socket 1.1.2 → 1.1.4

package/external/@socketsecurity/registry/lib/constants/env.js

@@ -39,9 +39,6 @@ module.exports = ObjectFreeze({
   PRE_COMMIT: envAsBoolean(env.PRE_COMMIT),
   // Enable debug logging in Socket CLI.
   SOCKET_CLI_DEBUG: !!DEBUG || envAsBoolean(env.SOCKET_CLI_DEBUG),
-  // TAP=1 is set by the tap-run test runner.
-  // https://node-tap.org/environment/#environment-variables-used-by-tap
-  TAP: envAsBoolean(env.TAP),
   // VITEST=true is set by the Vitest test runner.
   // https://vitest.dev/config/#configuring-vitest
   VITEST: envAsBoolean(env.VITEST)

package/external/@socketsecurity/registry/lib/constants/ext-cjs.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.cjs'

package/external/@socketsecurity/registry/lib/constants/ext-cts.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.cts'

package/external/@socketsecurity/registry/lib/constants/ext-dts.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.d.ts'

package/external/@socketsecurity/registry/lib/constants/ext-js.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.js'

package/external/@socketsecurity/registry/lib/constants/ext-json.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.json'

package/external/@socketsecurity/registry/lib/constants/ext-lock.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.lock'

package/external/@socketsecurity/registry/lib/constants/ext-lockb.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.lockb'

package/external/@socketsecurity/registry/lib/constants/ext-md.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.md'

package/external/@socketsecurity/registry/lib/constants/ext-mjs.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.mjs'

package/external/@socketsecurity/registry/lib/constants/ext-mts.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = '.mts'

package/external/@socketsecurity/registry/lib/constants/index.js

@@ -2,78 +2,77 @@
 
 const getIpc = /*@__PURE__*/ require('./get-ipc')
 const { createConstantsObject } = /*@__PURE__*/ require('../objects')
+const { toKebabCase } = /*@__PURE__*/ require('../strings')
 
-/*@__NO_SIDE_EFFECTS__*/
-function toKebabCase(str) {
-  return (
-    str
-      // Convert camelCase to kebab-case
-      .replace(/([a-z]+[0-9]*)([A-Z])/g, '$1-$2')
-      // Convert underscores to hyphens
-      .replace(/_/g, '-')
-      .toLowerCase()
-  )
-}
-
-const constantsObj = {
+const props = {
   // Lazily defined values are initialized as `undefined` to keep their key order.
-  AT_LATEST: undefined,
-  BIOME_JSON: undefined,
-  CI: undefined,
-  COLUMN_LIMIT: undefined,
+  AT_LATEST: '@latest',
+  BIOME_JSON: 'biome.json',
+  CI: 'CI',
+  COLUMN_LIMIT: 80,
   DARWIN: undefined,
-  EMPTY_FILE: undefined,
+  EMPTY_FILE: '/* empty */\n',
   ENV: undefined,
-  ESLINT_CONFIG_JS: undefined,
-  ESNEXT: undefined,
-  EXT_CMD: undefined,
-  EXT_PS1: undefined,
-  EXTENSIONS: undefined,
-  EXTENSIONS_JSON: undefined,
-  GITIGNORE: undefined,
-  HIDDEN_PACKAGE_LOCK_JSON: undefined,
-  IPC: undefined,
-  LATEST: undefined,
-  LICENSE: undefined,
-  LICENSE_GLOB: undefined,
-  LICENSE_GLOB_RECURSIVE: undefined,
-  LICENSE_ORIGINAL: undefined,
-  LICENSE_ORIGINAL_GLOB: undefined,
-  LICENSE_ORIGINAL_GLOB_RECURSIVE: undefined,
-  LOOP_SENTINEL: undefined,
-  MANIFEST_JSON: undefined,
-  MIT: undefined,
-  NODE_AUTH_TOKEN: undefined,
-  NODE_ENV: undefined,
-  NODE_MODULES: undefined,
-  NODE_MODULES_GLOB_RECURSIVE: undefined,
-  NODE_WORKSPACES: undefined,
+  ESLINT_CONFIG_JS: 'eslint.config.js',
+  ESNEXT: 'esnext',
+  EXT_CJS: '.cjs',
+  EXT_CMD: '.cmd',
+  EXT_CTS: '.cts',
+  EXT_DTS: '.d.ts',
+  EXT_JS: '.js',
+  EXT_JSON: '.json',
+  EXT_LOCK: '.lock',
+  EXT_LOCKB: '.lockb',
+  EXT_MD: '.md',
+  EXT_MJS: '.mjs',
+  EXT_MTS: '.mts',
+  EXT_PS1: '.ps1',
+  EXTENSIONS: 'extensions',
+  EXTENSIONS_JSON: 'extensions.json',
+  GITIGNORE: '.gitignore',
+  HIDDEN_PACKAGE_LOCK_JSON: '.package-lock.json',
+  LATEST: 'latest',
+  LICENSE: 'LICENSE',
+  LICENSE_GLOB: 'LICEN[CS]E{[.-]*,}',
+  LICENSE_GLOB_RECURSIVE: '**/LICEN[CS]E{[.-]*,}',
+  LICENSE_ORIGINAL: 'LICENSE.original',
+  LICENSE_ORIGINAL_GLOB: '*.original{.*,}',
+  LICENSE_ORIGINAL_GLOB_RECURSIVE: '**/*.original{.*,}',
+  LOOP_SENTINEL: 1000000,
+  MANIFEST_JSON: 'manifest.json',
+  MIT: 'MIT',
+  NODE_AUTH_TOKEN: 'NODE_AUTH_TOKEN',
+  NODE_ENV: 'NODE_ENV',
+  NODE_MODULES: 'node_modules',
+  NODE_MODULES_GLOB_RECURSIVE: '**/node_modules',
+  NODE_WORKSPACES: 'node_workspaces',
   NODE_VERSION: undefined,
-  NPM: undefined,
-  NPX: undefined,
-  OVERRIDES: undefined,
+  NPM: 'npm',
+  NPX: 'npx',
+  OVERRIDES: 'overrides',
   PACKAGE_DEFAULT_SOCKET_CATEGORIES: undefined,
   PACKAGE_DEFAULT_NODE_RANGE: undefined,
-  PACKAGE_DEFAULT_VERSION: undefined,
-  PACKAGE_JSON: undefined,
-  PACKAGE_LOCK_JSON: undefined,
-  PRE_COMMIT: undefined,
-  README_GLOB: undefined,
-  README_GLOB_RECURSIVE: undefined,
-  README_MD: undefined,
-  REGISTRY_SCOPE_DELIMITER: undefined,
-  REGISTRY: undefined,
-  RESOLUTIONS: undefined,
-  SOCKET_GITHUB_ORG: undefined,
-  SOCKET_IPC_HANDSHAKE: undefined,
-  SOCKET_OVERRIDE_SCOPE: undefined,
-  SOCKET_PUBLIC_API_KEY: undefined,
-  SOCKET_PUBLIC_API_TOKEN: undefined,
-  SOCKET_REGISTRY_NPM_ORG: undefined,
-  SOCKET_REGISTRY_PACKAGE_NAME: undefined,
-  SOCKET_REGISTRY_REPO_NAME: undefined,
-  SOCKET_REGISTRY_SCOPE: undefined,
-  SOCKET_SECURITY_SCOPE: undefined,
+  PACKAGE_DEFAULT_VERSION: '1.0.0',
+  PACKAGE_JSON: 'package.json',
+  PACKAGE_LOCK_JSON: 'package-lock.json',
+  PNPM: 'pnpm',
+  PRE_COMMIT: 'PRE_COMMIT',
+  README_GLOB: 'README{.*,}',
+  README_GLOB_RECURSIVE: '**/README{.*,}',
+  README_MD: 'README.md',
+  REGISTRY_SCOPE_DELIMITER: '__',
+  REGISTRY: 'registry',
+  RESOLUTIONS: 'resolutions',
+  SOCKET_GITHUB_ORG: 'SocketDev',
+  SOCKET_IPC_HANDSHAKE: 'SOCKET_IPC_HANDSHAKE',
+  SOCKET_OVERRIDE_SCOPE: '@socketoverride',
+  SOCKET_PUBLIC_API_TOKEN:
+    'sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api',
+  SOCKET_REGISTRY_NPM_ORG: 'socketregistry',
+  SOCKET_REGISTRY_PACKAGE_NAME: '@socketsecurity/registry',
+  SOCKET_REGISTRY_REPO_NAME: 'socket-registry',
+  SOCKET_REGISTRY_SCOPE: '@socketregistry',
+  SOCKET_SECURITY_SCOPE: '@socketsecurity',
   SUPPORTS_NODE_COMPILE_CACHE_API: undefined,
   SUPPORTS_NODE_COMPILE_CACHE_ENV_VAR: undefined,
   SUPPORTS_NODE_DISABLE_WARNING_FLAG: undefined,
@@ -81,27 +80,28 @@ const constantsObj = {
   SUPPORTS_NODE_REQUIRE_MODULE: undefined,
   SUPPORTS_NODE_RUN: undefined,
   SUPPORTS_PROCESS_SEND: undefined,
-  TAP: undefined,
-  TEMPLATE_CJS: undefined,
-  TEMPLATE_CJS_BROWSER: undefined,
-  TEMPLATE_CJS_ESM: undefined,
-  TEMPLATE_ES_SHIM_CONSTRUCTOR: undefined,
-  TEMPLATE_ES_SHIM_PROTOTYPE_METHOD: undefined,
-  TEMPLATE_ES_SHIM_STATIC_METHOD: undefined,
-  TSCONFIG_JSON: undefined,
+  TEMPLATE_CJS: 'cjs',
+  TEMPLATE_CJS_BROWSER: 'cjs-browser',
+  TEMPLATE_CJS_ESM: 'cjs-esm',
+  TEMPLATE_ES_SHIM_CONSTRUCTOR: 'es-shim-constructor',
+  TEMPLATE_ES_SHIM_PROTOTYPE_METHOD: 'es-shim-prototype-method',
+  TEMPLATE_ES_SHIM_STATIC_METHOD: 'es-shim-static-method',
+  TSCONFIG_JSON: 'tsconfig.json',
   UNDEFINED_TOKEN: undefined,
-  UNLICENCED: undefined,
-  UNLICENSED: undefined,
-  UTF8: undefined,
-  VITEST: undefined,
+  UNLICENCED: 'UNLICENCED',
+  UNLICENSED: 'UNLICENSED',
+  UTF8: 'utf8',
+  VITEST: 'VITEST',
   WIN32: undefined,
+  YARN_LOCK: 'yarn.lock',
   abortController: undefined,
   abortSignal: undefined,
   copyLeftLicenses: undefined,
   execPath: undefined,
-  ignoreGlobs: undefined,
+  ipcObject: undefined,
   lifecycleScriptNames: undefined,
   maintainedNodeVersions: undefined,
+  nodeDebugFlags: undefined,
   nodeHardenFlags: undefined,
   nodeNoWarningsFlags: undefined,
   npmExecPath: undefined,
@@ -117,12 +117,11 @@ const constantsObj = {
   win32EnsureTestsByEcosystem: undefined
 }
 
-module.exports = createConstantsObject(constantsObj, {
+module.exports = createConstantsObject(props, {
   getters: Object.fromEntries(
-    Object.keys(constantsObj).map(k => [
-      k,
-      () => require(`./${toKebabCase(k)}`)
-    ])
+    Object.keys(props)
+      .filter(k => props[k] === undefined)
+      .map(k => [k, () => require(`./${toKebabCase(k)}`)])
   ),
   internals: {
     createConstantsObject,

package/external/@socketsecurity/registry/lib/constants/ipc-promise.js

@@ -11,14 +11,14 @@ module.exports = new Promise(
       // because constants is not initialized yet.
       typeof process.send !== 'function'
     ) {
-      resolve(/*@__PURE__*/ require('./ipc'))
+      resolve(/*@__PURE__*/ require('./ipc-object'))
       return
     }
     const abortSignal = /*@__PURE__*/ require('./abort-signal')
     const finish = () => {
       abortSignal.removeEventListener('abort', finish)
       process.removeListener('message', onmessage)
-      resolve(/*@__PURE__*/ require('./ipc'))
+      resolve(/*@__PURE__*/ require('./ipc-object'))
     }
     const onmessage = rawData => {
       if (rawData !== null && typeof rawData === 'object') {
@@ -40,9 +40,8 @@ module.exports = new Promise(
     }
     abortSignal.addEventListener('abort', finish, { once: true })
     process.on('message', onmessage)
-    // The timeout of 1,000 milliseconds, i.e. 1 second, is to prevent an
-    // unresolved promised. It should be more than enough time for the IPC
-    // handshake.
+    // The timeout of 1,000 milliseconds, i.e. 1 second, is to prevent an unresolved
+    // promised. It should be more than enough time for the ipc object handshake.
     setTimeout(finish, 1000)
   }
 )

package/external/@socketsecurity/registry/lib/constants/node-debug-flags.js

@@ -0,0 +1,9 @@
+'use strict'
+
+const { freeze: ObjectFreeze } = Object
+
+const ENV = /*@__PURE__*/ require('./env')
+
+module.exports = ObjectFreeze(
+  ENV.SOCKET_CLI_DEBUG ? ['--trace-uncaught', '--trace-warnings'] : []
+)

package/external/@socketsecurity/registry/lib/constants/pnpm.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = 'pnpm'

package/external/@socketsecurity/registry/lib/constants/yarn-lock.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = 'yarn.lock'

package/external/@socketsecurity/registry/lib/fs.js

@@ -147,19 +147,26 @@ async function readJson(filepath, options) {
     options = { encoding: options }
   }
   const { reviver, throws, ...fsOptions } = { __proto__: null, ...options }
+  const shouldThrow = throws === undefined || !!throws
   const fs = getFs()
-  return jsonParse(
-    await fs.promises.readFile(filepath, {
+  let content = ''
+  try {
+    content = await fs.promises.readFile(filepath, {
       __proto__: null,
       encoding: 'utf8',
       ...fsOptions
-    }),
-    {
-      filepath,
-      reviver,
-      throws
+    })
+  } catch (e) {
+    if (shouldThrow) {
+      throw e
     }
-  )
+    return null
+  }
+  return jsonParse(content, {
+    filepath,
+    reviver,
+    throws: shouldThrow
+  })
 }
 
 /*@__NO_SIDE_EFFECTS__*/
@@ -168,19 +175,26 @@ function readJsonSync(filepath, options) {
     options = { encoding: options }
   }
   const { reviver, throws, ...fsOptions } = { __proto__: null, ...options }
+  const shouldThrow = throws === undefined || !!throws
   const fs = getFs()
-  return jsonParse(
-    fs.readFileSync(filepath, {
+  let content = ''
+  try {
+    content = fs.readFileSync(filepath, {
       __proto__: null,
       encoding: 'utf8',
       ...fsOptions
-    }),
-    {
-      filepath,
-      reviver,
-      throws
+    })
+  } catch (e) {
+    if (shouldThrow) {
+      throw e
     }
-  )
+    return null
+  }
+  return jsonParse(content, {
+    filepath,
+    reviver,
+    throws: shouldThrow
+  })
 }
 
 /*@__NO_SIDE_EFFECTS__*/

package/external/@socketsecurity/registry/lib/json.js

@@ -20,6 +20,16 @@ function isBuffer(x) {
   return !!(typeof Ctor?.isBuffer === 'function' && Ctor.isBuffer(x))
 }
 
+/*@__NO_SIDE_EFFECTS__*/
+function isJsonPrimitive(value) {
+  return (
+    value === null ||
+    typeof value === 'boolean' ||
+    typeof value === 'number' ||
+    typeof value === 'string'
+  )
+}
+
 /*@__NO_SIDE_EFFECTS__*/
 function jsonParse(content, options) {
   const { filepath, reviver, throws } = { __proto__: null, ...options }
@@ -38,5 +48,6 @@ function jsonParse(content, options) {
   return null
 }
 module.exports = {
+  isJsonPrimitive,
   jsonParse
 }

package/external/@socketsecurity/registry/lib/strings.js

@@ -58,6 +58,21 @@ function stripBom(str) {
   return str.length > 0 && str.charCodeAt(0) === 0xfeff ? str.slice(1) : str
 }
 
+/*@__NO_SIDE_EFFECTS__*/
+function toKebabCase(str) {
+  if (!str.length) {
+    return str
+  }
+  return (
+    str
+      // Convert camelCase to kebab-case
+      .replace(/([a-z]+[0-9]*)([A-Z])/g, '$1-$2')
+      // Convert underscores to hyphens
+      .replace(/_/g, '-')
+      .toLowerCase()
+  )
+}
+
 /*@__NO_SIDE_EFFECTS__*/
 function trimNewlines(str) {
   const { length } = str
@@ -101,5 +116,6 @@ module.exports = {
   search,
   stripAnsi,
   stripBom,
+  toKebabCase,
   trimNewlines
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "CLI for Socket.dev",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -78,18 +78,18 @@
     "update:deps": "npx --yes npm-check-updates"
   },
   "devDependencies": {
-    "@babel/core": "7.28.3",
+    "@babel/core": "7.28.4",
     "@babel/plugin-proposal-export-default-from": "7.27.1",
     "@babel/plugin-transform-export-namespace-from": "7.27.1",
     "@babel/plugin-transform-runtime": "7.28.3",
     "@babel/preset-typescript": "7.27.1",
-    "@babel/runtime": "7.28.3",
-    "@biomejs/biome": "2.2.2",
-    "@coana-tech/cli": "14.12.17",
+    "@babel/runtime": "7.28.4",
+    "@biomejs/biome": "2.2.3",
+    "@coana-tech/cli": "14.12.20",
     "@cyclonedx/cdxgen": "11.7.0",
     "@dotenvx/dotenvx": "1.49.0",
     "@eslint/compat": "1.3.2",
-    "@eslint/js": "9.34.0",
+    "@eslint/js": "9.35.0",
     "@npmcli/arborist": "9.1.4",
     "@npmcli/config": "10.4.0",
     "@octokit/graphql": "9.0.1",
@@ -112,8 +112,8 @@
     "@socketregistry/is-interactive": "1.0.6",
     "@socketregistry/packageurl-js": "1.0.9",
     "@socketsecurity/config": "3.0.1",
-    "@socketsecurity/registry": "1.0.281",
-    "@socketsecurity/sdk": "1.4.85",
+    "@socketsecurity/registry": "1.1.3",
+    "@socketsecurity/sdk": "1.4.87",
     "@types/blessed": "0.1.25",
     "@types/cmd-shim": "5.0.2",
     "@types/js-yaml": "4.0.9",
@@ -126,8 +126,8 @@
     "@types/semver": "7.7.1",
     "@types/which": "3.0.4",
     "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/parser": "8.42.0",
-    "@typescript/native-preview": "7.0.0-dev.20250904.1",
+    "@typescript-eslint/parser": "8.43.0",
+    "@typescript/native-preview": "7.0.0-dev.20250909.1",
     "@vitest/coverage-v8": "3.2.4",
     "blessed": "0.1.81",
     "blessed-contrib": "4.11.0",
@@ -137,21 +137,21 @@
     "custompatch": "1.1.8",
     "del-cli": "6.0.0",
     "dev-null-cli": "2.0.0",
-    "eslint": "9.34.0",
+    "eslint": "9.35.0",
     "eslint-import-resolver-typescript": "4.4.4",
     "eslint-plugin-import-x": "4.16.1",
     "eslint-plugin-n": "17.21.3",
     "eslint-plugin-sort-destructure-keys": "2.0.0",
     "eslint-plugin-unicorn": "56.0.1",
     "fast-glob": "3.3.3",
-    "globals": "16.3.0",
+    "globals": "16.4.0",
     "hpagent": "1.2.0",
     "husky": "9.1.7",
     "ignore": "7.0.5",
     "js-yaml": "npm:@zkochan/js-yaml@0.0.10",
     "knip": "5.63.1",
     "lint-staged": "16.1.6",
-    "magic-string": "0.30.18",
+    "magic-string": "0.30.19",
     "meow": "13.2.0",
     "micromatch": "4.0.8",
     "mock-fs": "5.5.0",
@@ -163,14 +163,14 @@
     "pony-cause": "2.1.11",
     "registry-auth-token": "5.1.0",
     "registry-url": "7.2.0",
-    "rollup": "4.50.0",
+    "rollup": "4.50.1",
     "semver": "7.7.2",
     "synp": "1.9.14",
     "terminal-link": "2.1.1",
     "tiny-updater": "3.5.3",
     "trash": "9.0.0",
     "type-coverage": "2.29.7",
-    "typescript-eslint": "8.42.0",
+    "typescript-eslint": "8.43.0",
     "unplugin-purge-polyfills": "0.1.0",
     "vitest": "3.2.4",
     "which": "5.0.0",
@@ -208,7 +208,7 @@
     "tiny-colors": "$yoctocolors-cjs",
     "typedarray": "npm:@socketregistry/typedarray@^1",
     "undici": "6.21.3",
-    "vite": "7.1.1",
+    "vite": "7.1.5",
     "xml2js": "0.6.2",
     "yaml": "2.8.1"
   },
@@ -220,6 +220,7 @@
     "dist/**",
     "external/**",
     "shadow-bin/**",
+    "CHANGELOG.md",
     "requirements.json",
     "translations.json"
   ],

package/external/@socketsecurity/registry/lib/constants/socket-public-api-key.js

@@ -1,3 +0,0 @@
-'use strict'
-
-module.exports = /*@__PURE__*/ require('./socket-public-api-token')

package/external/@socketsecurity/registry/lib/constants/tap.js

@@ -1,3 +0,0 @@
-'use strict'
-
-module.exports = 'TAP'