socket 1.0.74 → 1.0.76

package/bin/cli.js

@@ -18,10 +18,12 @@ spawn(
   // Lazily access constants.execPath.
   constants.execPath,
   [
-    // Lazily access constants.nodeHardenFlags.
-    ...constants.nodeHardenFlags,
     // Lazily access constants.nodeNoWarningsFlags.
     ...constants.nodeNoWarningsFlags,
+    // Lazily access constants.nodeHardenFlags.
+    ...constants.nodeHardenFlags,
+    // Lazily access constants.nodeMemoryFlags.
+    ...constants.nodeMemoryFlags,
     // Lazily access constants.ENV.INLINED_SOCKET_CLI_SENTRY_BUILD.
     ...(constants.ENV.INLINED_SOCKET_CLI_SENTRY_BUILD
       ? [

package/dist/cli.js

@@ -9,6 +9,7 @@ var utils = require('./utils.js');
 var fs = require('node:fs/promises');
 var require$$5 = require('node:module');
 var constants = require('./constants.js');
+var flags = require('./flags.js');
 var words = require('../external/@socketsecurity/registry/lib/words');
 var prompts = require('../external/@socketsecurity/registry/lib/prompts');
 var fs$1 = require('node:fs');
@@ -67,7 +68,7 @@ async function fetchRepoAnalyticsData(repo, time, options) {
 
 // Note: Widgets does not seem to actually work as code :'(
 
-const require$5 = require$$5.createRequire((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
+const require$5 = require$$5.createRequire(require('node:url').pathToFileURL(__filename).href);
 const METRICS = ['total_critical_alerts', 'total_high_alerts', 'total_medium_alerts', 'total_low_alerts', 'total_critical_added', 'total_medium_added', 'total_low_added', 'total_high_added', 'total_critical_prevented', 'total_high_prevented', 'total_medium_prevented', 'total_low_prevented'];
 
 // Note: This maps `new Date(date).getMonth()` to English three letters
@@ -324,8 +325,8 @@ const config$M = {
   description: `Look up analytics data`,
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     file: {
       type: 'string',
       description: 'Path to store result, only valid with --json/--markdown'
@@ -499,7 +500,7 @@ async function fetchAuditLog(config, options) {
   });
 }
 
-const require$4 = require$$5.createRequire((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
+const require$4 = require$$5.createRequire(require('node:url').pathToFileURL(__filename).href);
 const {
   REDACTED
 } = constants;
@@ -761,8 +762,8 @@ const config$L = {
   description: 'Look up the audit log for an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -2041,7 +2042,7 @@ async function handleCreateNewScan({
   if (!wasValidInput) {
     return;
   }
-  debug.debugFn('notice', `found: ${packagePaths.length} local ${words.pluralize('file', packagePaths.length)}`);
+  logger.logger.success(`Found ${packagePaths.length} local ${words.pluralize('file', packagePaths.length)}`);
   debug.debugDir('inspect', {
     packagePaths
   });
@@ -2136,7 +2137,7 @@ const config$K = {
   description: 'Create a new scan and report whether it passes your security policy',
   hidden: true,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     autoManifest: {
       type: 'boolean',
       default: false,
@@ -2435,8 +2436,8 @@ async function run$M(argv, importMeta, {
     description: description$a,
     hidden: hidden$2,
     flags: {
-      ...utils.commonFlags,
-      ...utils.outputFlags
+      ...flags.commonFlags,
+      ...flags.outputFlags
     },
     help: (command, config) => `
     Usage
@@ -2537,8 +2538,8 @@ const config$J = {
   description: 'Get the value of a local CLI config item',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags
+    ...flags.commonFlags,
+    ...flags.outputFlags
   },
   help: (command, config) => `
     Usage
@@ -2679,8 +2680,8 @@ const config$I = {
   description: 'Show all local CLI config items and their values',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     full: {
       type: 'boolean',
       default: false,
@@ -2795,8 +2796,8 @@ async function run$J(argv, importMeta, {
     description: description$9,
     hidden: hidden$1,
     flags: {
-      ...utils.commonFlags,
-      ...utils.outputFlags
+      ...flags.commonFlags,
+      ...flags.outputFlags
     },
     help: (command, config) => `
     Usage
@@ -2923,8 +2924,8 @@ async function run$I(argv, importMeta, {
     description: description$8,
     hidden,
     flags: {
-      ...utils.commonFlags,
-      ...utils.outputFlags
+      ...flags.commonFlags,
+      ...flags.outputFlags
     },
     help: (command, config) => `
     Usage
@@ -4704,7 +4705,7 @@ const config$H = {
   description: 'Update dependencies with "fixable" Socket alerts',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     autoMerge: {
       type: 'boolean',
       default: false,
@@ -4799,6 +4800,7 @@ async function run$H(argv, importMeta, {
   parentName
 }) {
   const cli = utils.meowOrExit({
+    allowUnknownFlags: false,
     argv,
     config: config$H,
     importMeta,
@@ -4970,7 +4972,7 @@ async function setupTabCompletion(targetName) {
   };
 }
 function getTabCompletionScriptRaw() {
-  const sourceDir = path.dirname(require$$0.fileURLToPath((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href))));
+  const sourceDir = path.dirname(require$$0.fileURLToPath(require('node:url').pathToFileURL(__filename).href));
   const sourcePath = path.join(sourceDir, 'socket-completion.bash');
   if (!fs$1.existsSync(sourcePath)) {
     return {
@@ -5014,7 +5016,7 @@ const config$G = {
   description: 'Install bash completion for Socket CLI',
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: (command, config) => `
     Usage
@@ -5114,7 +5116,7 @@ const config$F = {
   description: 'Display the `socket.json` that would be applied for target folder',
   hidden: true,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: command => `
     Usage
@@ -5294,7 +5296,7 @@ const config$E = {
   description: 'Socket API login',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     apiBaseUrl: {
       type: 'string',
       description: 'API server to connect to for login'
@@ -5375,7 +5377,7 @@ const config$D = {
   description: 'Socket API logout',
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: (command, _config) => `
     Usage
@@ -5757,7 +5759,7 @@ const config$B = {
   description: 'Auto-detect build and attempt to generate manifest file',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     verbose: {
       type: 'boolean',
       default: false,
@@ -5852,8 +5854,8 @@ const config$A = {
   description: '[beta] Convert a Conda environment.yml file to a python requirements.txt',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     file: {
       type: 'string',
       description: 'Input file name (by default for Conda this is "environment.yml"), relative to cwd'
@@ -6010,7 +6012,7 @@ const config$z = {
   description: '[beta] Use Gradle to generate a manifest file (`pom.xml`) for a Gradle/Java/Kotlin/etc project',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     bin: {
       type: 'string',
       description: 'Location of gradlew binary to use, default: CWD/gradlew'
@@ -6167,7 +6169,7 @@ const config$y = {
   description: '[beta] Use Gradle to generate a manifest file (`pom.xml`) for a Kotlin project',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     bin: {
       type: 'string',
       description: 'Location of gradlew binary to use, default: CWD/gradlew'
@@ -6318,7 +6320,7 @@ const config$x = {
   description: "[beta] Generate a manifest file (`pom.xml`) from Scala's `build.sbt` file",
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     bin: {
       type: 'string',
       description: 'Location of sbt binary to use'
@@ -6903,7 +6905,7 @@ const config$w = {
   description: 'Start interactive configurator to customize default flag values for `socket manifest` in this dir',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     defaultOnReadError: {
       type: 'boolean',
       description: 'If reading the socket.json fails, just use a default config? Warning: This might override the existing json file!'
@@ -6973,7 +6975,7 @@ const config$v = {
   description: 'Generate a dependency manifest for given file or dir',
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   }};
 const cmdManifest = {
   description: config$v.description,
@@ -7007,7 +7009,7 @@ async function run$v(argv, importMeta, {
   });
 }
 
-const require$3 = require$$5.createRequire((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
+const require$3 = require$$5.createRequire(require('node:url').pathToFileURL(__filename).href);
 const {
   DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$u
 } = constants;
@@ -7016,7 +7018,7 @@ const config$u = {
   description: `npm wrapper functionality`,
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: (command, _config) => `
     Usage
@@ -7060,7 +7062,7 @@ async function run$u(argv, importMeta, {
   await shadowBin('npm', argv);
 }
 
-const require$2 = require$$5.createRequire((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
+const require$2 = require$$5.createRequire(require('node:url').pathToFileURL(__filename).href);
 const {
   DRY_RUN_BAILING_NOW: DRY_RUN_BAILING_NOW$t
 } = constants;
@@ -7069,7 +7071,7 @@ const config$t = {
   description: `npx wrapper functionality`,
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: (command, _config) => `
     Usage
@@ -7121,8 +7123,8 @@ const config$s = {
   description: 'Trigger an intentional error (for development)',
   hidden: true,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     throw: {
       type: 'boolean',
       default: false,
@@ -7988,7 +7990,7 @@ const config$r = {
   description: 'Optimize dependencies with @socketregistry overrides',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     pin: {
       type: 'boolean',
       default: false,
@@ -8162,7 +8164,7 @@ const config$q = {
   description: 'Search for any dependency that is being used in your organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     limit: {
       type: 'number',
       default: 50,
@@ -8173,7 +8175,7 @@ const config$q = {
       default: 0,
       description: 'Page number'
     },
-    ...utils.outputFlags
+    ...flags.outputFlags
   },
   help: (command, config) => `
     Usage
@@ -8298,8 +8300,8 @@ const config$p = {
   description: 'Retrieve the license policy of an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -8437,8 +8439,8 @@ const config$o = {
   description: 'Retrieve the security policy of an organization',
   hidden: true,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -8578,8 +8580,8 @@ const config$n = {
   description: 'List organizations associated with the API key used',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags
+    ...flags.commonFlags,
+    ...flags.outputFlags
   },
   help: (command, _config) => `
     Usage
@@ -8718,8 +8720,8 @@ const config$m = {
   description: 'List organizations associated with the API key used',
   hidden: true,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags
+    ...flags.commonFlags,
+    ...flags.outputFlags
   },
   help: (command, _config) => `
     Usage
@@ -9040,8 +9042,8 @@ const config$l = {
   description: 'Look up score for one package which reflects all of its transitive dependencies as well',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags
+    ...flags.commonFlags,
+    ...flags.outputFlags
   },
   help: (command, config) => `
     Usage
@@ -9399,8 +9401,8 @@ const config$k = {
   description: 'Look up info regarding one or more packages but not their transitives',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags
+    ...flags.commonFlags,
+    ...flags.outputFlags
   },
   help: (command, config) => `
     Usage
@@ -9552,7 +9554,7 @@ const config$j = {
   description: `Temporarily disable the Socket ${NPM} wrapper`,
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: command => `
     Usage
@@ -9617,7 +9619,7 @@ const config$i = {
   description: `Temporarily disable the Socket ${NPX} wrapper`,
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: command => `
     Usage
@@ -9731,8 +9733,8 @@ const config$h = {
   description: 'Create a repository in an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     defaultBranch: {
       type: 'string',
       default: 'main',
@@ -9893,8 +9895,8 @@ const config$g = {
   description: 'Delete a repository in an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -10163,8 +10165,8 @@ const config$f = {
   description: 'List repositories in an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     all: {
       type: 'boolean',
       default: false,
@@ -10365,8 +10367,8 @@ const config$e = {
   description: 'Update a repository in an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     defaultBranch: {
       type: 'string',
       shortFlag: 'b',
@@ -10554,8 +10556,8 @@ const config$d = {
   description: 'View repositories in an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -10697,8 +10699,8 @@ const config$c = {
   description: 'Create a scan',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     autoManifest: {
       type: 'boolean',
       description: 'Run `socket manifest auto` before collecting manifest files? This would be necessary for languages like Scala, Gradle, and Kotlin, See `socket manifest auto --help`.'
@@ -11060,8 +11062,8 @@ const config$b = {
   description: 'Delete a scan',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -11341,8 +11343,8 @@ const config$a = {
   description: 'See what changed between two Scans',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     depth: {
       type: 'number',
       default: 2,
@@ -12121,8 +12123,8 @@ const config$9 = {
   hidden: true,
   // wip
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     all: {
       type: 'boolean',
       description: 'Apply for all known repos reported by the Socket API. Supersedes `repos`.'
@@ -12437,8 +12439,8 @@ const config$8 = {
   description: 'List the scans for an organization',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     branch: {
       type: 'string',
       description: 'Filter to show only scans with this branch name'
@@ -12647,8 +12649,8 @@ const config$7 = {
   description: "Get a scan's metadata",
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     interactive: {
       type: 'boolean',
       default: true,
@@ -12779,8 +12781,8 @@ const config$6 = {
   description: 'Compute tier 1 reachability',
   hidden: true,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags
+    ...flags.commonFlags,
+    ...flags.outputFlags
   },
   help: (command, config) => `
     Usage
@@ -12844,8 +12846,8 @@ const config$5 = {
   description: 'Check whether a scan result passes the organizational policies (security, license)',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     fold: {
       type: 'string',
       default: 'none',
@@ -13298,7 +13300,7 @@ const config$4 = {
   description: 'Start interactive configurator to customize default flag values for `socket scan` in this dir',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
+    ...flags.commonFlags,
     defaultOnReadError: {
       type: 'boolean',
       description: 'If reading the socket.json fails, just use a default config? Warning: This might override the existing json file!'
@@ -13498,8 +13500,8 @@ const config$3 = {
   description: 'View the raw results of a scan',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     stream: {
       type: 'boolean',
       default: false,
@@ -13657,7 +13659,7 @@ async function fetchThreatFeed({
   return await utils.queryApiSafeJson(`orgs/${orgSlug}/threat-feed?${queryParams}`, 'the Threat Feed data');
 }
 
-const require$1 = require$$5.createRequire((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
+const require$1 = require$$5.createRequire(require('node:url').pathToFileURL(__filename).href);
 async function outputThreatFeed(result, outputKind) {
   if (!result.ok) {
     process.exitCode = result.code ?? 1;
@@ -13829,8 +13831,8 @@ const config$2 = {
   description: '[beta] View the threat feed',
   hidden: false,
   flags: {
-    ...utils.commonFlags,
-    ...utils.outputFlags,
+    ...flags.commonFlags,
+    ...flags.outputFlags,
     direction: {
       type: 'string',
       default: 'desc',
@@ -14136,7 +14138,7 @@ const config$1 = {
   description: 'Uninstall bash completion for Socket CLI',
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: (command, config) => `
     Usage
@@ -14341,7 +14343,7 @@ const config = {
   description: 'Enable or disable the Socket npm/npx wrapper',
   hidden: false,
   flags: {
-    ...utils.commonFlags
+    ...flags.commonFlags
   },
   help: (command, config) => `
     Usage
@@ -14439,7 +14441,7 @@ async function run(argv, importMeta, {
   }
 }
 
-const __filename$1 = require$$0.fileURLToPath((typeof document === 'undefined' ? require$$0.pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.js', document.baseURI).href)));
+const __filename$1 = require$$0.fileURLToPath(require('node:url').pathToFileURL(__filename).href);
 void (async () => {
   const registryUrl = vendor.registryUrl();
   await vendor.updater({
@@ -14585,20 +14587,6 @@ void (async () => {
     debug.debugDir('inspect', {
       error: e
     });
-
-    // Try to parse the flags, find out if --json or --markdown is set.
-    let isJson = false;
-    try {
-      const cli = vendor.meow(``, {
-        argv: process.argv.slice(2),
-        autoHelp: false,
-        flags: {},
-        importMeta: {
-          url: `${require$$0.pathToFileURL(__filename$1)}`
-        }
-      });
-      isJson = !!cli.flags['json'];
-    } catch {}
     let errorBody;
     let errorTitle;
     let errorMessage = '';
@@ -14616,6 +14604,20 @@ void (async () => {
     } else {
       errorTitle = 'Unexpected error with no details';
     }
+
+    // Try to parse the flags, find out if --json is set.
+    const isJson = (() => {
+      const cli = vendor.meow(``, {
+        argv: process.argv.slice(2),
+        autoHelp: false,
+        autoVersion: false,
+        flags: {},
+        importMeta: {
+          url: `${require$$0.pathToFileURL(__filename$1)}`
+        }
+      });
+      return !!cli.flags['json'];
+    })();
     if (isJson) {
       logger.logger.log(utils.serializeResultJson({
         ok: false,
@@ -14634,5 +14636,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=ba4215ca-3cc8-45b8-8900-a36e38e6cc4a
+//# debugId=17c5b5ba-1b60-498d-8e4a-b6943d431dd2
 //# sourceMappingURL=cli.js.map