socket - npm Package Compare versions

Comparing version 0.14.28 to 0.14.29

package.json

 {
   "name": "socket",
-  "version": "0.14.28",
+  "version": "0.14.29",
   "description": "CLI tool for Socket.dev",
@@ -17,6 +17,40 @@ "homepage": "http://github.com/SocketDev/socket-cli",
   "bin": {
-    "socket": "dist/cli.js",
-    "socket-npm": "dist/npm-cli.js",
-    "socket-npx": "dist/npx-cli.js"
+    "socket": "./bin/cli.js",
+    "socket-npm": "./bin/npm-cli.js",
+    "socket-npx": "./bin/npx-cli.js"
   },
+  "exports": {
+    "./bin/cli.js": {
+      "module-sync": {
+        "types": "./dist/module-sync/cli.d.ts",
+        "default": "./dist/module-sync/cli.js"
+      },
+      "require": {
+        "types": "./dist/require/cli.d.ts",
+        "default": "./dist/require/cli.js"
+      }
+    },
+    "./bin/npm-cli.js": {
+      "module-sync": {
+        "types": "./dist/module-sync/npm-cli.d.ts",
+        "default": "./dist/module-sync/npm-cli.js"
+      },
+      "require": {
+        "types": "./dist/require/npm-cli.d.ts",
+        "default": "./dist/require/npm-cli.js"
+      }
+    },
+    "./bin/npx-cli.js": {
+      "module-sync": {
+        "types": "./dist/module-sync/npx-cli.d.ts",
+        "default": "./dist/module-sync/npx-cli.js"
+      },
+      "require": {
+        "types": "./dist/require/npx-cli.d.ts",
+        "default": "./dist/require/npx-cli.js"
+      }
+    },
+    "./package.json": "./package.json",
+    "./translations.json": "./translations.json"
+  },
   "scripts": {
@@ -35,8 +69,8 @@ "build": "run-s build:*",
     "lint:fix:fast": "prettier --cache --log-level warn --write .",
-    "prepare": "husky",
+    "prepare": "husky && custompatch",
     "test": "run-s check build:* test:*",
     "test:c8": "c8 --reporter=none node --test 'test/socket-npm.test.cjs'",
     "test-ci": "run-s build:* test:*",
-    "test:unit": "tap",
-    "test:coverage": "cp -r .tap/coverage/*.json coverage/tmp && c8 --reporter=lcov --reporter=text --include 'dist/*.js' --exclude 'dist/vendor.js' report"
+    "test:unit": "tap-run",
+    "test:coverage": "cp -r .tap/coverage/*.json coverage/tmp && c8 --reporter=lcov --reporter=text --include 'dist/{module-sync,require}/*.js' --exclude 'dist/require/vendor.js' report"
   },
@@ -51,3 +85,3 @@ "dependencies": {
     "@socketsecurity/config": "^2.1.3",
-    "@socketsecurity/registry": "^1.0.32",
+    "@socketsecurity/registry": "^1.0.33",
     "@socketsecurity/sdk": "^1.3.0",
@@ -77,3 +111,3 @@ "blessed": "^0.1.81",
     "@babel/plugin-transform-export-namespace-from": "^7.25.9",
-    "@babel/plugin-transform-modules-commonjs": "^7.25.9",
+    "@babel/plugin-transform-modules-commonjs": "^7.26.3",
     "@babel/plugin-transform-runtime": "^7.25.9",
@@ -83,3 +117,3 @@ "@babel/preset-env": "^7.26.0",
     "@babel/runtime": "^7.26.0",
-    "@eslint/compat": "^1.2.3",
+    "@eslint/compat": "^1.2.4",
     "@eslint/js": "^9.16.0",
@@ -91,2 +125,3 @@ "@rollup/plugin-commonjs": "^28.0.1",
     "@rollup/pluginutils": "^5.1.3",
+    "@tapjs/run": "^4.0.1",
     "@types/blessed": "^0.1.25",
@@ -107,6 +142,7 @@ "@types/micromatch": "^4.0.9",
     "c8": "^10.1.2",
+    "custompatch": "^1.0.28",
     "eslint": "^9.16.0",
-    "eslint-import-resolver-oxc": "^0.5.0",
+    "eslint-import-resolver-oxc": "^0.6.0",
     "eslint-plugin-depend": "^0.12.0",
-    "eslint-plugin-import-x": "^4.4.3",
+    "eslint-plugin-import-x": "^4.5.0",
     "eslint-plugin-n": "^17.14.0",
@@ -118,3 +154,3 @@ "eslint-plugin-sort-destructure-keys": "^2.0.0",
     "is-unicode-supported": "^2.1.0",
-    "knip": "^5.39.0",
+    "knip": "^5.39.2",
     "magic-string": "^0.30.14",
@@ -126,8 +162,7 @@ "meow": "^13.2.0",
     "open": "^10.1.0",
-    "oxlint": "0.14.0",
-    "prettier": "3.4.1",
+    "oxlint": "0.14.1",
+    "prettier": "3.4.2",
     "read-package-up": "^11.0.0",
-    "rollup": "4.28.0",
+    "rollup": "4.28.1",
     "rollup-plugin-ts": "^3.4.5",
-    "tap": "^21.0.1",
     "terminal-link": "^3.0.0",
@@ -134,0 +169,0 @@ "tiny-updater": "^3.5.2",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

867236

increased by38.67%

Number of package files

52

increased by108%

Lines of code

25552

increased by40.88%

Worsened metrics

Dev dependency count

61

increased by1.67%

Number of low supply chain risk alerts

66

increased by73.68%

Number of medium supply chain risk alerts

5

increased by66.67%

Dependency changes

• Updated@socketsecurity/registry@^1.0.33