like:
-      //   /usr/local/share/npm/bin/npm
-      //   /Users/SomeUsername/.nvm/versions/node/vX.X.X/bin/npm
-      //   C:\Users\SomeUsername\AppData\Roaming\npm\bin\npm.cmd
-      // OR
-      //   C:\Program Files\nodejs\npm.cmd
-      //
-      // In practically all cases the npm path contains a node_modules folder:
-      //   /usr/local/share/npm/bin/npm/node_modules
-      //   C:\Program Files\nodejs\node_modules
-      fs.existsSync(nmPath) &&
-      fs
-        .statSync(nmPath, {
-          throwIfNoEntry: false
-        })
-        ?.isDirectory() &&
-      // Optimistically look for the default location.
-      (path.basename(thePath) === NPM$1 ||
-        // Chocolatey installs npm bins in the same directory as node bins.
-        (WIN32 && fs.existsSync(path.join(thePath, `${NPM$1}.cmd`))))
-    ) {
-      return thePath
-    }
-    const parent = path.dirname(thePath)
-    if (parent === thePath) {
-      return undefined
-    }
-    thePath = parent
-  }
-}
-async function getPackageFilesForScan(cwd, inputPaths, supportedFiles, config) {
-  debug.debugLog(
-    `getPackageFilesForScan: resolving ${inputPaths.length} paths:\n`,
-    inputPaths
-  )
-
-  // Lazily access constants.spinner.
-  const { spinner } = constants
-  const patterns = shadowNpmInject.pathsToGlobPatterns(inputPaths)
-  spinner.start('Searching for local files to include in scan...')
-  const entries = await shadowNpmInject.globWithGitIgnore(patterns, {
-    cwd,
-    socketConfig: config
-  })
-  if (debug.isDebug()) {
-    spinner.stop()
-    debug.debugLog(
-      `Resolved ${inputPaths.length} paths to ${entries.length} local paths:\n`,
-      entries
-    )
-    spinner.start('Searching for files now...')
-  } else {
-    spinner.start(
-      `Resolved ${inputPaths.length} paths to ${entries.length} local paths, searching for files now...`
-    )
-  }
-  const packageFiles = await shadowNpmInject.filterGlobResultToSupportedFiles(
-    entries,
-    supportedFiles
-  )
-  spinner.successAndStop(
-    `Found ${packageFiles.length} local ${words.pluralize('file', packageFiles.length)}`
-  )
-  debug.debugLog('Absolute paths:\n', packageFiles)
-  return packageFiles
-}
-
-const { NODE_MODULES, NPM, NPX, SOCKET_CLI_ISSUES_URL } = constants
-function exitWithBinPathError(binName) {
-  logger.logger.fail(
-    `Socket unable to locate ${binName}; ensure it is available in the PATH environment variable`
-  )
-  // The exit code 127 indicates that the command or binary being executed
-  // could not be found.
-  // eslint-disable-next-line n/no-process-exit
-  process.exit(127)
-}
-let _npmBinPathDetails
-function getNpmBinPathDetails() {
-  if (_npmBinPathDetails === undefined) {
-    _npmBinPathDetails = findBinPathDetailsSync(NPM)
-  }
-  return _npmBinPathDetails
-}
-let _npxBinPathDetails
-function getNpxBinPathDetails() {
-  if (_npxBinPathDetails === undefined) {
-    _npxBinPathDetails = findBinPathDetailsSync(NPX)
-  }
-  return _npxBinPathDetails
-}
-let _npmBinPath
-function getNpmBinPath() {
-  if (_npmBinPath === undefined) {
-    _npmBinPath = getNpmBinPathDetails().path
-    if (!_npmBinPath) {
-      exitWithBinPathError(NPM)
-    }
-  }
-  return _npmBinPath
-}
-function isNpmBinPathShadowed() {
-  return getNpmBinPathDetails().shadowed
-}
-let _npxBinPath
-function getNpxBinPath() {
-  if (_npxBinPath === undefined) {
-    _npxBinPath = getNpxBinPathDetails().path
-    if (!_npxBinPath) {
-      exitWithBinPathError(NPX)
-    }
-  }
-  return _npxBinPath
-}
-function isNpxBinPathShadowed() {
-  return getNpxBinPathDetails().shadowed
-}
-let _npmPath
-function getNpmPath() {
-  if (_npmPath === undefined) {
-    const npmBinPath = getNpmBinPath()
-    _npmPath = npmBinPath ? findNpmPathSync(npmBinPath) : undefined
-    if (!_npmPath) {
-      let message = 'Unable to find npm CLI install directory.'
-      if (npmBinPath) {
-        message += `\nSearched parent directories of ${path.dirname(npmBinPath)}.`
-      }
-      message += `\n\nThis is may be a bug with socket-npm related to changes to the npm CLI.\nPlease report to ${SOCKET_CLI_ISSUES_URL}.`
-      logger.logger.fail(message)
-      // The exit code 127 indicates that the command or binary being executed
-      // could not be found.
-      // eslint-disable-next-line n/no-process-exit
-      process.exit(127)
-    }
-  }
-  return _npmPath
-}
-let _npmRequire
-function getNpmRequire() {
-  if (_npmRequire === undefined) {
-    const npmPath = getNpmPath()
-    const npmNmPath = path.join(npmPath, NODE_MODULES, NPM)
-    _npmRequire = Module.createRequire(
-      path.join(
-        fs.existsSync(npmNmPath) ? npmNmPath : npmPath,
-        '<dummy-basename>'
-      )
-    )
-  }
-  return _npmRequire
-}
-let _arboristPkgPath
-function getArboristPackagePath() {
-  if (_arboristPkgPath === undefined) {
-    const pkgName = '@npmcli/arborist'
-    const mainPathWithForwardSlashes = path$1.normalizePath(
-      getNpmRequire().resolve(pkgName)
-    )
-    const arboristPkgPathWithForwardSlashes = mainPathWithForwardSlashes.slice(
-      0,
-      mainPathWithForwardSlashes.lastIndexOf(pkgName) + pkgName.length
-    )
-    // Lazily access constants.WIN32.
-    _arboristPkgPath = constants.WIN32
-      ? path.normalize(arboristPkgPathWithForwardSlashes)
-      : arboristPkgPathWithForwardSlashes
-  }
-  return _arboristPkgPath
-}
-let _arboristClassPath
-function getArboristClassPath() {
-  if (_arboristClassPath === undefined) {
-    _arboristClassPath = path.join(
-      getArboristPackagePath(),
-      'lib/arborist/index.js'
-    )
-  }
-  return _arboristClassPath
-}
-let _arboristDepValidPath
-function getArboristDepValidPath() {
-  if (_arboristDepValidPath === undefined) {
-    _arboristDepValidPath = path.join(
-      getArboristPackagePath(),
-      'lib/dep-valid.js'
-    )
-  }
-  return _arboristDepValidPath
-}
-let _arboristEdgeClassPath
-function getArboristEdgeClassPath() {
-  if (_arboristEdgeClassPath === undefined) {
-    _arboristEdgeClassPath = path.join(getArboristPackagePath(), 'lib/edge.js')
-  }
-  return _arboristEdgeClassPath
-}
-let _arboristNodeClassPath
-function getArboristNodeClassPath() {
-  if (_arboristNodeClassPath === undefined) {
-    _arboristNodeClassPath = path.join(getArboristPackagePath(), 'lib/node.js')
-  }
-  return _arboristNodeClassPath
-}
-let _arboristOverrideSetClassPath
-function getArboristOverrideSetClassPath() {
-  if (_arboristOverrideSetClassPath === undefined) {
-    _arboristOverrideSetClassPath = path.join(
-      getArboristPackagePath(),
-      'lib/override-set.js'
-    )
-  }
-  return _arboristOverrideSetClassPath
-}
-
-exports.getArboristClassPath = getArboristClassPath
-exports.getArboristDepValidPath = getArboristDepValidPath
-exports.getArboristEdgeClassPath = getArboristEdgeClassPath
-exports.getArboristNodeClassPath = getArboristNodeClassPath
-exports.getArboristOverrideSetClassPath = getArboristOverrideSetClassPath
-exports.getNpmBinPath = getNpmBinPath
-exports.getNpmRequire = getNpmRequire
-exports.getNpxBinPath = getNpxBinPath
-exports.getPackageFilesForScan = getPackageFilesForScan
-exports.isNpmBinPathShadowed = isNpmBinPathShadowed
-exports.isNpxBinPathShadowed = isNpxBinPathShadowed
-//# debugId=b482d192-205f-4708-8cc8-9c74bbc66f2b
-//# sourceMappingURL=shadow-npm-paths.js.map

package/dist/shadow-npm-paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shadow-npm-paths.js","sources":["../src/utils/path-resolve.mts","../src/shadow/npm/paths.mts"],"sourcesContent":["import { existsSync, statSync } from 'node:fs'\nimport path from 'node:path'\n\nimport which from 'which'\n\nimport { debugLog, isDebug } from '@socketsecurity/registry/lib/debug'\nimport { resolveBinPath } from '@socketsecurity/registry/lib/npm'\nimport { pluralize } from '@socketsecurity/registry/lib/words'\n\nimport constants from '../constants.mts'\nimport {\n  filterGlobResultToSupportedFiles,\n  globWithGitIgnore,\n  pathsToGlobPatterns\n} from './glob.mts'\n\nimport type { SocketYml } from '@socketsecurity/config'\nimport type { SocketSdkReturnType } from '@socketsecurity/sdk'\n\nconst { NODE_MODULES, NPM, shadowBinPath } = constants\n\nexport function findBinPathDetailsSync(binName: string): {\n  name: string\n  path: string | undefined\n  shadowed: boolean\n} {\n  const binPaths =\n    which.sync(binName, {\n      all: true,\n      nothrow: true\n    }) ?? []\n  let shadowIndex = -1\n  let theBinPath: string | undefined\n  for (let i = 0, { length } = binPaths; i < length; i += 1) {\n    const binPath = binPaths[i]!\n    // Skip our bin directory if it's in the front.\n    if (path.dirname(binPath) === shadowBinPath) {\n      shadowIndex = i\n    } else {\n      theBinPath = resolveBinPath(binPath)\n      break\n    }\n  }\n  return { name: binName, path: theBinPath, shadowed: shadowIndex !== -1 }\n}\n\nexport function findNpmPathSync(npmBinPath: string): string | undefined {\n  // Lazily access constants.WIN32.\n  const { WIN32 } = constants\n  let thePath = npmBinPath\n  while (true) {\n    const libNmNpmPath = path.join(thePath, 'lib', NODE_MODULES, NPM)\n    // mise puts its npm bin in a path like:\n    //   /Users/SomeUsername/.local/share/mise/installs/node/vX.X.X/bin/npm.\n    // HOWEVER, the location of the npm install is:\n    //   /Users/SomeUsername/.local/share/mise/installs/node/vX.X.X/lib/node_modules/npm.\n    if (\n      // Use existsSync here because statsSync, even with { throwIfNoEntry: false },\n      // will throw an ENOTDIR error for paths like ./a-file-that-exists/a-directory-that-does-not.\n      // See https://github.com/nodejs/node/issues/56993.\n      existsSync(libNmNpmPath) &&\n      statSync(libNmNpmPath, { throwIfNoEntry: false })?.isDirectory()\n    ) {\n      thePath = path.join(libNmNpmPath, NPM)\n    }\n    const nmPath = path.join(thePath, NODE_MODULES)\n    if (\n      // npm bin paths may look like:\n      //   /usr/local/share/npm/bin/npm\n      //   /Users/SomeUsername/.nvm/versions/node/vX.X.X/bin/npm\n      //   C:\\Users\\SomeUsername\\AppData\\Roaming\\npm\\bin\\npm.cmd\n      // OR\n      //   C:\\Program Files\\nodejs\\npm.cmd\n      //\n      // In practically all cases the npm path contains a node_modules folder:\n      //   /usr/local/share/npm/bin/npm/node_modules\n      //   C:\\Program Files\\nodejs\\node_modules\n      existsSync(nmPath) &&\n      statSync(nmPath, { throwIfNoEntry: false })?.isDirectory() &&\n      // Optimistically look for the default location.\n      (path.basename(thePath) === NPM ||\n        // Chocolatey installs npm bins in the same directory as node bins.\n        (WIN32 && existsSync(path.join(thePath, `${NPM}.cmd`))))\n    ) {\n      return thePath\n    }\n    const parent = path.dirname(thePath)\n    if (parent === thePath) {\n      return undefined\n    }\n    thePath = parent\n  }\n}\n\nexport async function getPackageFilesForScan(\n  cwd: string,\n  inputPaths: string[],\n  supportedFiles: SocketSdkReturnType<'getReportSupportedFiles'>['data'],\n  config?: SocketYml | undefined\n): Promise<string[]> {\n  debugLog(\n    `getPackageFilesForScan: resolving ${inputPaths.length} paths:\\n`,\n    inputPaths\n  )\n\n  // Lazily access constants.spinner.\n  const { spinner } = constants\n\n  const patterns = pathsToGlobPatterns(inputPaths)\n\n  spinner.start('Searching for local files to include in scan...')\n\n  const entries = await globWithGitIgnore(patterns, {\n    cwd,\n    socketConfig: config\n  })\n\n  if (isDebug()) {\n    spinner.stop()\n    debugLog(\n      `Resolved ${inputPaths.length} paths to ${entries.length} local paths:\\n`,\n      entries\n    )\n    spinner.start('Searching for files now...')\n  } else {\n    spinner.start(\n      `Resolved ${inputPaths.length} paths to ${entries.length} local paths, searching for files now...`\n    )\n  }\n\n  const packageFiles = await filterGlobResultToSupportedFiles(\n    entries,\n    supportedFiles\n  )\n\n  spinner.successAndStop(\n    `Found ${packageFiles.length} local ${pluralize('file', packageFiles.length)}`\n  )\n  debugLog('Absolute paths:\\n', packageFiles)\n\n  return packageFiles\n}\n","import { existsSync } from 'node:fs'\nimport Module from 'node:module'\nimport path from 'node:path'\n\nimport { logger } from '@socketsecurity/registry/lib/logger'\nimport { normalizePath } from '@socketsecurity/registry/lib/path'\n\nimport constants from '../../constants.mts'\nimport {\n  findBinPathDetailsSync,\n  findNpmPathSync\n} from '../../utils/path-resolve.mts'\n\nconst { NODE_MODULES, NPM, NPX, SOCKET_CLI_ISSUES_URL } = constants\n\nfunction exitWithBinPathError(binName: string): never {\n  logger.fail(\n    `Socket unable to locate ${binName}; ensure it is available in the PATH environment variable`\n  )\n  // The exit code 127 indicates that the command or binary being executed\n  // could not be found.\n  // eslint-disable-next-line n/no-process-exit\n  process.exit(127)\n}\n\nlet _npmBinPathDetails: ReturnType<typeof findBinPathDetailsSync> | undefined\nfunction getNpmBinPathDetails(): ReturnType<typeof findBinPathDetailsSync> {\n  if (_npmBinPathDetails === undefined) {\n    _npmBinPathDetails = findBinPathDetailsSync(NPM)\n  }\n  return _npmBinPathDetails\n}\n\nlet _npxBinPathDetails: ReturnType<typeof findBinPathDetailsSync> | undefined\nfunction getNpxBinPathDetails(): ReturnType<typeof findBinPathDetailsSync> {\n  if (_npxBinPathDetails === undefined) {\n    _npxBinPathDetails = findBinPathDetailsSync(NPX)\n  }\n  return _npxBinPathDetails\n}\n\nlet _npmBinPath: string | undefined\nexport function getNpmBinPath(): string {\n  if (_npmBinPath === undefined) {\n    _npmBinPath = getNpmBinPathDetails().path\n    if (!_npmBinPath) {\n      exitWithBinPathError(NPM)\n    }\n  }\n  return _npmBinPath\n}\n\nexport function isNpmBinPathShadowed() {\n  return getNpmBinPathDetails().shadowed\n}\n\nlet _npxBinPath: string | undefined\nexport function getNpxBinPath(): string {\n  if (_npxBinPath === undefined) {\n    _npxBinPath = getNpxBinPathDetails().path\n    if (!_npxBinPath) {\n      exitWithBinPathError(NPX)\n    }\n  }\n  return _npxBinPath\n}\n\nexport function isNpxBinPathShadowed() {\n  return getNpxBinPathDetails().shadowed\n}\n\nlet _npmPath: string | undefined\nexport function getNpmPath() {\n  if (_npmPath === undefined) {\n    const npmBinPath = getNpmBinPath()\n    _npmPath = npmBinPath ? findNpmPathSync(npmBinPath) : undefined\n    if (!_npmPath) {\n      let message = 'Unable to find npm CLI install directory.'\n      if (npmBinPath) {\n        message += `\\nSearched parent directories of ${path.dirname(npmBinPath)}.`\n      }\n      message += `\\n\\nThis is may be a bug with socket-npm related to changes to the npm CLI.\\nPlease report to ${SOCKET_CLI_ISSUES_URL}.`\n      logger.fail(message)\n      // The exit code 127 indicates that the command or binary being executed\n      // could not be found.\n      // eslint-disable-next-line n/no-process-exit\n      process.exit(127)\n    }\n  }\n  return _npmPath\n}\n\nlet _npmRequire: NodeJS.Require | undefined\nexport function getNpmRequire(): NodeJS.Require {\n  if (_npmRequire === undefined) {\n    const npmPath = getNpmPath()\n    const npmNmPath = path.join(npmPath, NODE_MODULES, NPM)\n    _npmRequire = Module.createRequire(\n      path.join(existsSync(npmNmPath) ? npmNmPath : npmPath, '<dummy-basename>')\n    )\n  }\n  return _npmRequire\n}\n\nlet _arboristPkgPath: string | undefined\nexport function getArboristPackagePath() {\n  if (_arboristPkgPath === undefined) {\n    const pkgName = '@npmcli/arborist'\n    const mainPathWithForwardSlashes = normalizePath(\n      getNpmRequire().resolve(pkgName)\n    )\n    const arboristPkgPathWithForwardSlashes = mainPathWithForwardSlashes.slice(\n      0,\n      mainPathWithForwardSlashes.lastIndexOf(pkgName) + pkgName.length\n    )\n    // Lazily access constants.WIN32.\n    _arboristPkgPath = constants.WIN32\n      ? path.normalize(arboristPkgPathWithForwardSlashes)\n      : arboristPkgPathWithForwardSlashes\n  }\n  return _arboristPkgPath\n}\n\nlet _arboristClassPath: string | undefined\nexport function getArboristClassPath() {\n  if (_arboristClassPath === undefined) {\n    _arboristClassPath = path.join(\n      getArboristPackagePath(),\n      'lib/arborist/index.js'\n    )\n  }\n  return _arboristClassPath\n}\n\nlet _arboristDepValidPath: string | undefined\nexport function getArboristDepValidPath() {\n  if (_arboristDepValidPath === undefined) {\n    _arboristDepValidPath = path.join(\n      getArboristPackagePath(),\n      'lib/dep-valid.js'\n    )\n  }\n  return _arboristDepValidPath\n}\n\nlet _arboristEdgeClassPath: string | undefined\nexport function getArboristEdgeClassPath() {\n  if (_arboristEdgeClassPath === undefined) {\n    _arboristEdgeClassPath = path.join(getArboristPackagePath(), 'lib/edge.js')\n  }\n  return _arboristEdgeClassPath\n}\n\nlet _arboristNodeClassPath: string | undefined\nexport function getArboristNodeClassPath() {\n  if (_arboristNodeClassPath === undefined) {\n    _arboristNodeClassPath = path.join(getArboristPackagePath(), 'lib/node.js')\n  }\n  return _arboristNodeClassPath\n}\n\nlet _arboristOverrideSetClassPath: string | undefined\nexport function getArboristOverrideSetClassPath() {\n  if (_arboristOverrideSetClassPath === undefined) {\n    _arboristOverrideSetClassPath = path.join(\n      getArboristPackagePath(),\n      'lib/override-set.js'\n    )\n  }\n  return _arboristOverrideSetClassPath\n}\n"],"names":["shadowBinPath","all","nothrow","length","shadowIndex","theBinPath","name","path","WIN32","existsSync","throwIfNoEntry","thePath","spinner","socketConfig","debugLog","SOCKET_CLI_ISSUES_URL","logger","process","_npmBinPathDetails","_npxBinPathDetails","_npmBinPath","_npxBinPath","_arboristPkgPath"],"mappings":";;;;;;;;;;;;;;AAmBA;;;AAA2BA;AAAc;AAElC;AAKL;AAEIC;AACAC;;;AAGJ;AACA;AAAkBC;;AAChB;AACA;;AAEEC;AACF;AACEC;AACA;AACF;AACF;;AACSC;AAAeC;;;AAC1B;AAEO;AACL;;AACQC;AAAM;;AAEd;AACE;AACA;AACA;AACA;AACA;AACA;AACE;AACA;AACA;AACAC;AACyBC;AAAsB;;AAGjD;;AAEA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACAD;AACmBC;AAAsB;AACzC;AACCH;AACC;AACCC;AAEH;AACF;AACA;;AAEE;AACF;AACAG;AACF;AACF;AAEO;;;AAWL;;AACQC;AAAQ;AAEhB;AAEAA;AAEA;;AAEEC;AACF;;;AAIEC;AAIAF;AACF;AACEA;AAGF;;AAOAA;AAGAE;AAEA;AACF;;AChIA;;;;AAAgCC;AAAsB;AAEtD;AACEC;AAGA;AACA;AACA;AACAC;AACF;AAEA;AACA;;AAEIC;AACF;AACA;AACF;AAEA;AACA;;AAEIC;AACF;AACA;AACF;AAEA;AACO;;AAEHC;;;AAGA;AACF;AACA;AACF;AAEO;AACL;AACF;AAEA;AACO;;AAEHC;;;AAGA;AACF;AACA;AACF;AAEO;AACL;AACF;AAEA;AACO;;AAEH;;;;AAIE;;AAEA;;AAEAL;AACA;AACA;AACA;AACAC;AACF;AACF;AACA;AACF;AAEA;AACO;;AAEH;;;AAKF;AACA;AACF;AAEA;AACO;;;AAGH;AAGA;AAIA;AACAK;AAGF;AACA;AACF;AAEA;AACO;;;AAML;AACA;AACF;AAEA;AACO;;;AAML;AACA;AACF;AAEA;AACO;;;AAGL;AACA;AACF;AAEA;AACO;;;AAGL;AACA;AACF;AAEA;AACO;;;AAML;AACA;AACF;;;;;;;;;;;;","debugId":"b482d192-205f-4708-8cc8-9c74bbc66f2b"}

package/dist/types/utils/arborist-helpers.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"arborist-helpers.d.mts","sourceRoot":"","sources":["../../../src/utils/arborist-helpers.mts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAQ7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,+CAA+C,CAAA;AAEzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAA;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAchF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,QAAQ,EACd,iBAAiB,EAAE,MAAM,EAAE,EAC3B,sBAAsB,CAAC,EAAE,MAAM,EAC/B,8BAA8B,CAAC,EAAE,MAAM,GAAG,SAAS,GAClD,MAAM,GAAG,IAAI,CAwBf;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAC3B,QAAQ,GAAG,SAAS,CAiBtB;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAC3B,QAAQ,EAAE,CAmBZ;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAA;CAC7C,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,QAAQ,CAAA;IACd,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAChC,CAAA;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,GAAG,IAAI,EAClB,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,GACrC,aAAa,EAAE,CA+EjB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAElE;AAED,MAAM,MAAM,SAAS,GAAG,OAAO,CAC7B,OAAO,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,EACjD,IAAI,CACL,CAAA;AAED,wBAAgB,UAAU,CACxB,IAAI,EAAE,QAAQ,EACd,UAAU,EAAE,MAAM,EAClB,mBAAmB,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACjD,IAAI,CAsDN;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,mBAAmB,EACpC,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,QAAQ,EACd,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CA+BT"}

package/dist/types/utils/npm.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"npm.d.mts","sourceRoot":"","sources":["../../../src/utils/npm.mts"],"names":[],"mappings":"AASA,OAAO,EAAE,KAAK,EAAE,MAAM,oCAAoC,CAAA;AAK1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AASnE,KAAK,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AAElE,KAAK,qBAAqB,GAAG,WAAW,GAAG;IACzC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,kGAgF7D"}