Rewrite (#35)

* rewrote extension to use modern apis for socket and cache better to avoid high memory and cpu usage

Author: bmeck

package-lock.json

@@ -33,8 +33,7 @@
     },
     "icon": "socket-square.png",
     "activationEvents": [
-        "workspaceContains:**/[pP][aA][cC][kK][aA][gG][eE].[jJ][sS][oO][nN]",
-        "workspaceContains:**/[sS][oO][cC][kK][eE][tT].[yY][mM][lL]",
+        "workspaceConatains:**/[pP][aA][cC][kK][aA][gG][eE].[jJ][sS][oO][nN]",
         "workspaceContains:**/[rR][eE][qQ][uU][iI][rR][eE][mM][eE][nN][tT][sS].[tT][xX][tT]",
         "workspaceContains:**/[pP][yY][pP][rR][oO][jJ][eE][cC][tT].[tT][oO][mM][lL]",
         "workspaceContains:**/[pP][iI][pP][fF][iI][lL][eE]",
@@ -48,83 +47,41 @@
     "main": "./out/main.js",
     "homepage": "https://socket.dev",
     "contributes": {
-        "commands": [
-            {
-                "command": "socket-security.runReport",
-                "category": "Socket Security",
-                "title": "Run Report",
-                "enablement": "workspaceFolderCount >= 1"
-            }
-        ],
         "configuration": {
             "title": "Socket Security",
             "properties": {
-                "socket-security.minIssueLevel": {
-                    "order": 1,
-                    "type": "string",
-                    "default": "low",
-                    "enum": [
-                        "critical",
-                        "high",
-                        "middle",
-                        "low"
-                    ],
-                    "description": "Hide all issues that are less important than this level. Note some issues are hidden by default so you may also wish to enable showing all issue types still."
-                },
-                "socket-security.errorOverlayThreshold": {
-                    "order": 2,
-                    "type": "number",
-                    "default": 50,
-                    "minimum": 0,
-                    "maximum": 100,
-                    "description": "Show error overlay for any import of a package with a summary score less than this value.",
-                    "examples": [
-                        50
-                    ]
-                },
-                "socket-security.warnOverlayThreshold": {
-                    "order": 3,
-                    "type": "number",
-                    "default": 80,
-                    "minimum": 0,
-                    "maximum": 100,
-                    "description": "Show overlay for any import of a package with a summary score less than this value.",
-                    "examples": [
-                        80
-                    ]
-                },
-                "socket-security.reportsEnabled": {
-                    "order": 4,
-                    "type": "boolean",
-                    "default": true,
-                    "description": "Create reports from package manifest files (package.json / package-lock.json) that require sending data remotely. Disabling this will disable all issues but keep scores listed."
-                },
                 "socket-security.pythonInterpreter": {
-                    "order": 5,
+                    "order": 1,
                     "type": "string",
                     "description": "Path to a Python interpreter to use for Socket dependency analysis.",
                     "examples": [
                         "/usr/bin/python"
                     ]
                 },
                 "socket-security.goExecutable": {
-                    "order": 6,
+                    "order": 2,
                     "type": "string",
                     "description": "Path to a Go executable to use for Socket dependency analysis.",
                     "examples": [
                         "/usr/bin/go"
                     ]
                 }
             }
-        }
+        },
+        "commands": [{
+            "title": "Login",
+            "category": "Socket Security",
+            "command": "socket-security.login"
+        }]
     },
     "bugs": {
         "email": "[email protected]"
     },
     "publisher": "SocketSecurity",
     "scripts": {
         "vscode:prepublish": "npm run esbuild -- --minify",
-        "esbuild-base": "esbuild --bundle --external:vscode --loader:.wasm=binary --loader:.go=file --outdir=out/ --platform=node --sourcemap",
+        "vscode:uninstall": "node ./src/lifecycle/uninstall.mjs",
+        "esbuild-base": "esbuild --bundle --external:tree-sitter-java --external:vscode --loader:.wasm=binary --loader:.go=file --loader:.py=text --outdir=out/ --platform=node --sourcemap",
         "esbuild": "npm run esbuild-base -- --format=cjs main=src/extension.ts",
         "test-compile": "tsc -p ./",
         "lint": "eslint \"src/**/*.ts\"",
@@ -133,27 +90,21 @@
     },
     "dependencies": {
         "@babel/parser": "^7.20.7",
+        "@babel/traverse": "^7.20.7",
+        "@babel/types": "^7.20.7",
         "@socketsecurity/config": "^2.0.0",
         "@socketsecurity/registry": "^1.0.66",
-        "@vscode/vsce": "^2.20.1",
-        "acorn-walk": "^8.2.0",
-        "antlr4": "^4.13.0",
-        "ast-types": "^0.14.2",
-        "form-data-encoder": "^3.0.0",
-        "formdata-node": "^5.0.1",
-        "ini": "^3.0.1",
-        "json-to-ast": "^2.1.0",
-        "micromatch": "^4.0.8",
-        "octokit": "^3.1.2",
-        "safe-stable-stringify": "^2.4.1",
-        "semver": "^7.5.2",
-        "yaml": "^2.2.2"
+        "@vscode/python-extension": "^1.0.5",
+        "@vscode/vsce": "^3.6.0",
+        "ini": "^5.0.0",
+        "json-to-ast": "^2.1.0"
     },
     "devDependencies": {
+        "@types/babel__traverse": "^7.20.7",
         "@types/ini": "^1.3.31",
         "@types/json-to-ast": "^2.1.2",
         "@types/micromatch": "^4.0.2",
-        "@types/node": "^16.11.7",
+        "@types/node": "^24.0.15",
         "@types/vscode": "^1.26.0",
         "@typescript-eslint/eslint-plugin": "^5.42.0",
         "@typescript-eslint/parser": "^5.42.0",

package.json

@@ -0,0 +1,25 @@
+/////////
+// DESIGN NOTES
+/////////
+//
+// We pass apiKeys rather than shared state to avoid certain races, so if a
+// workflow starts with 1 API key it is inconvenient to grab an implicitly
+// new api key in the middle of the workflow
+//
+function toAuthHeader(apiKey: string) {
+    return `Basic ${Buffer.from(`${apiKey}:`).toString('base64url')}`
+}
+export async function getQuota(apiKey: string) {
+    const res = await fetch('https://api.socket.dev/v0/settings', {
+        method: 'POST',
+        headers: {
+            Authorization: toAuthHeader(apiKey),
+            'Content-Type': 'application/json'
+        }
+    })
+    if (res.ok) {
+        return res.json()
+    } else {
+        throw new Error(await res.text())
+    }
+}