socket 0.14.38 → 0.14.40-alpha.0

package/dist/constants.js

@@ -20,8 +20,9 @@ const LOCK_EXT = '.lock';
 const NPM_REGISTRY_URL = 'https://registry.npmjs.org';
 const NPX = 'npx';
 const PNPM = 'pnpm';
+const SOCKET_CLI_FIX_PACKAGE_LOCK_FILE = 'SOCKET_CLI_FIX_PACKAGE_LOCK_FILE';
 const SOCKET_CLI_ISSUES_URL = 'https://github.com/SocketDev/socket-cli/issues';
-const UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE = 'UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE';
+const SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE = 'SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE';
 const VLT = 'vlt';
 const YARN_BERRY = 'yarn/berry';
 const YARN_CLASSIC = 'yarn/classic';
@@ -29,8 +30,12 @@ const LAZY_DIST_TYPE = () => registryConstants.SUPPORTS_NODE_REQUIRE_MODULE ? 'm
 const LAZY_ENV = () => Object.freeze({
   // Lazily access registryConstants.ENV.
   ...registryConstants.ENV,
-  // Flag set by the optimize command to bypass the packagesHaveRiskyIssues check.
-  [UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE]: env.envAsBoolean(process.env[UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE])
+  // Flag set by the "fix" command to accept the package alerts prompt with
+  // "Y(es)" in the SafeArborist reify method.
+  [SOCKET_CLI_FIX_PACKAGE_LOCK_FILE]: env.envAsBoolean(process.env[SOCKET_CLI_FIX_PACKAGE_LOCK_FILE]),
+  // Flag set by the "optimize" command to bypass the package alerts check
+  // in the SafeArborist reify method.
+  [SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE]: env.envAsBoolean(process.env[SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE])
 });
 const lazyCdxgenBinPath = () =>
 // Lazily access constants.nmBinPath.
@@ -69,8 +74,9 @@ const constants = createConstantsObject({
   NPM_REGISTRY_URL,
   NPX,
   PNPM,
+  SOCKET_CLI_FIX_PACKAGE_LOCK_FILE,
   SOCKET_CLI_ISSUES_URL,
-  UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE,
+  SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE,
   VLT,
   YARN_BERRY,
   YARN_CLASSIC,

package/dist/module-sync/cli.js

@@ -20,14 +20,14 @@ var yargsParse = _socketInterop(require('yargs-parser'));
 var npm$1 = require('@socketsecurity/registry/lib/npm');
 var words = require('@socketsecurity/registry/lib/words');
 var constants = require('./constants.js');
-var meow = _socketInterop(require('meow'));
+var spawn = _socketInterop(require('@npmcli/promise-spawn'));
 var yoctoSpinner = require('@socketregistry/yocto-spinner');
+var meow = _socketInterop(require('meow'));
 var sdk = require('./sdk.js');
 var prompts = require('@socketsecurity/registry/lib/prompts');
 var isInteractive = _socketInterop(require('is-interactive'));
 var terminalLink = _socketInterop(require('terminal-link'));
 var fs$1 = require('node:fs/promises');
-var spawn = _socketInterop(require('@npmcli/promise-spawn'));
 var npa = _socketInterop(require('npm-package-arg'));
 var semver = _socketInterop(require('semver'));
 var tinyglobby = _socketInterop(require('tinyglobby'));
@@ -176,8 +176,8 @@ const cdxgen = {
       length: unknownLength
     } = unknown;
     if (unknownLength) {
-      console.error(`Unknown ${words.pluralize('argument', unknownLength)}: ${yargv._.join(', ')}`);
       process.exitCode = 1;
+      console.error(`Unknown ${words.pluralize('argument', unknownLength)}: ${yargv._.join(', ')}`);
       return;
     }
     let cleanupPackageLock = false;
@@ -218,6 +218,33 @@ const cdxgen = {
   }
 };
 
+const {
+  SOCKET_CLI_FIX_PACKAGE_LOCK_FILE,
+  abortSignal: abortSignal$3,
+  execPath: execPath$1,
+  rootBinPath: rootBinPath$1
+} = constants;
+const fix = {
+  description: 'Fix "fixable" Socket alerts',
+  async run() {
+    const wrapperPath = path.join(rootBinPath$1, 'npm-cli.js');
+    const npmSpawnOptions = {
+      signal: abortSignal$3,
+      stdio: 'ignore',
+      env: {
+        ...process.env,
+        [SOCKET_CLI_FIX_PACKAGE_LOCK_FILE]: '1'
+      }
+    };
+    const spinner = yoctoSpinner().start();
+    try {
+      await spawn(execPath$1, [wrapperPath, 'install', '--silent'], npmSpawnOptions);
+    } finally {
+      spinner.stop();
+    }
+  }
+};
+
 const commonFlags = {
   help: {
     type: 'boolean',
@@ -990,7 +1017,7 @@ const {
   LOCK_EXT,
   NPM: NPM$1,
   PNPM,
-  UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE,
+  SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE,
   VLT,
   YARN_BERRY,
   YARN_CLASSIC,
@@ -1343,7 +1370,7 @@ const depsIncludesByAgent = (() => {
   };
 })();
 function createActionMessage(verb, overrideCount, workspaceCount) {
-  return `${verb} ${overrideCount} Socket.dev optimized overrides${workspaceCount ? ` in ${workspaceCount} ${words.pluralize('workspace', workspaceCount)}` : ''}`;
+  return `${verb} ${overrideCount} Socket.dev optimized ${words.pluralize('override', overrideCount)}${workspaceCount ? ` in ${workspaceCount} ${words.pluralize('workspace', workspaceCount)}` : ''}`;
 }
 function getDependencyEntries(pkgJson) {
   const {
@@ -1699,7 +1726,7 @@ const optimize = {
             stdio: 'ignore',
             env: {
               ...process.env,
-              [UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE]: '1'
+              [SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE]: '1'
             }
           };
           await spawn(execPath, [wrapperPath, 'install', '--silent'], npmSpawnOptions);
@@ -4458,6 +4485,7 @@ var cliCommands = {
   cdxgen: cdxgen,
   dependencies: dependencies,
   diffScan: diffScan,
+  fix: fix,
   info: info,
   login: login,
   logout: logout,

package/dist/module-sync/constants.d.ts

@@ -6,15 +6,17 @@ type Constants = {
     readonly BINARY_LOCK_EXT: '.lockb';
     readonly BUN: 'bun';
     readonly ENV: RegistryEnv & {
-        UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE: boolean;
+        SOCKET_CLI_FIX_PACKAGE_LOCK_FILE: boolean;
+        SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE: boolean;
     };
     readonly DIST_TYPE: 'module-sync' | 'require';
     readonly LOCK_EXT: '.lock';
     readonly NPM_REGISTRY_URL: 'https://registry.npmjs.org';
     readonly NPX: 'npx';
     readonly PNPM: 'pnpm';
+    readonly SOCKET_CLI_FIX_PACKAGE_LOCK_FILE: 'SOCKET_CLI_FIX_PACKAGE_LOCK_FILE';
     readonly SOCKET_CLI_ISSUES_URL: 'https://github.com/SocketDev/socket-cli/issues';
-    readonly UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE: 'UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE';
+    readonly SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE: 'SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE';
     readonly VLT: 'vlt';
     readonly YARN_BERRY: 'yarn/berry';
     readonly YARN_CLASSIC: 'yarn/classic';

package/dist/module-sync/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAIA,OAAO,iBAAiB,MAAM,wCAAwC,CAAA;AAEtE,KAAK,WAAW,GAAG,OAAO,iBAAiB,CAAC,GAAG,CAAA;AAE/C,KAAK,SAAS,GAAG;IACf,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAA;IAChD,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAA;IACxC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAA;IAClC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG;QAC1B,4CAA4C,EAAE,OAAO,CAAA;KACtD,CAAA;IACD,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,SAAS,CAAA;IAC7C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,CAAA;IACvD,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,qBAAqB,EAAE,gDAAgD,CAAA;IAChF,QAAQ,CAAC,4CAA4C,EAAE,8CAA8C,CAAA;IACrG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAA;IACjC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAA;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B,GAAG,OAAO,iBAAiB,CAAA;AAwE5B,QAAA,MAAM,SAAS,WA4Cd,CAAA"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAIA,OAAO,iBAAiB,MAAM,wCAAwC,CAAA;AAEtE,KAAK,WAAW,GAAG,OAAO,iBAAiB,CAAC,GAAG,CAAA;AAE/C,KAAK,SAAS,GAAG;IACf,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAA;IAChD,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAA;IACxC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAA;IAClC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG;QAC1B,gCAAgC,EAAE,OAAO,CAAA;QACzC,gDAAgD,EAAE,OAAO,CAAA;KAC1D,CAAA;IACD,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,SAAS,CAAA;IAC7C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,CAAA;IACvD,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,gCAAgC,EAAE,kCAAkC,CAAA;IAC7E,QAAQ,CAAC,qBAAqB,EAAE,gDAAgD,CAAA;IAChF,QAAQ,CAAC,gDAAgD,EAAE,kDAAkD,CAAA;IAC7G,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAA;IACjC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAA;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B,GAAG,OAAO,iBAAiB,CAAA;AA+E5B,QAAA,MAAM,SAAS,WA6Cd,CAAA"}