socket 0.14.40-alpha.4 → 0.14.40-alpha.6

package/dist/module-sync/cli.js

@@ -230,9 +230,9 @@ const fix = {
     const wrapperPath = path.join(rootBinPath$1, 'npm-cli.js');
     const spinner$1 = new spinner.Spinner().start();
     try {
-      await spawn(execPath$1, [wrapperPath, 'install', '--silent'], {
+      await spawn(execPath$1, [wrapperPath, 'install'], {
         signal: abortSignal$3,
-        stdio: 'ignore',
+        stdio: 'inherit',
         env: {
           ...process.env,
           [SOCKET_CLI_FIX_PACKAGE_LOCK_FILE]: '1'
@@ -1724,17 +1724,17 @@ const optimize = {
           const wrapperPath = path.join(rootBinPath, 'npm-cli.js');
           const npmSpawnOptions = {
             signal: abortSignal$2,
-            stdio: 'ignore',
+            stdio: 'inherit',
             env: {
               ...process.env,
               [SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE]: '1'
             }
           };
-          await spawn(execPath, [wrapperPath, 'install', '--silent'], npmSpawnOptions);
+          await spawn(execPath, [wrapperPath, 'install'], npmSpawnOptions);
           // TODO: This is a temporary workaround for a `npm ci` bug where it
           // will error out after Socket Optimize generates a lock file. More
           // investigation is needed.
-          await spawn(execPath, [wrapperPath, 'install', '--silent', '--ignore-scripts', '--package-lock-only'], npmSpawnOptions);
+          await spawn(execPath, [wrapperPath, 'install', '--ignore-scripts', '--package-lock-only'], npmSpawnOptions);
         } else {
           // All package managers support the "install" command.
           await spawn(agentExecPath, ['install'], {

package/dist/module-sync/npm-injection.js

@@ -1241,7 +1241,12 @@ class SafeArborist extends Arborist {
     options.dryRun = old.dryRun;
     options['save'] = old.save;
     options['saveBundle'] = old.saveBundle;
-    const needInfoOn = walk(this['diff']);
+    const {
+      diff
+    } = this;
+    // `diff` is `null` when `options.packageLockOnly`, --package-lock-only,
+    // is `true`.
+    const needInfoOn = diff ? walk(diff) : [];
     if (needInfoOn.findIndex(c => c.repository_url === NPM_REGISTRY_URL) === -1) {
       // Nothing to check, hmmm already installed or all private?
       return await this[kRiskyReify](...args);

package/dist/require/cli.js

@@ -226,9 +226,9 @@ const fix = {
     const wrapperPath = path.join(rootBinPath$1, 'npm-cli.js');
     const spinner$1 = new spinner.Spinner().start();
     try {
-      await spawn(execPath$1, [wrapperPath, 'install', '--silent'], {
+      await spawn(execPath$1, [wrapperPath, 'install'], {
         signal: abortSignal$3,
-        stdio: 'ignore',
+        stdio: 'inherit',
         env: {
           ...process.env,
           [SOCKET_CLI_FIX_PACKAGE_LOCK_FILE]: '1'
@@ -1720,17 +1720,17 @@ const optimize = {
           const wrapperPath = path.join(rootBinPath, 'npm-cli.js');
           const npmSpawnOptions = {
             signal: abortSignal$2,
-            stdio: 'ignore',
+            stdio: 'inherit',
             env: {
               ...process.env,
               [SOCKET_CLI_UPDATE_OVERRIDES_IN_PACKAGE_LOCK_FILE]: '1'
             }
           };
-          await spawn(execPath, [wrapperPath, 'install', '--silent'], npmSpawnOptions);
+          await spawn(execPath, [wrapperPath, 'install'], npmSpawnOptions);
           // TODO: This is a temporary workaround for a `npm ci` bug where it
           // will error out after Socket Optimize generates a lock file. More
           // investigation is needed.
-          await spawn(execPath, [wrapperPath, 'install', '--silent', '--ignore-scripts', '--package-lock-only'], npmSpawnOptions);
+          await spawn(execPath, [wrapperPath, 'install', '--ignore-scripts', '--package-lock-only'], npmSpawnOptions);
         } else {
           // All package managers support the "install" command.
           await spawn(agentExecPath, ['install'], {

package/dist/require/npm-injection.js

@@ -1241,7 +1241,12 @@ class SafeArborist extends Arborist {
     options.dryRun = old.dryRun;
     options['save'] = old.save;
     options['saveBundle'] = old.saveBundle;
-    const needInfoOn = walk(this['diff']);
+    const {
+      diff
+    } = this;
+    // `diff` is `null` when `options.packageLockOnly`, --package-lock-only,
+    // is `true`.
+    const needInfoOn = diff ? walk(diff) : [];
     if (needInfoOn.findIndex(c => c.repository_url === NPM_REGISTRY_URL) === -1) {
       // Nothing to check, hmmm already installed or all private?
       return await this[kRiskyReify](...args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "0.14.40-alpha.4",
+  "version": "0.14.40-alpha.6",
   "description": "CLI tool for Socket.dev",
   "homepage": "http://github.com/SocketDev/socket-cli",
   "license": "MIT",