socket 0.14.40-alpha.2 → 0.14.40-alpha.4

package/dist/require/npm-injection.js

@@ -15,14 +15,14 @@ var https = require('node:https');
 var path = require('node:path');
 var readline = require('node:readline');
 var promises = require('node:timers/promises');
-var yoctoSpinner = require('@socketregistry/yocto-spinner');
+var npa = _socketInterop(require('npm-package-arg'));
+var semver = _socketInterop(require('semver'));
 var config = require('@socketsecurity/config');
 var registry = require('@socketsecurity/registry');
 var objects = require('@socketsecurity/registry/lib/objects');
 var packages = require('@socketsecurity/registry/lib/packages');
 var prompts = require('@socketsecurity/registry/lib/prompts');
-var npa = _socketInterop(require('npm-package-arg'));
-var semver = _socketInterop(require('semver'));
+var spinner = require('@socketsecurity/registry/lib/spinner');
 var constants = require('./constants.js');
 var sdk = require('./sdk.js');
 var pathResolve = require('./path-resolve.js');
@@ -374,7 +374,7 @@ function maybeReadfileSync(filepath) {
   return undefined;
 }
 async function getPackagesAlerts(safeArb, pkgs, output) {
-  const spinner = yoctoSpinner({
+  const spinner$1 = new spinner.Spinner({
     stream: output
   });
   let {
@@ -382,11 +382,11 @@ async function getPackagesAlerts(safeArb, pkgs, output) {
   } = pkgs;
   const packageAlerts = [];
   if (!remaining) {
-    spinner.success('No changes detected');
+    spinner$1.success('No changes detected');
     return packageAlerts;
   }
   const getText = () => `Looking up data for ${remaining} packages`;
-  spinner.start(getText());
+  spinner$1.start(getText());
   try {
     for await (const artifact of batchScan(pkgs.map(p => p.pkgid))) {
       if (!artifact.name || !artifact.version || !artifact.alerts?.length) {
@@ -455,7 +455,7 @@ async function getPackagesAlerts(safeArb, pkgs, output) {
         }
       }
       if (displayWarning) {
-        spinner.stop(`(socket) ${formatter.hyperlink(id, `https://socket.dev/npm/package/${name}/overview/${version}`)} contains risks:`);
+        spinner$1.stop(`(socket) ${formatter.hyperlink(id, `https://socket.dev/npm/package/${name}/overview/${version}`)} contains risks:`);
         alerts.sort((a, b) => a.type < b.type ? -1 : 1);
         const lines = new Set();
         for (const alert of alerts) {
@@ -472,14 +472,14 @@ async function getPackagesAlerts(safeArb, pkgs, output) {
         for (const line of lines) {
           output?.write(line);
         }
-        spinner.start();
+        spinner$1.start();
       }
       remaining -= 1;
-      spinner.text = remaining > 0 ? getText() : '';
+      spinner$1.text = remaining > 0 ? getText() : '';
       packageAlerts.push(...alerts);
     }
   } finally {
-    spinner.stop();
+    spinner$1.stop();
   }
   return packageAlerts;
 }
@@ -505,17 +505,22 @@ function walk(diff_) {
       action
     } = diff;
     if (action) {
-      const oldNode = diff.actual;
-      const oldPkgid = oldNode?.pkgid;
-      const pkgNode = diff.ideal;
-      const pkgid = pkgNode?.pkgid;
+      // The `oldNode`, i.e. `actual` node, may be `undefined` if there is no
+      // node_modules folder.
+      const {
+        actual: oldNode,
+        ideal: pkgNode
+      } = diff;
+      const {
+        pkgid
+      } = pkgNode;
       let existing;
       let keep = false;
       if (action === 'CHANGE') {
         if (pkgNode?.package.version !== oldNode?.package.version) {
           keep = true;
           if (oldNode?.package.name && oldNode.package.name === pkgNode?.package.name) {
-            existing = oldPkgid;
+            existing = oldNode.pkgid;
           }
         }
       } else {
@@ -1359,8 +1364,7 @@ async function updateAdvisoryDependencies(arb, alerts) {
 }
 function findPackageRecursively(tree, packageName) {
   const queue = [{
-    node: tree,
-    depth: 0
+    node: tree
   }];
   let sentinel = 0;
   while (queue.length) {
@@ -1368,7 +1372,6 @@ function findPackageRecursively(tree, packageName) {
       throw new Error('Detected infinite loop in findPackageRecursively');
     }
     const {
-      depth,
       node: currentNode
     } = queue.pop();
     const node = currentNode.children.get(packageName);
@@ -1379,8 +1382,7 @@ function findPackageRecursively(tree, packageName) {
     const children = [...currentNode.children.values()];
     for (let i = children.length - 1; i >= 0; i -= 1) {
       queue.push({
-        node: children[i],
-        depth: depth + 1
+        node: children[i]
       });
     }
   }

package/dist/require/sdk.js

@@ -9,17 +9,17 @@ function _socketInterop(e) {
   return c ? e.default : e
 }
 
-var colors = _socketInterop(require('yoctocolors-cjs'));
 var vendor = require('./vendor.js');
+var colors = _socketInterop(require('yoctocolors-cjs'));
 var hpagent = _socketInterop(require('hpagent'));
 var prompts = require('@socketsecurity/registry/lib/prompts');
 var strings = require('@socketsecurity/registry/lib/strings');
 var sdk = require('@socketsecurity/sdk');
-var constants = require('./constants.js');
 var fs = require('node:fs');
 var os = require('node:os');
 var path = require('node:path');
-var yoctoSpinner = require('@socketregistry/yocto-spinner');
+var spinner = require('@socketsecurity/registry/lib/spinner');
+var constants = require('./constants.js');
 
 class AuthError extends Error {}
 class InputError extends Error {
@@ -125,7 +125,7 @@ if (fs.existsSync(settingsPath)) {
   try {
     settings = JSON.parse(Buffer.from(raw, 'base64').toString());
   } catch {
-    yoctoSpinner().warning(`Failed to parse settings at ${settingsPath}`);
+    new spinner.Spinner().warning(`Failed to parse settings at ${settingsPath}`);
   }
 } else {
   fs.mkdirSync(path.dirname(settingsPath), {

package/dist/require/shadow-bin.js

@@ -11,8 +11,8 @@ function _socketInterop(e) {
 
 var path = require('node:path');
 var spawn = _socketInterop(require('@npmcli/promise-spawn'));
-var constants = require('./constants.js');
 var cmdShim = _socketInterop(require('cmd-shim'));
+var constants = require('./constants.js');
 var pathResolve = require('./path-resolve.js');
 
 const {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "0.14.40-alpha.2",
+  "version": "0.14.40-alpha.4",
   "description": "CLI tool for Socket.dev",
   "homepage": "http://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -61,16 +61,16 @@
     "@socketregistry/hyrious__bun.lockb": "1.0.9",
     "@socketregistry/yocto-spinner": "^1.0.2",
     "@socketsecurity/config": "^2.1.3",
-    "@socketsecurity/registry": "^1.0.63",
-    "@socketsecurity/sdk": "^1.3.0",
+    "@socketsecurity/registry": "^1.0.67",
+    "@socketsecurity/sdk": "^1.4.5",
     "blessed": "^0.1.81",
     "blessed-contrib": "^4.11.0",
-    "browserslist": "4.24.3",
+    "browserslist": "4.24.4",
     "chalk-table": "^1.0.2",
     "cmd-shim": "^7.0.0",
     "has-flag": "^4.0.0",
     "hpagent": "^1.2.0",
-    "ignore": "^7.0.0",
+    "ignore": "^7.0.1",
     "is-interactive": "^2.0.0",
     "is-unicode-supported": "^2.1.0",
     "meow": "^13.2.0",
@@ -81,7 +81,7 @@
     "semver": "^7.6.3",
     "synp": "^1.9.14",
     "terminal-link": "^3.0.0",
-    "tiny-updater": "^3.5.2",
+    "tiny-updater": "^3.5.3",
     "tinyglobby": "^0.2.10",
     "which": "^5.0.0",
     "yaml": "^2.7.0",
@@ -97,8 +97,8 @@
     "@babel/preset-env": "^7.26.0",
     "@babel/preset-typescript": "^7.26.0",
     "@babel/runtime": "^7.26.0",
-    "@eslint/compat": "^1.2.4",
-    "@eslint/js": "^9.17.0",
+    "@eslint/compat": "^1.2.5",
+    "@eslint/js": "^9.18.0",
     "@rollup/plugin-commonjs": "^28.0.2",
     "@rollup/plugin-json": "^6.1.0",
     "@rollup/plugin-node-resolve": "^16.0.0",
@@ -118,11 +118,11 @@
     "@types/update-notifier": "^6.0.8",
     "@types/which": "^3.0.4",
     "@types/yargs-parser": "^21.0.3",
-    "@typescript-eslint/eslint-plugin": "^8.19.1",
-    "@typescript-eslint/parser": "^8.19.1",
+    "@typescript-eslint/eslint-plugin": "^8.20.0",
+    "@typescript-eslint/parser": "^8.20.0",
     "c8": "^10.1.3",
     "custompatch": "^1.1.4",
-    "eslint": "^9.17.0",
+    "eslint": "^9.18.0",
     "eslint-import-resolver-oxc": "^0.8.0",
     "eslint-plugin-depend": "^0.12.0",
     "eslint-plugin-import-x": "^4.6.1",
@@ -130,19 +130,19 @@
     "eslint-plugin-sort-destructure-keys": "^2.0.0",
     "eslint-plugin-unicorn": "^56.0.1",
     "husky": "^9.1.7",
-    "knip": "^5.41.1",
+    "knip": "^5.42.0",
     "magic-string": "^0.30.17",
     "mock-fs": "^5.4.1",
     "nock": "^13.5.6",
     "npm-run-all2": "^7.0.2",
-    "oxlint": "0.15.5",
+    "oxlint": "0.15.6",
     "prettier": "3.4.2",
     "read-package-up": "^11.0.0",
-    "rollup": "4.30.0",
+    "rollup": "4.30.1",
     "rollup-plugin-ts": "^3.4.5",
     "type-coverage": "^2.29.7",
     "typescript": "5.4.5",
-    "typescript-eslint": "^8.19.1",
+    "typescript-eslint": "^8.20.0",
     "unplugin-purge-polyfills": "^0.0.7"
   },
   "overrides": {