@@ -63,8 +63,7 @@ type Constants = Remap<
63
63
readonly ALERT_TYPE_MEDIUM_CVE : 'mediumCVE'
64
64
readonly ALERT_TYPE_MILD_CVE : 'mildCVE'
65
65
readonly ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE : 'socketUpgradeAvailable'
66
- readonly API_V0_URL : 'https://api.socket.dev/v0'
67
- readonly BATCH_PURL_ENDPOINT : 'https://api.socket.dev/v0/purl?alerts=true&compact=true'
66
+ readonly API_V0_URL : 'https://api.socket.dev/v0/'
68
67
readonly BINARY_LOCK_EXT : '.lockb'
69
68
readonly BUN : 'bun'
70
69
readonly CLI : 'cli'
@@ -138,7 +137,7 @@ const ALERT_TYPE_CVE = 'cve'
138
137
const ALERT_TYPE_MEDIUM_CVE = 'mediumCVE'
139
138
const ALERT_TYPE_MILD_CVE = 'mildCVE'
140
139
const ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE = 'socketUpgradeAvailable'
141
- const API_V0_URL = 'https://api.socket.dev/v0'
140
+ const API_V0_URL = 'https://api.socket.dev/v0/ '
142
141
const BINARY_LOCK_EXT = '.lockb'
143
142
const BUN = 'bun'
144
143
const CLI = 'cli'
@@ -160,38 +159,31 @@ const REQUIRE = 'require'
160
159
const SHADOW_NPM_BIN = 'shadow-bin'
161
160
const SHADOW_NPM_INJECT = 'shadow-npm-inject'
162
161
const SHADOW_NPM_PATHS = 'shadow-npm-paths'
163
- const SOCKET_CLI_BIN_NAME = SOCKET
164
- const SOCKET_CLI_BIN_NAME_ALIAS = CLI
162
+ const SOCKET_CLI_BIN_NAME = 'socket'
163
+ const SOCKET_CLI_BIN_NAME_ALIAS = 'cli'
165
164
const SOCKET_CLI_DEBUG = 'SOCKET_CLI_DEBUG'
166
165
const SOCKET_CLI_FIX = 'SOCKET_CLI_FIX'
167
166
const SOCKET_CLI_ISSUES_URL = 'https://github.com/SocketDev/socket-cli/issues'
168
- const SOCKET_CLI_LEGACY_PACKAGE_NAME = `${ SOCKET_SECURITY_SCOPE } /${ CLI } `
167
+ const SOCKET_CLI_LEGACY_PACKAGE_NAME = `${ SOCKET_SECURITY_SCOPE } /cli `
169
168
const SOCKET_CLI_NO_API_TOKEN = 'SOCKET_CLI_NO_API_TOKEN'
170
169
const SOCKET_CLI_OPTIMIZE = 'SOCKET_CLI_OPTIMIZE'
171
- const SOCKET_CLI_NPM_BIN_NAME = ` ${ SOCKET } - ${ NPM } `
172
- const SOCKET_CLI_NPX_BIN_NAME = ` ${ SOCKET } - ${ NPX } `
173
- const SOCKET_CLI_PACKAGE_NAME = SOCKET
170
+ const SOCKET_CLI_NPM_BIN_NAME = 'socket-npm'
171
+ const SOCKET_CLI_NPX_BIN_NAME = 'socket-npx'
172
+ const SOCKET_CLI_PACKAGE_NAME = 'socket'
174
173
const SOCKET_CLI_SAFE_WRAPPER = 'SOCKET_CLI_SAFE_WRAPPER'
175
- const SOCKET_CLI_SENTRY_BIN_NAME = ` ${ SOCKET_CLI_BIN_NAME } - ${ WITH_SENTRY } `
176
- const SOCKET_CLI_SENTRY_BIN_NAME_ALIAS = ` ${ SOCKET_CLI_BIN_NAME_ALIAS } - ${ WITH_SENTRY } `
177
- const SOCKET_CLI_SENTRY_NPM_BIN_NAME = ` ${ SOCKET_CLI_NPM_BIN_NAME } - ${ WITH_SENTRY } `
178
- const SOCKET_CLI_SENTRY_NPX_BIN_NAME = ` ${ SOCKET_CLI_NPX_BIN_NAME } - ${ WITH_SENTRY } `
179
- const SOCKET_CLI_SENTRY_PACKAGE_NAME = `${ SOCKET_CLI_LEGACY_PACKAGE_NAME } - ${ WITH_SENTRY } `
174
+ const SOCKET_CLI_SENTRY_BIN_NAME = 'socket-with-sentry'
175
+ const SOCKET_CLI_SENTRY_BIN_NAME_ALIAS = 'cli-with-sentry'
176
+ const SOCKET_CLI_SENTRY_NPM_BIN_NAME = 'socket-npm-with-sentry'
177
+ const SOCKET_CLI_SENTRY_NPX_BIN_NAME = 'socket-npx-with-sentry'
178
+ const SOCKET_CLI_SENTRY_PACKAGE_NAME = `${ SOCKET_SECURITY_SCOPE } /cli-with-sentry `
180
179
const VLT = 'vlt'
181
180
const YARN = 'yarn'
182
- const YARN_BERRY = ` ${ YARN } /berry`
183
- const YARN_CLASSIC = ` ${ YARN } /classic`
184
- const YARN_LOCK = ` ${ YARN } ${ LOCK_EXT } `
181
+ const YARN_BERRY = 'yarn /berry'
182
+ const YARN_CLASSIC = 'yarn /classic'
183
+ const YARN_LOCK = 'yarn.lock'
185
184
186
185
let _Sentry : any
187
186
188
- const LAZY_BATCH_PURL_ENDPOINT = ( ) => {
189
- const query = new URLSearchParams ( )
190
- query . append ( 'alerts' , 'true' )
191
- query . append ( 'compact' , 'true' )
192
- return `${ API_V0_URL } /purl?${ query } `
193
- }
194
-
195
187
const LAZY_DIST_TYPE = ( ) =>
196
188
registryConstants . SUPPORTS_NODE_REQUIRE_MODULE ? MODULE_SYNC : REQUIRE
197
189
@@ -204,20 +196,20 @@ const LAZY_ENV = () => {
204
196
...registryConstants . ENV ,
205
197
// Inlined flag set to determine if this is the Legacy build.
206
198
// The '@rollup/plugin-replace' will replace "process.env[INLINED_SOCKET_CLI_LEGACY_BUILD]".
207
- [ INLINED_SOCKET_CLI_LEGACY_BUILD ] :
208
- process . env [ INLINED_SOCKET_CLI_LEGACY_BUILD ] ,
199
+ INLINED_SOCKET_CLI_LEGACY_BUILD :
200
+ process . env [ ' INLINED_SOCKET_CLI_LEGACY_BUILD' ] ,
209
201
// Inlined flag set to determine if this is a published build.
210
202
// The '@rollup/plugin-replace' will replace "process.env[INLINED_SOCKET_CLI_PUBLISHED_BUILD]".
211
- [ INLINED_SOCKET_CLI_PUBLISHED_BUILD ] :
212
- process . env [ INLINED_SOCKET_CLI_PUBLISHED_BUILD ] ,
203
+ INLINED_SOCKET_CLI_PUBLISHED_BUILD :
204
+ process . env [ ' INLINED_SOCKET_CLI_PUBLISHED_BUILD' ] ,
213
205
// Inlined flag set to determine if this is the Sentry build.
214
206
// The '@rollup/plugin-replace' will replace "process.env[INLINED_SOCKET_CLI_SENTRY_BUILD]".
215
- [ INLINED_SOCKET_CLI_SENTRY_BUILD ] :
216
- process . env [ INLINED_SOCKET_CLI_SENTRY_BUILD ] ,
207
+ INLINED_SOCKET_CLI_SENTRY_BUILD :
208
+ process . env [ ' INLINED_SOCKET_CLI_SENTRY_BUILD' ] ,
217
209
// Flag set to help debug Socket CLI.
218
- [ SOCKET_CLI_DEBUG ] : envAsBoolean ( env [ SOCKET_CLI_DEBUG ] ) ,
210
+ SOCKET_CLI_DEBUG : envAsBoolean ( env [ ' SOCKET_CLI_DEBUG' ] ) ,
219
211
// Flag set to make the default API token `undefined`.
220
- [ SOCKET_CLI_NO_API_TOKEN ] : envAsBoolean ( env [ SOCKET_CLI_NO_API_TOKEN ] )
212
+ SOCKET_CLI_NO_API_TOKEN : envAsBoolean ( env [ ' SOCKET_CLI_NO_API_TOKEN' ] )
221
213
} )
222
214
}
223
215
@@ -278,7 +270,7 @@ const lazyNmBinPath = () =>
278
270
const lazyNodeHardenFlags = ( ) =>
279
271
// The '@rollup/plugin-replace' will replace "process.env[INLINED_SOCKET_CLI_SENTRY_BUILD]".
280
272
// Lazily access constants.WIN32.
281
- process . env [ INLINED_SOCKET_CLI_SENTRY_BUILD ] || constants . WIN32
273
+ process . env [ ' INLINED_SOCKET_CLI_SENTRY_BUILD' ] || constants . WIN32
282
274
? [ ]
283
275
: // Harden Node security.
284
276
// https://nodejs.org/en/learn/getting-started/security-best-practices
@@ -319,13 +311,12 @@ const constants = createConstantsObject(
319
311
ALERT_TYPE_MILD_CVE ,
320
312
ALERT_TYPE_SOCKET_UPGRADE_AVAILABLE ,
321
313
API_V0_URL ,
322
- // Lazily defined values are initialized as `undefined` to keep their key order.
323
- BATCH_PURL_ENDPOINT : undefined ,
324
314
BINARY_LOCK_EXT ,
325
315
BUN ,
326
316
CLI ,
327
317
CVE_ALERT_PROPS_FIRST_PATCHED_VERSION_IDENTIFIER ,
328
318
CVE_ALERT_PROPS_VULNERABLE_VERSION_RANGE ,
319
+ // Lazily defined values are initialized as `undefined` to keep their key order.
329
320
DIST_TYPE : undefined ,
330
321
DRY_RUN_LABEL ,
331
322
DRY_RUN_BAIL_TEXT ,
@@ -352,6 +343,8 @@ const constants = createConstantsObject(
352
343
SOCKET_CLI_SENTRY_BIN_NAME_ALIAS ,
353
344
SOCKET_CLI_LEGACY_PACKAGE_NAME ,
354
345
SOCKET_CLI_NO_API_TOKEN ,
346
+ SOCKET_CLI_NPM_BIN_NAME ,
347
+ SOCKET_CLI_NPX_BIN_NAME ,
355
348
SOCKET_CLI_OPTIMIZE ,
356
349
SOCKET_CLI_PACKAGE_NAME ,
357
350
SOCKET_CLI_SAFE_WRAPPER ,
@@ -383,7 +376,6 @@ const constants = createConstantsObject(
383
376
} ,
384
377
{
385
378
getters : {
386
- BATCH_PURL_ENDPOINT : LAZY_BATCH_PURL_ENDPOINT ,
387
379
DIST_TYPE : LAZY_DIST_TYPE ,
388
380
ENV : LAZY_ENV ,
389
381
bashRcPath : lazyBashRcPath ,
0 commit comments