Unable to use socket cli with current setups

[richtera]

Hi
I am using mise and for some reason socket doesn't find the npm cli. I didn't debug the code, but all I see it

❯ npx socket
Need to install the following packages:
socket@0.14.57
Ok to proceed? (y) 

✖️ Unable to find npm CLI install directory.
Searched parent directories of /Users/andy/.local/share/mise/installs/node/22.13.1/bin.

This is may be a bug with socket-npm related to changes to the npm CLI.
Please report to https://github.com/SocketDev/socket-cli/issues.

I tried npm install -g socket, pnpm add -g socket and a few other related commands and all eend up with this error.

[richtera]

Here is the parent directory with npm cli highlighted:

[richtera]

I can make v0.14.39 work

❯ npx socket@0.14.39
Need to install the following packages:
socket@0.14.39
Ok to proceed? (y) 

npm warn deprecated @npmcli/move-file@1.1.2: This functionality has been moved to @npmcli/fs
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated npmlog@6.0.2: This package is no longer supported.
npm warn deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm warn deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm warn deprecated are-we-there-yet@3.0.1: This package is no longer supported.
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm warn deprecated boolean@3.2.0: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated gauge@4.0.4: This package is no longer supported.

  CLI tool for Socket.dev

    Usage
      $ socket <command>

    Commands
      analytics         Look up analytics data 

  Default parameters are set to show the organization-level analytics over the last 7 days.
      audit-log         Look up the audit log for an organization
      cdxgen            Create an SBOM with CycloneDX generator (cdxgen)
      ci                Alias for "report create --view --strict"
      dependencies      Search for any dependency that is being used in your organization
      diff-scan         Diff scans related commands
      info              Look up info regarding a package
      login             Socket API login
      logout            Socket API logout
      npm               npm wrapper functionality
      npx               npx wrapper functionality
      optimize          Optimize dependencies with @socketregistry overrides
      organizations     List organizations associated with the API key used
      raw-npm           Temporarily disable the Socket npm wrapper
      raw-npx           Temporarily disable the Socket npx wrapper
      repo              Repositories related commands
      report            [Deprecated] Project report related commands
      scan              Scans related commands
      threat-feed       Look up the threat feed
      wrapper           Enable or disable the Socket npm/npx wrapper

    Options
      --help            Print this help.

    Examples
      $ socket --help




📦 Update available for socket: 0.14.39 → 0.14.64

[jdalton]

Andreas Richter (@richtera) Ah thank you for sharing the directory structure. Yes our search looks for the node_modules in a parent folder... in your case it's in a sibling folder called lib/node_modules. Looks like something mise does.

[richtera]

It's a normal node install though mise just uses node build and the older version of socket.dev works fine

[richtera]

Awesome, thanks!

[jdalton]

Andreas Richter (@richtera) Released v0.14.65