socket 0.14.22 → 0.14.24

package/dist/cli.js

@@ -2,34 +2,40 @@
 'use strict';
 
 var vendor = require('./vendor.js');
-var require$$0 = require('node:fs');
 var require$$1 = require('node:path');
-var require$$2$6 = require('node:url');
-var require$$6 = require('pony-cause');
+var require$$8$1 = require('node:url');
+var require$$4 = require('@socketsecurity/registry/lib/objects');
+var require$$6$1 = require('pony-cause');
+var require$$0 = require('node:fs');
 var require$$1$1 = require('@npmcli/promise-spawn');
-var require$$5 = require('yargs-parser');
+var require$$6 = require('yargs-parser');
 var sdk = require('./sdk.js');
 var require$$1$2 = require('@inquirer/prompts');
 var require$$1$4 = require('node:fs/promises');
 var require$$1$3 = require('@npmcli/package-json');
-var require$$5$1 = require('@socketsecurity/registry');
-var require$$7 = require('npm-package-arg');
-var require$$3 = require('semver');
-var require$$10$1 = require('tinyglobby');
-var require$$11 = require('yaml');
+var require$$5 = require('@socketsecurity/registry');
+var require$$7$1 = require('@socketsecurity/registry/lib/packages');
+var require$$8 = require('@socketsecurity/registry/lib/promises');
+var require$$9$1 = require('@socketsecurity/registry/lib/regexps');
+var require$$6$2 = require('@socketsecurity/registry/lib/strings');
+var require$$12 = require('npm-package-arg');
+var require$$14 = require('semver');
+var require$$15 = require('tinyglobby');
+var require$$16 = require('yaml');
 var require$$2 = require('@socketregistry/hyrious__bun.lockb');
-var require$$10 = require('browserslist');
-var require$$8 = require('which');
+var require$$4$1 = require('@socketsecurity/registry/lib/constants');
+var require$$7 = require('browserslist');
+var require$$9 = require('which');
 var require$$2$1 = require('@apideck/better-ajv-errors');
-var require$$3$1 = require('@socketsecurity/config');
+var require$$3 = require('@socketsecurity/config');
 var pathResolve = require('./path-resolve.js');
-var require$$2$2 = require('node:os');
-var require$$3$2 = require('node:readline');
+var require$$1$5 = require('node:os');
+var require$$3$1 = require('node:readline');
 var require$$0$1 = require('node:process');
-var require$$2$3 = require('node:readline/promises');
-var require$$2$4 = require('chalk-table');
-var require$$2$5 = require('blessed');
-var require$$3$3 = require('blessed-contrib');
+var require$$2$2 = require('node:readline/promises');
+var require$$2$3 = require('chalk-table');
+var require$$2$4 = require('blessed');
+var require$$3$2 = require('blessed-contrib');
 var require$$0$2 = require('node:util');
 
 var cli$1 = {};
@@ -45,11 +51,12 @@ Object.defineProperty(cdxgen, "__esModule", {
   value: true
 });
 cdxgen.cdxgen = void 0;
-var _nodeFs$4 = require$$0;
+var _nodeFs$3 = require$$0;
 var _nodePath$7 = require$$1;
 var _promiseSpawn$6 = require$$1$1;
+var _objects$6 = require$$4;
 var _chalk$j = _interopRequireDefault$s(vendor.source);
-var _yargsParser = require$$5;
+var _yargsParser = require$$6;
 const distPath$4 = __dirname;
 const {
   execPath
@@ -141,18 +148,18 @@ function argvToArray(argv) {
   for (const {
     0: key,
     1: value
-  } of Object.entries(argv)) {
+  } of (0, _objects$6.objectEntries)(argv)) {
     if (key === '_' || key === '--') continue;
     if (key === 'babel' || key === 'install-deps' || key === 'validate') {
       // cdxgen documents no-babel, no-install-deps, and no-validate flags so
       // use them when relevant.
       result.push(`--${value ? key : `no-${key}`}`);
     } else if (value === true) {
-      result.push(`--${key}`);
+      result.push(`--${String(key)}`);
     } else if (typeof value === 'string') {
-      result.push(`--${key}`, String(value));
+      result.push(`--${String(key)}`, String(value));
     } else if (Array.isArray(value)) {
-      result.push(`--${key}`, ...value.map(String));
+      result.push(`--${String(key)}`, ...value.map(String));
     }
   }
   if (argv['--']) {
@@ -176,14 +183,14 @@ cdxgen.cdxgen = {
       return;
     }
     let cleanupPackageLock = false;
-    if (yargv.type !== 'yarn' && nodejsPlatformTypes.includes(yargv.type) && (0, _nodeFs$4.existsSync)('./yarn.lock')) {
-      if ((0, _nodeFs$4.existsSync)('./package-lock.json')) {
+    if (yargv.type !== 'yarn' && nodejsPlatformTypes.includes(yargv.type) && (0, _nodeFs$3.existsSync)('./yarn.lock')) {
+      if ((0, _nodeFs$3.existsSync)('./package-lock.json')) {
         yargv.type = 'npm';
       } else {
         // Use synp to create a package-lock.json from the yarn.lock,
         // based on the node_modules folder, for a more accurate SBOM.
         try {
-          await _promiseSpawn$6(execPath, [await _nodeFs$4.promises.realpath(synpBinPath), '--source-file', './yarn.lock'], {
+          await _promiseSpawn$6(execPath, [await _nodeFs$3.promises.realpath(synpBinPath), '--source-file', './yarn.lock'], {
             shell: true
           });
           yargv.type = 'npm';
@@ -194,7 +201,7 @@ cdxgen.cdxgen = {
     if (yargv.output === undefined) {
       yargv.output = 'socket-cdx.json';
     }
-    await _promiseSpawn$6(execPath, [await _nodeFs$4.promises.realpath(cdxgenBinPath), ...argvToArray(yargv)], {
+    await _promiseSpawn$6(execPath, [await _nodeFs$3.promises.realpath(cdxgenBinPath), ...argvToArray(yargv)], {
       env: {
         NODE_ENV: '',
         SBOM_SIGN_ALGORITHM,
@@ -206,11 +213,11 @@ cdxgen.cdxgen = {
     });
     if (cleanupPackageLock) {
       try {
-        await _nodeFs$4.promises.unlink('./package-lock.json');
+        await _nodeFs$3.promises.unlink('./package-lock.json');
       } catch {}
     }
     const fullOutputPath = _nodePath$7.join(process.cwd(), yargv.output);
-    if ((0, _nodeFs$4.existsSync)(fullOutputPath)) {
+    if ((0, _nodeFs$3.existsSync)(fullOutputPath)) {
       console.log(_chalk$j.default.cyanBright(`${yargv.output} created!`));
     }
   }
@@ -282,7 +289,7 @@ apiHelpers.handleApiCall = handleApiCall;
 apiHelpers.handleUnsuccessfulApiResponse = handleUnsuccessfulApiResponse;
 apiHelpers.queryAPI = queryAPI;
 var _chalk$i = _interopRequireDefault$r(vendor.source);
-var _ponyCause$4 = require$$6;
+var _ponyCause$4 = require$$6$1;
 var _errors$l = sdk.errors;
 var _constants$1 = sdk.constants;
 function handleUnsuccessfulApiResponse(_name, result, spinner) {
@@ -353,7 +360,7 @@ Object.defineProperty(formatIssues, "__esModule", {
 formatIssues.formatSeverityCount = formatSeverityCount;
 formatIssues.getSeverityCount = getSeverityCount;
 var _misc$2 = sdk.misc;
-var _objects$4 = objects;
+var _objects$5 = objects;
 const SEVERITIES_BY_ORDER = ['critical', 'high', 'middle', 'low'];
 function getDesiredSeverities(lowestToInclude) {
   const result = [];
@@ -375,7 +382,7 @@ function formatSeverityCount(severityCount) {
   return (0, _misc$2.stringJoinWithSeparateFinalSeparator)(summary);
 }
 function getSeverityCount(issues, lowestToInclude) {
-  const severityCount = (0, _objects$4.pick)({
+  const severityCount = (0, _objects$5.pick)({
     low: 0,
     middle: 0,
     high: 0,
@@ -439,7 +446,7 @@ var _chalkMarkdown$3 = sdk.chalkMarkdown;
 var _errors$k = sdk.errors;
 var _formatIssues$1 = formatIssues;
 var _formatting$m = formatting;
-var _objects$3 = objects;
+var _objects$4 = objects;
 var _sdk$j = sdk.sdk;
 const info = info$1.info = {
   description: 'Look up info regarding a package',
@@ -555,7 +562,7 @@ function formatPackageDataOutput({
       License: Math.floor(score.license.score * 100)
     };
     Object.entries(scoreResult).map(score => console.log(`- ${score[0]}: ${formatScore(score[1])}`));
-    if ((0, _objects$3.objectSome)(severityCount)) {
+    if ((0, _objects$4.objectSome)(severityCount)) {
       const issueSummary = (0, _formatIssues$1.formatSeverityCount)(severityCount);
       console.log('\n');
       spinner[strict ? 'fail' : 'succeed'](`Package has these issues: ${issueSummary}`);
@@ -579,7 +586,7 @@ function formatPackageDataOutput({
       console.log(_chalk$h.default.dim('\nOr rerun', _chalk$h.default.italic(name), 'using the', _chalk$h.default.italic('--json'), 'flag to get full JSON output'));
     }
   }
-  if (strict && (0, _objects$3.objectSome)(severityCount)) {
+  if (strict && (0, _objects$4.objectSome)(severityCount)) {
     process.exit(1);
   }
 }
@@ -866,11 +873,11 @@ fs.existsSync = existsSync;
 fs.findUp = findUp;
 fs.readFileBinary = readFileBinary;
 fs.readFileUtf8 = readFileUtf8;
-var _nodeFs$3 = require$$0;
+var _nodeFs$2 = require$$0;
 var _nodePath$4 = require$$1;
 function existsSync(filepath) {
   try {
-    return filepath ? (0, _nodeFs$3.existsSync)(filepath) : false;
+    return filepath ? (0, _nodeFs$2.existsSync)(filepath) : false;
   } catch {}
   return false;
 }
@@ -887,7 +894,7 @@ async function findUp(name, {
       const filePath = _nodePath$4.join(dir, name);
       try {
         // eslint-disable-next-line no-await-in-loop
-        const stats = await _nodeFs$3.promises.stat(filePath);
+        const stats = await _nodeFs$2.promises.stat(filePath);
         if (stats.isFile()) {
           return filePath;
         }
@@ -898,13 +905,13 @@ async function findUp(name, {
   return undefined;
 }
 async function readFileBinary(filepath, options) {
-  return await _nodeFs$3.promises.readFile(filepath, {
+  return await _nodeFs$2.promises.readFile(filepath, {
     ...options,
     encoding: 'binary'
   });
 }
 async function readFileUtf8(filepath, options) {
-  return await _nodeFs$3.promises.readFile(filepath, {
+  return await _nodeFs$2.promises.readFile(filepath, {
     ...options,
     encoding: 'utf8'
   });
@@ -921,12 +928,12 @@ var _nodePath$3 = require$$1;
 var _packageJson$1 = require$$1$3;
 var _hyrious__bun = require$$2;
 var _promiseSpawn$3 = require$$1$1;
-var _browserslist = require$$10;
-var _semver$1 = require$$3;
-var _which = require$$8;
-var _constants = vendor.constants_1;
-var _objects$2 = vendor.objects;
-var _strings$1 = vendor.strings;
+var _constants = require$$4$1;
+var _objects$3 = require$$4;
+var _strings$1 = require$$6$2;
+var _browserslist = require$$7;
+var _semver$1 = require$$14;
+var _which = require$$9;
 var _fs$1 = fs;
 const AGENTS = packageManagerDetector.AGENTS = ['bun', 'npm', 'pnpm', 'yarn/berry', 'yarn/classic', 'vlt'];
 const {
@@ -1057,7 +1064,7 @@ async function detect({
   let minimumNodeVersion = _constants.maintainedNodeVersions.previous;
   if (pkgJson) {
     const browserField = pkgJson.browser;
-    if ((0, _strings$1.isNonEmptyString)(browserField) || (0, _objects$2.isObjectObject)(browserField)) {
+    if ((0, _strings$1.isNonEmptyString)(browserField) || (0, _objects$3.isObjectObject)(browserField)) {
       targets.browser = true;
     }
     const nodeRange = pkgJson.engines?.['node'];
@@ -1069,7 +1076,7 @@ async function detect({
     }
     const browserslistQuery = pkgJson['browserslist'];
     if (Array.isArray(browserslistQuery)) {
-      const browserslistTargets = _browserslist(browserslistQuery).map(s => s.toLowerCase()).toSorted(alphaNumericComparator);
+      const browserslistTargets = _browserslist(browserslistQuery).map(s => s.toLowerCase()).sort(alphaNumericComparator);
       const browserslistNodeTargets = browserslistTargets.filter(v => v.startsWith('node ')).map(v => v.slice(5 /*'node '.length*/));
       if (!targets.browser && browserslistTargets.length) {
         targets.browser = browserslistTargets.length !== browserslistNodeTargets.length;
@@ -1111,24 +1118,22 @@ var _promises$2 = require$$1$4;
 var _nodePath$2 = require$$1;
 var _promiseSpawn$2 = require$$1$1;
 var _packageJson = require$$1$3;
-var _registry = require$$5$1;
+var _registry = require$$5;
+var _objects$2 = require$$4;
+var _packages = require$$7$1;
+var _promises2 = require$$8;
+var _regexps = require$$9$1;
+var _strings = require$$6$2;
 var _meow$m = _interopRequireDefault$n(vendor.build);
-var _npmPackageArg = require$$7;
+var _npmPackageArg = require$$12;
 var _ora$i = _interopRequireDefault$n(vendor.ora);
-var _semver = require$$3;
-var _tinyglobby = require$$10$1;
-var _yaml = require$$11;
-var _packages = vendor.packages;
+var _semver = require$$14;
+var _tinyglobby = require$$15;
+var _yaml = require$$16;
 var _flags$j = flags$1;
 var _formatting$k = formatting;
 var _fs = fs;
-var _objects$1 = vendor.objects;
 var _packageManagerDetector = packageManagerDetector;
-var _promises2 = vendor.promises;
-var _regexps = vendor.regexps;
-var _strings = vendor.strings;
-//import cacache from 'cacache'
-
 const COMMAND_TITLE = 'Socket Optimize';
 const OVERRIDES_FIELD_NAME = 'overrides';
 const PNPM_WORKSPACE = 'pnpm-workspace';
@@ -1544,7 +1549,7 @@ async function addOverrides({
       overrides,
       type
     }) => {
-      const overrideExists = (0, _objects$1.hasOwn)(overrides, origPkgName);
+      const overrideExists = (0, _objects$2.hasOwn)(overrides, origPkgName);
       if (overrideExists || thingScanner(thingToScan, origPkgName)) {
         const oldSpec = overrideExists ? overrides[origPkgName] : undefined;
         const depAlias = depAliasMap.get(origPkgName);
@@ -1613,12 +1618,12 @@ async function addOverrides({
     });
   }
   if (state.added.size > 0 || state.updated.size > 0) {
-    editablePkgJson.update(Object.fromEntries(depEntries));
+    editablePkgJson.update((0, _objects$2.objectFromEntries)(depEntries));
     for (const {
       overrides,
       type
     } of overridesDataObjects) {
-      updateManifestByAgent[type](editablePkgJson, (0, _objects$1.toSortedObject)(overrides));
+      updateManifestByAgent[type](editablePkgJson, (0, _objects$2.toSortedObject)(overrides));
     }
     await editablePkgJson.save();
   }
@@ -1992,7 +1997,7 @@ view$3.view = void 0;
 var _chalk$f = _interopRequireDefault$j(vendor.source);
 var _meow$i = _interopRequireDefault$j(vendor.build);
 var _ora$g = _interopRequireDefault$j(vendor.ora);
-var _ponyCause$3 = require$$6;
+var _ponyCause$3 = require$$6$1;
 var _flags$g = flags$1;
 var _apiHelpers$g = apiHelpers;
 var _chalkMarkdown$2 = sdk.chalkMarkdown;
@@ -2132,10 +2137,10 @@ Object.defineProperty(create$5, "__esModule", {
 create$5.create = void 0;
 var _nodePath$1 = require$$1;
 var _betterAjvErrors = require$$2$1;
-var _config = require$$3$1;
+var _config = require$$3;
 var _meow$h = _interopRequireDefault$i(vendor.build);
 var _ora$f = _interopRequireDefault$i(vendor.ora);
-var _ponyCause$2 = require$$6;
+var _ponyCause$2 = require$$6$1;
 var _view$2 = view$3;
 var _flags$f = flags$1;
 var _apiHelpers$f = apiHelpers;
@@ -2359,7 +2364,7 @@ Object.defineProperty(meowWithSubcommands$1, "__esModule", {
 meowWithSubcommands$1.meowWithSubcommands = meowWithSubcommands;
 var _meow$g = _interopRequireDefault$h(vendor.build);
 var _formatting$f = formatting;
-var _objects = vendor.objects;
+var _objects$1 = require$$4;
 var _flags$e = flags$1;
 async function meowWithSubcommands(subcommands, options) {
   const {
@@ -2398,8 +2403,8 @@ async function meowWithSubcommands(subcommands, options) {
 
     Commands
       ${(0, _formatting$f.printHelpList)({
-    ...(0, _objects.toSortedObject)(subcommands),
-    ...(0, _objects.toSortedObject)(aliases)
+    ...(0, _objects$1.toSortedObject)(subcommands),
+    ...(0, _objects$1.toSortedObject)(aliases)
   }, 6)}
 
     Options
@@ -2448,9 +2453,9 @@ Object.defineProperty(wrapper$1, "__esModule", {
   value: true
 });
 wrapper$1.wrapper = void 0;
-var _nodeFs$2 = require$$0;
-var _nodeOs = require$$2$2;
-var _nodeReadline = require$$3$2;
+var _nodeFs$1 = require$$0;
+var _nodeOs = require$$1$5;
+var _nodeReadline = require$$3$1;
 var _meow$f = _interopRequireDefault$g(vendor.build);
 var _flags$d = flags$1;
 var _formatting$e = formatting;
@@ -2483,7 +2488,7 @@ function setupCommand$f(name, description, argv, importMeta) {
     flags
   });
   if (argv[0] === '--postinstall') {
-    const socketWrapperEnabled = _nodeFs$2.existsSync(BASH_FILE) && checkSocketWrapperAlreadySetup(BASH_FILE) || _nodeFs$2.existsSync(ZSH_BASH_FILE) && checkSocketWrapperAlreadySetup(ZSH_BASH_FILE);
+    const socketWrapperEnabled = _nodeFs$1.existsSync(BASH_FILE) && checkSocketWrapperAlreadySetup(BASH_FILE) || _nodeFs$1.existsSync(ZSH_BASH_FILE) && checkSocketWrapperAlreadySetup(ZSH_BASH_FILE);
     if (!socketWrapperEnabled) {
       installSafeNpm(`The Socket CLI is now successfully installed! 🎉
 
@@ -2506,23 +2511,23 @@ function setupCommand$f(name, description, argv, importMeta) {
     return;
   }
   if (enable) {
-    if (_nodeFs$2.existsSync(BASH_FILE)) {
+    if (_nodeFs$1.existsSync(BASH_FILE)) {
       const socketWrapperEnabled = checkSocketWrapperAlreadySetup(BASH_FILE);
       !socketWrapperEnabled && addAlias(BASH_FILE);
     }
-    if (_nodeFs$2.existsSync(ZSH_BASH_FILE)) {
+    if (_nodeFs$1.existsSync(ZSH_BASH_FILE)) {
       const socketWrapperEnabled = checkSocketWrapperAlreadySetup(ZSH_BASH_FILE);
       !socketWrapperEnabled && addAlias(ZSH_BASH_FILE);
     }
   } else if (disable) {
-    if (_nodeFs$2.existsSync(BASH_FILE)) {
+    if (_nodeFs$1.existsSync(BASH_FILE)) {
       removeAlias(BASH_FILE);
     }
-    if (_nodeFs$2.existsSync(ZSH_BASH_FILE)) {
+    if (_nodeFs$1.existsSync(ZSH_BASH_FILE)) {
       removeAlias(ZSH_BASH_FILE);
     }
   }
-  if (!_nodeFs$2.existsSync(BASH_FILE) && !_nodeFs$2.existsSync(ZSH_BASH_FILE)) {
+  if (!_nodeFs$1.existsSync(BASH_FILE) && !_nodeFs$1.existsSync(ZSH_BASH_FILE)) {
     console.error('There was an issue setting up the alias in your bash profile');
   }
 }
@@ -2544,10 +2549,10 @@ const askQuestion = (rl, query) => {
   rl.question(query, ans => {
     if (ans.toLowerCase() === 'y') {
       try {
-        if (_nodeFs$2.existsSync(BASH_FILE)) {
+        if (_nodeFs$1.existsSync(BASH_FILE)) {
           addAlias(BASH_FILE);
         }
-        if (_nodeFs$2.existsSync(ZSH_BASH_FILE)) {
+        if (_nodeFs$1.existsSync(ZSH_BASH_FILE)) {
           addAlias(ZSH_BASH_FILE);
         }
       } catch (e) {
@@ -2562,7 +2567,7 @@ const askQuestion = (rl, query) => {
   });
 };
 const addAlias = file => {
-  return _nodeFs$2.appendFile(file, 'alias npm="socket npm"\nalias npx="socket npx"\n', err => {
+  return _nodeFs$1.appendFile(file, 'alias npm="socket npm"\nalias npx="socket npx"\n', err => {
     if (err) {
       return new Error(`There was an error setting up the alias: ${err}`);
     }
@@ -2573,14 +2578,14 @@ If you want to disable it at any time, run \`socket wrapper --disable\`
   });
 };
 const removeAlias = file => {
-  return _nodeFs$2.readFile(file, 'utf8', function (err, data) {
+  return _nodeFs$1.readFile(file, 'utf8', function (err, data) {
     if (err) {
       console.error(`There was an error removing the alias: ${err}`);
       return;
     }
     const linesWithoutSocketAlias = data.split('\n').filter(l => l !== 'alias npm="socket npm"' && l !== 'alias npx="socket npx"');
     const updatedFileContent = linesWithoutSocketAlias.join('\n');
-    _nodeFs$2.writeFile(file, updatedFileContent, function (err) {
+    _nodeFs$1.writeFile(file, updatedFileContent, function (err) {
       if (err) {
         console.log(err);
         return;
@@ -2591,7 +2596,7 @@ const removeAlias = file => {
   });
 };
 const checkSocketWrapperAlreadySetup = file => {
-  const fileContent = _nodeFs$2.readFileSync(file, 'utf-8');
+  const fileContent = _nodeFs$1.readFileSync(file, 'utf-8');
   const linesWithSocketAlias = fileContent.split('\n').filter(l => l === 'alias npm="socket npm"' || l === 'alias npx="socket npx"');
   if (linesWithSocketAlias.length) {
     console.log(`The Socket npm/npx wrapper is set up in your bash profile (${file}).`);
@@ -2610,12 +2615,12 @@ Object.defineProperty(create$3, "__esModule", {
 });
 create$3.create = void 0;
 var _nodeProcess = require$$0$1;
-var _promises$1 = require$$2$3;
+var _promises$1 = require$$2$2;
 var _chalk$e = _interopRequireDefault$f(vendor.source);
 var _meow$e = _interopRequireDefault$f(vendor.build);
 var _open = _interopRequireDefault$f(vendor.open);
 var _ora$e = _interopRequireDefault$f(vendor.ora);
-var _ponyCause$1 = require$$6;
+var _ponyCause$1 = require$$6$1;
 var _apiHelpers$e = apiHelpers;
 var _errors$f = sdk.errors;
 var _formatting$d = formatting;
@@ -2904,7 +2909,7 @@ Object.defineProperty(list$3, "__esModule", {
 });
 list$3.list = void 0;
 var _chalk$c = _interopRequireDefault$d(vendor.source);
-var _chalkTable$3 = require$$2$4;
+var _chalkTable$3 = require$$2$3;
 var _meow$c = _interopRequireDefault$d(vendor.build);
 var _ora$c = _interopRequireDefault$d(vendor.ora);
 var _flags$b = flags$1;
@@ -3615,7 +3620,7 @@ Object.defineProperty(list$1, "__esModule", {
 });
 list$1.list = void 0;
 var _chalk$6 = _interopRequireDefault$7(vendor.source);
-var _chalkTable$2 = require$$2$4;
+var _chalkTable$2 = require$$2$3;
 var _meow$6 = _interopRequireDefault$7(vendor.build);
 var _ora$6 = _interopRequireDefault$7(vendor.ora);
 var _flags$6 = flags$1;
@@ -3878,7 +3883,7 @@ Object.defineProperty(view$1, "__esModule", {
 });
 view$1.view = void 0;
 var _chalk$4 = _interopRequireDefault$5(vendor.source);
-var _chalkTable$1 = require$$2$4;
+var _chalkTable$1 = require$$2$3;
 var _meow$4 = _interopRequireDefault$5(vendor.build);
 var _ora$4 = _interopRequireDefault$5(vendor.ora);
 var _flags$4 = flags$1;
@@ -4023,7 +4028,7 @@ Object.defineProperty(dependencies$1, "__esModule", {
 });
 dependencies$1.dependencies = void 0;
 var _chalk$3 = _interopRequireDefault$4(vendor.source);
-var _chalkTable = require$$2$4;
+var _chalkTable = require$$2$3;
 var _meow$3 = _interopRequireDefault$4(vendor.build);
 var _ora$3 = _interopRequireDefault$4(vendor.ora);
 var _flags$3 = flags$1;
@@ -4157,8 +4162,8 @@ Object.defineProperty(analytics$1, "__esModule", {
 });
 analytics$1.analytics = void 0;
 var _promises = require$$1$4;
-var _blessed$1 = require$$2$5;
-var _blessedContrib$1 = require$$3$3;
+var _blessed$1 = require$$2$4;
+var _blessedContrib$1 = require$$3$2;
 var _chalk$2 = _interopRequireDefault$3(vendor.source);
 var _meow$2 = _interopRequireDefault$3(vendor.build);
 var _ora$2 = _interopRequireDefault$3(vendor.ora);
@@ -4477,7 +4482,7 @@ Object.defineProperty(get$1, "__esModule", {
   value: true
 });
 get$1.get = void 0;
-var _nodeFs$1 = require$$0;
+var _nodeFs = require$$0;
 var _nodeUtil = require$$0$2;
 var _chalk$1 = _interopRequireDefault$2(vendor.source);
 var _meow$1 = _interopRequireDefault$2(vendor.build);
@@ -4599,7 +4604,7 @@ async function getDiffScan({
   }
   spinner.stop();
   if (file && !outputJson) {
-    _nodeFs$1.writeFile(file, JSON.stringify(data), err => {
+    _nodeFs.writeFile(file, JSON.stringify(data), err => {
       err ? console.error(err) : console.log(`Data successfully written to ${file}`);
     });
     return;
@@ -4652,8 +4657,8 @@ Object.defineProperty(threatFeed$1, "__esModule", {
   value: true
 });
 threatFeed$1.threatFeed = void 0;
-var _blessed = require$$2$5;
-var _blessedContrib = require$$3$3;
+var _blessed = require$$2$4;
+var _blessedContrib = require$$3$2;
 var _meow = _interopRequireDefault$1(vendor.build);
 var _ora = _interopRequireDefault$1(vendor.ora);
 var _flags = flags$1;
@@ -5031,20 +5036,23 @@ const getMinDiff = (start, end) => Math.floor((end - start) / 60000);
 
 var _interopRequireWildcard = vendor.interopRequireWildcard.default;
 var _interopRequireDefault = vendor.interopRequireDefault.default;
-var _nodeFs = require$$0;
 var _nodePath = require$$1;
-var _nodeUrl = require$$2$6;
+var _nodeUrl = require$$8$1;
+var _objects = require$$4;
 var _chalk = _interopRequireDefault(vendor.source);
-var _ponyCause = require$$6;
-var _updateNotifier = _interopRequireDefault(vendor.updateNotifier);
+var _ponyCause = require$$6$1;
+var _tinyUpdater = _interopRequireDefault(vendor.dist);
 var cliCommands = _interopRequireWildcard(commands, true);
 var _chalkMarkdown = sdk.chalkMarkdown;
 var _errors = sdk.errors;
 var _meowWithSubcommands = meowWithSubcommands$1;
 const distPath = __dirname;
 const rootPath = _nodePath.resolve(distPath, '..');
-const formattedCliCommands = Object.fromEntries(Object.entries(cliCommands).map(entry => {
-  entry[0] = camelToHyphen(entry[0]);
+const rootPkgJsonPath = _nodePath.join(rootPath, 'package.json');
+const rootPkgJson = require(rootPkgJsonPath);
+const formattedCliCommands = (0, _objects.objectFromEntries)((0, _objects.objectEntries)(cliCommands).map(entry => {
+  const key = entry[0];
+  entry[0] = typeof key === 'string' ? camelToHyphen(key) : key;
   return entry;
 }));
 function camelToHyphen(str) {
@@ -5053,11 +5061,11 @@ function camelToHyphen(str) {
 
 // TODO: Add autocompletion using https://socket.dev/npm/package/omelette
 void (async () => {
-  try {
-    (0, _updateNotifier.default)({
-      pkg: JSON.parse((0, _nodeFs.readFileSync)(_nodePath.join(rootPath, 'package.json'), 'utf8'))
-    }).notify();
-  } catch {}
+  await (0, _tinyUpdater.default)({
+    name: rootPkgJson.name,
+    version: rootPkgJson.version,
+    ttl: 86_400_000 /* 24 hours in milliseconds */
+  });
   try {
     await (0, _meowWithSubcommands.meowWithSubcommands)(formattedCliCommands, {
       aliases: {
@@ -5073,9 +5081,9 @@ void (async () => {
       }
     });
   } catch (err) {
+    let errorBody;
     let errorTitle;
     let errorMessage = '';
-    let errorBody;
     if (err instanceof _errors.AuthError) {
       errorTitle = 'Authentication error';
       errorMessage = err.message;

package/dist/link.js

@@ -2,7 +2,7 @@
 
 var require$$0 = require('node:fs');
 var require$$1 = require('node:path');
-var require$$8 = require('which');
+var require$$9 = require('which');
 
 var link = {};
 
@@ -12,7 +12,7 @@ Object.defineProperty(link, "__esModule", {
 link.installLinks = installLinks;
 var _nodeFs = require$$0;
 var _nodePath = require$$1;
-var _which = require$$8;
+var _which = require$$9;
 function installLinks(realDirname, binName) {
   const realShadowBinDir = realDirname;
   // find package manager being shadowed by this process