@socketsecurity/cli - npm Package Compare versions

Comparing version 0.9.0 to 0.9.3

cli.js

@@ -18,4 +18,13 @@ #!/usr/bin/env node
 try {
+  const formattedCliCommands = Object.fromEntries(Object.entries(cliCommands).map((entry) => {
+    if (entry[0] === 'rawNpm') {
+      entry[0] = 'raw-npm'
+    } else if (entry[0] === 'rawNpx') {
+      entry[0] = 'raw-npx'
+    }
+    return entry
+  }))
+
   await meowWithSubcommands(
-    cliCommands,
+    formattedCliCommands,
     {
@@ -22,0 +31,0 @@ aliases: {

lib/commands/index.js

@@ -7,1 +7,4 @@ export * from './info/index.js'
 export * from './logout/index.js'
+export * from './wrapper/index.js'
+export * from './raw-npm/index.js'
+export * from './raw-npx/index.js'

lib/flags/index.js

 export { outputFlags } from './output.js'
 export { validationFlags } from './validation.js'
+export { commandFlags } from './command.js'

lib/utils/path-resolve.js

@@ -104,3 +104,3 @@ import { stat } from 'node:fs/promises'
 
-  const goSupported = supportedFiles['go'] || {}
+  const goSupported = supportedFiles['golang'] || {}
   const goSupplementalPatterns = Object.values(goSupported)
@@ -107,0 +107,0 @@ // .filter(key => key !== 'gomod')

package.json

 {
   "name": "@socketsecurity/cli",
-  "version": "0.9.0",
+  "version": "0.9.3",
   "description": "CLI tool for Socket.dev",
@@ -43,3 +43,4 @@ "homepage": "http://github.com/SocketDev/socket-cli-js",
     "test-ci": "run-s test:*",
-    "test": "run-s check test:*"
+    "test": "run-s check test:*",
+    "//postinstall": "node ./cli.js wrapper --postinstall"
   },
@@ -46,0 +47,0 @@ "devDependencies": {

README.md

@@ -21,2 +21,3 @@ # Socket CLI
 socket report view QXU8PmK7LfH608RAwfIKdbcHgwEd_ZeWJ9QEGv05FJUQ
+socket wrapper --enable
 ```
@@ -39,2 +40,6 @@
 
+* `socket wrapper --enable` and `socket wrapper --disable` - Enables and disables the Socket 'safe-npm' wrapper.
+
+* `socket raw-npm` and `socket raw-npx` - Temporarily disables the Socket 'safe-npm' wrapper.
+
 ## Aliases
@@ -41,0 +46,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

138608

increased by6.83%

Number of package files

44

increased by10%

Lines of code

3718

increased by8.62%

Number of lines in readme file

96

increased by5.49%

Worsened metrics

Number of low supply chain risk alerts

21

increased by5%

Number of medium supply chain risk alerts

10

increased by42.86%

No dependency changes