From 899e142a3f091c8347d861ea9c45f0c94231bd24 Mon Sep 17 00:00:00 2001
From: Peter van der Zee <github-public@qfox.nl>
Date: Fri, 14 Mar 2025 14:14:57 +0100
Subject: [PATCH] Create test file for each command, move dryrun tests there

---
 package.json                                  |   1 +
 src/commands/analytics/cmd-analytics.test.ts  |  73 ++
 src/commands/audit-log/cmd-audit-log.test.ts  |  92 ++
 src/commands/cdxgen/cmd-cdxgen.test.ts        | 109 +++
 .../dependencies/cmd-dependencies.test.ts     |  66 ++
 .../diff-scan/cmd-diff-scan-get.test.ts       | 107 +++
 src/commands/diff-scan/cmd-diff-scan.test.ts  |  67 ++
 src/commands/fix/cmd-fix.test.ts              |  59 ++
 src/commands/info/cmd-info.test.ts            |  91 ++
 src/commands/login/cmd-login.test.ts          |  67 ++
 src/commands/logout/cmd-logout.test.ts        |  57 ++
 .../manifest/cmd-manifest-auto.test.ts        |  65 ++
 src/commands/manifest/cmd-manifest-auto.ts    |   5 +
 .../manifest/cmd-manifest-gradle.test.ts      | 120 +++
 .../manifest/cmd-manifest-kotlin.test.ts      | 120 +++
 .../manifest/cmd-manifest-scala.test.ts       | 119 +++
 src/commands/manifest/cmd-manifest.test.ts    |  70 ++
 src/commands/npm/cmd-npm.test.ts              |  55 ++
 src/commands/npx/cmd-npx.test.ts              |  55 ++
 src/commands/oops/cmd-oops.test.ts            |  57 ++
 src/commands/optimize/cmd-optimize.test.ts    |  65 ++
 src/commands/raw-npm/cmd-raw-npm.test.ts      |  58 ++
 src/commands/raw-npx/cmd-raw-npx.test.ts      |  58 ++
 src/commands/report/cmd-report-create.test.ts |  55 ++
 src/commands/report/cmd-report-create.ts      |   2 +-
 src/commands/report/cmd-report-view.test.ts   |  55 ++
 src/commands/report/cmd-report.test.ts        |  68 ++
 src/commands/scan/cmd-scan-create.test.ts     |  61 ++
 src/commands/scan/cmd-scan-del.test.ts        |  88 ++
 src/commands/scan/cmd-scan-list.test.ts       |  92 ++
 src/commands/scan/cmd-scan-list.ts            |   2 +-
 src/commands/scan/cmd-scan-metadata.test.ts   |  88 ++
 src/commands/scan/cmd-scan-metadata.ts        |   2 +-
 src/commands/scan/cmd-scan-view.test.ts       |  90 ++
 src/commands/scan/cmd-scan.test.ts            |  71 ++
 .../threat-feed/cmd-threat-feed.test.ts       |  96 ++
 src/commands/wrapper/cmd-wrapper.test.ts      |  87 ++
 test/dry-run.test.ts                          | 833 ------------------
 38 files changed, 2490 insertions(+), 836 deletions(-)
 create mode 100644 src/commands/analytics/cmd-analytics.test.ts
 create mode 100644 src/commands/audit-log/cmd-audit-log.test.ts
 create mode 100644 src/commands/cdxgen/cmd-cdxgen.test.ts
 create mode 100644 src/commands/dependencies/cmd-dependencies.test.ts
 create mode 100644 src/commands/diff-scan/cmd-diff-scan-get.test.ts
 create mode 100644 src/commands/diff-scan/cmd-diff-scan.test.ts
 create mode 100644 src/commands/fix/cmd-fix.test.ts
 create mode 100644 src/commands/info/cmd-info.test.ts
 create mode 100644 src/commands/login/cmd-login.test.ts
 create mode 100644 src/commands/logout/cmd-logout.test.ts
 create mode 100644 src/commands/manifest/cmd-manifest-auto.test.ts
 create mode 100644 src/commands/manifest/cmd-manifest-gradle.test.ts
 create mode 100644 src/commands/manifest/cmd-manifest-kotlin.test.ts
 create mode 100644 src/commands/manifest/cmd-manifest-scala.test.ts
 create mode 100644 src/commands/manifest/cmd-manifest.test.ts
 create mode 100644 src/commands/npm/cmd-npm.test.ts
 create mode 100644 src/commands/npx/cmd-npx.test.ts
 create mode 100644 src/commands/oops/cmd-oops.test.ts
 create mode 100644 src/commands/optimize/cmd-optimize.test.ts
 create mode 100644 src/commands/raw-npm/cmd-raw-npm.test.ts
 create mode 100644 src/commands/raw-npx/cmd-raw-npx.test.ts
 create mode 100644 src/commands/report/cmd-report-create.test.ts
 create mode 100644 src/commands/report/cmd-report-view.test.ts
 create mode 100644 src/commands/report/cmd-report.test.ts
 create mode 100644 src/commands/scan/cmd-scan-create.test.ts
 create mode 100644 src/commands/scan/cmd-scan-del.test.ts
 create mode 100644 src/commands/scan/cmd-scan-list.test.ts
 create mode 100644 src/commands/scan/cmd-scan-metadata.test.ts
 create mode 100644 src/commands/scan/cmd-scan-view.test.ts
 create mode 100644 src/commands/scan/cmd-scan.test.ts
 create mode 100644 src/commands/threat-feed/cmd-threat-feed.test.ts
 create mode 100644 src/commands/wrapper/cmd-wrapper.test.ts
 delete mode 100644 test/dry-run.test.ts

diff --git a/package.json b/package.json
index eaa805956..a5573c8dd 100644
--- a/package.json
+++ b/package.json
@@ -66,6 +66,7 @@
     "test:unit:coverage": "vitest run --coverage",
     "test-ci": "run-s test:*",
     "testu": "cross-env SOCKET_CLI_NO_API_TOKEN=1 run-s test:prepare; npm run test:unit:update --",
+    "testuf": "SOCKET_CLI_NO_API_TOKEN=1 npm run test:unit:update --",
     "update": "run-p --aggregate-output update:**",
     "update:deps": "npx --yes npm-check-updates"
   },
diff --git a/src/commands/analytics/cmd-analytics.test.ts b/src/commands/analytics/cmd-analytics.test.ts
new file mode 100644
index 000000000..76f962436
--- /dev/null
+++ b/src/commands/analytics/cmd-analytics.test.ts
@@ -0,0 +1,73 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket analytics', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['analytics', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Look up analytics data
+
+        Usage
+          $ socket analytics --scope=<scope> --time=<time filter>
+
+        Default parameters are set to show the organization-level analytics over the
+        last 7 days.
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --file            Path to a local file to save the output. Only valid with --json/--markdown. Defaults to stdout.
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+          --repo            Name of the repository. Only valid when scope=repo
+          --scope           Scope of the analytics data - either 'org' or 'repo', default: org
+          --time            Time filter - either 7, 30 or 90, default: 7
+
+        Examples
+          $ socket analytics --scope=org --time=7
+          $ socket analytics --scope=org --time=30
+          $ socket analytics --scope=repo --repo=test-repo --time=30"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket analytics\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket analytics`'
+    )
+  })
+
+  cmdit(
+    ['analytics', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket analytics\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/audit-log/cmd-audit-log.test.ts b/src/commands/audit-log/cmd-audit-log.test.ts
new file mode 100644
index 000000000..888a411be
--- /dev/null
+++ b/src/commands/audit-log/cmd-audit-log.test.ts
@@ -0,0 +1,92 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket audit-log', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['audit-log', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Look up the audit log for an organization
+
+        Usage
+          $ socket audit-log <org slug>
+
+        This feature requires an Enterprise Plan. To learn more about getting access
+        to this feature and many more, please visit https://socket.dev/pricing
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+          --page            Page number - default is 1
+          --perPage         Results per page - default is 30
+          --type            Type of log event
+
+        Examples
+          $ socket audit-log FakeOrg"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket audit-log\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket audit-log`'
+    )
+  })
+
+  cmdit(
+    ['audit-log', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket audit-log\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['audit-log', 'fakeorg', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket audit-log\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/cdxgen/cmd-cdxgen.test.ts b/src/commands/cdxgen/cmd-cdxgen.test.ts
new file mode 100644
index 000000000..462b95cb4
--- /dev/null
+++ b/src/commands/cdxgen/cmd-cdxgen.test.ts
@@ -0,0 +1,109 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket cdxgen', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['cdxgen', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "cdxgen [command]
+
+      Commands:
+        cdxgen completion  Generate bash/zsh completion
+
+      Options:
+        -o, --output                 Output file. Default bom.json  [default: "bom.json"]
+        -t, --type                   Project type. Please refer to https://cyclonedx.github.io/cdxgen/#/PROJECT_TYPES for supported languages/platforms.  [array]
+            --exclude-type           Project types to exclude. Please refer to https://cyclonedx.github.io/cdxgen/#/PROJECT_TYPES for supported languages/platforms.
+        -r, --recurse                Recurse mode suitable for mono-repos. Defaults to true. Pass --no-recurse to disable.  [boolean] [default: true]
+        -p, --print                  Print the SBOM as a table with tree.  [boolean]
+        -c, --resolve-class          Resolve class names for packages. jars only for now.  [boolean]
+            --deep                   Perform deep searches for components. Useful while scanning C/C++ apps, live OS and oci images.  [boolean]
+            --server-url             Dependency track url. Eg: https://deptrack.cyclonedx.io
+            --skip-dt-tls-check      Skip TLS certificate check when calling Dependency-Track.  [boolean] [default: false]
+            --api-key                Dependency track api key
+            --project-group          Dependency track project group
+            --project-name           Dependency track project name. Default use the directory name
+            --project-version        Dependency track project version  [string] [default: ""]
+            --project-id             Dependency track project id. Either provide the id or the project name and version together  [string]
+            --parent-project-id      Dependency track parent project id  [string]
+            --required-only          Include only the packages with required scope on the SBOM. Would set compositions.aggregate to incomplete unless --no-auto-compositions is passed.  [boolean]
+            --fail-on-error          Fail if any dependency extractor fails.  [boolean]
+            --no-babel               Do not use babel to perform usage analysis for JavaScript/TypeScript projects.  [boolean]
+            --generate-key-and-sign  Generate an RSA public/private key pair and then sign the generated SBOM using JSON Web Signatures.  [boolean]
+            --server                 Run cdxgen as a server  [boolean]
+            --server-host            Listen address  [default: "127.0.0.1"]
+            --server-port            Listen port  [default: "9090"]
+            --install-deps           Install dependencies automatically for some projects. Defaults to true but disabled for containers and oci scans. Use --no-install-deps to disable this feature.  [boolean] [default: true]
+            --validate               Validate the generated SBOM using json schema. Defaults to true. Pass --no-validate to disable.  [boolean] [default: true]
+            --evidence               Generate SBOM with evidence for supported languages.  [boolean] [default: false]
+            --spec-version           CycloneDX Specification version to use. Defaults to 1.6  [number] [default: 1.6]
+            --filter                 Filter components containing this word in purl or component.properties.value. Multiple values allowed.  [array]
+            --only                   Include components only containing this word in purl. Useful to generate BOM with first party components alone. Multiple values allowed.  [array]
+            --author                 The person(s) who created the BOM. Set this value if you're intending the modify the BOM and claim authorship.  [array] [default: "OWASP Foundation"]
+            --profile                BOM profile to use for generation. Default generic.  [choices: "appsec", "research", "operational", "threat-modeling", "license-compliance", "generic", "machine-learning", "ml", "deep-learning", "ml-deep", "ml-tiny"] [default: "generic"]
+            --exclude                Additional glob pattern(s) to ignore  [array]
+            --include-formulation    Generate formulation section with git metadata and build tools. Defaults to false.  [boolean] [default: false]
+            --include-crypto         Include crypto libraries as components.  [boolean] [default: false]
+            --standard               The list of standards which may consist of regulations, industry or organizational-specific standards, maturity models, best practices, or any other requirements which can be evaluated against or attested to.  [array] [choices: "asvs-5.0", "asvs-4.0.3", "bsimm-v13", "masvs-2.0.0", "nist_ssdf-1.1", "pcissc-secure-slc-1.1", "scvs-1.0.0", "ssaf-DRAFT-2023-11"]
+            --min-confidence         Minimum confidence needed for the identity of a component from 0 - 1, where 1 is 100% confidence.  [number] [default: 0]
+            --technique              Analysis technique to use  [array] [choices: "auto", "source-code-analysis", "binary-analysis", "manifest-analysis", "hash-comparison", "instrumentation", "filename"]
+            --auto-compositions      Automatically set compositions when the BOM was filtered. Defaults to true  [boolean] [default: true]
+        -h, --help                   Show help  [boolean]
+        -v, --version                Show version number  [boolean]
+
+      Examples:
+        cdxgen -t java .                       Generate a Java SBOM for the current directory
+        cdxgen -t java -t js .                 Generate a SBOM for Java and JavaScript in the current directory
+        cdxgen -t java --profile ml .          Generate a Java SBOM for machine learning purposes.
+        cdxgen -t python --profile research .  Generate a Python SBOM for appsec research.
+        cdxgen --server                        Run cdxgen as a server
+
+      for documentation, visit https://cyclonedx.github.io/cdxgen"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket cdxgen\`, cwd: <redacted>"
+    `)
+
+    // expect(code, 'help should exit with code 2').toBe(2)
+    expect(code, 'help should exit with code 2').toBe(0) // cdxgen special case
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket cdxgen`'
+    )
+  })
+
+  // cdxgen does not support --dry-run
+  // cmdit(
+  //   ['cdxgen', '--dry-run'],
+  //   'should require args with just dry-run',
+  //   async cmd => {
+  //     const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+  //     expect(stdout).toMatchInlineSnapshot(`""`)
+  //     expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+  //       "
+  //          _____         _       _        /---------------
+  //         |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+  //         |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+  //         |_____|___|___|_,_|___|_|.dev   | Command: \`socket cdxgen\`, cwd: <redacted>
+  //
+  //       \\x1b[31m\\xd7\\x1b[39m Unknown argument: --dry-run"
+  //     `)
+  //
+  //     expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+  //   }
+  // )
+})
diff --git a/src/commands/dependencies/cmd-dependencies.test.ts b/src/commands/dependencies/cmd-dependencies.test.ts
new file mode 100644
index 000000000..493a9823b
--- /dev/null
+++ b/src/commands/dependencies/cmd-dependencies.test.ts
@@ -0,0 +1,66 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket dependencies', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['dependencies', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Search for any dependency that is being used in your organization
+
+        Usage
+          socket dependencies
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --json            Output result as json
+          --limit           Maximum number of dependencies returned
+          --markdown        Output result as markdown
+          --offset          Page number
+
+        Examples
+          socket dependencies --limit 20 --offset 10"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket dependencies\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket dependencies`'
+    )
+  })
+
+  cmdit(
+    ['dependencies', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket dependencies\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/diff-scan/cmd-diff-scan-get.test.ts b/src/commands/diff-scan/cmd-diff-scan-get.test.ts
new file mode 100644
index 000000000..d59fd6ea2
--- /dev/null
+++ b/src/commands/diff-scan/cmd-diff-scan-get.test.ts
@@ -0,0 +1,107 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket diff-scan get', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['diff-scan', 'get', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Get a diff scan for an organization
+
+        Usage
+          $ socket diff-scan get <org slug> --before=<before> --after=<after>
+
+        This command displays the package changes between two scans. The full output
+        can be pretty large depending on the size of your repo and time range. It is
+        best stored to disk to be further analyzed by other tools.
+
+        Options
+          --after           The full scan ID of the head scan
+          --before          The full scan ID of the base scan
+          --depth           Max depth of JSON to display before truncating, use zero for no limit (without --json/--file)
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --file            Path to a local file where the output should be saved. Use \`-\` to force stdout.
+          --help            Print this help.
+          --json            Output result as json. This can be big. Use --file to store it to disk without truncation.
+
+        Examples
+          $ socket diff-scan get FakeCorp --before=aaa0aa0a-aaaa-0000-0a0a-0000000a00a0 --after=aaa1aa1a-aaaa-1111-1a1a-1111111a11a1"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan get\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket diff-scan get`'
+    )
+  })
+
+  cmdit(
+    ['diff-scan', 'get', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan get\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+              - Specify a before and after full scan ID \\x1b[31m(missing before and after!)\\x1b[39m
+
+                  - To get full scans IDs, you can run the command "socket scan list <your org slug>".
+                    The args are expecting a full \`aaa0aa0a-aaaa-0000-0a0a-0000000a00a0\` ID.
+
+              - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    [
+      'diff-scan',
+      'get',
+      'fakeorg',
+      '--dry-run',
+      '--before',
+      'x',
+      '--after',
+      'y'
+    ],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan get\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/diff-scan/cmd-diff-scan.test.ts b/src/commands/diff-scan/cmd-diff-scan.test.ts
new file mode 100644
index 000000000..c867eef0e
--- /dev/null
+++ b/src/commands/diff-scan/cmd-diff-scan.test.ts
@@ -0,0 +1,67 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket diff-scan', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['diff-scan', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Diff scans related commands
+
+        Usage
+          $ socket diff-scan <command>
+
+        Commands
+          get               Get a diff scan for an organization
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+
+        Examples
+          $ socket diff-scan --help"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket diff-scan`'
+    )
+  })
+
+  cmdit(
+    ['diff-scan', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(
+        `"[DryRun]: No-op, call a sub-command; ok"`
+      )
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/fix/cmd-fix.test.ts b/src/commands/fix/cmd-fix.test.ts
new file mode 100644
index 000000000..5cf0c3270
--- /dev/null
+++ b/src/commands/fix/cmd-fix.test.ts
@@ -0,0 +1,59 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket fix', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['fix', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Fix "fixable" Socket alerts
+
+        Usage
+          $ socket fix
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help."
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket fix\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket fix`'
+    )
+  })
+
+  cmdit(
+    ['fix', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket fix\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/info/cmd-info.test.ts b/src/commands/info/cmd-info.test.ts
new file mode 100644
index 000000000..e291cc807
--- /dev/null
+++ b/src/commands/info/cmd-info.test.ts
@@ -0,0 +1,91 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket info', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['info', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Look up info regarding a package
+
+        Usage
+          $ socket info <name>
+
+        Options
+          --all             Include all issues
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+          --strict          Exits with an error code if any matching issues are found
+
+        Examples
+          $ socket info webtorrent
+          $ socket info webtorrent@1.9.1"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket info\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket info`'
+    )
+  })
+
+  cmdit(
+    ['info', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket info\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+              - Expecting a package name \\x1b[31m(missing!)\\x1b[39m
+
+              - Can only accept one package at a time \\x1b[32m(ok)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['info', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket info\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/login/cmd-login.test.ts b/src/commands/login/cmd-login.test.ts
new file mode 100644
index 000000000..dce90acc7
--- /dev/null
+++ b/src/commands/login/cmd-login.test.ts
@@ -0,0 +1,67 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket login', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['login', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Socket API login
+
+        Usage
+          $ socket login
+
+        Logs into the Socket API by prompting for an API key
+
+        Options
+          --apiBaseUrl      API server to connect to for login
+          --apiProxy        Proxy to use when making connection to API server
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+
+        Examples
+          $ socket login
+          $ socket login --api-proxy=http://localhost:1234"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket login\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket login`'
+    )
+  })
+
+  cmdit(
+    ['login', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket login\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/logout/cmd-logout.test.ts b/src/commands/logout/cmd-logout.test.ts
new file mode 100644
index 000000000..d1db72ef7
--- /dev/null
+++ b/src/commands/logout/cmd-logout.test.ts
@@ -0,0 +1,57 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket logout', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['logout', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Socket API logout
+
+        Usage
+          $ socket logout
+
+        Logs out of the Socket API and clears all Socket credentials from disk"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket logout\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket logout`'
+    )
+  })
+
+  cmdit(
+    ['logout', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket logout\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/manifest/cmd-manifest-auto.test.ts b/src/commands/manifest/cmd-manifest-auto.test.ts
new file mode 100644
index 000000000..502b5a9f5
--- /dev/null
+++ b/src/commands/manifest/cmd-manifest-auto.test.ts
@@ -0,0 +1,65 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket manifest auto', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['manifest', 'auto', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Auto-detect build and attempt to generate manifest file
+
+        Usage
+          $ socket manifest auto
+
+        Options
+          --cwd             Set the cwd, defaults to process.cwd()
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --verbose         Enable debug output, may help when running into errors
+
+        Tries to figure out what language your current repo uses. If it finds a
+        supported case then it will try to generate the manifest file for that
+        language with the default or detected settings."
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest auto\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket manifest auto`'
+    )
+  })
+
+  cmdit(
+    ['manifest', 'auto', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest auto\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/manifest/cmd-manifest-auto.ts b/src/commands/manifest/cmd-manifest-auto.ts
index d7a1dfb15..f486c6ea7 100644
--- a/src/commands/manifest/cmd-manifest-auto.ts
+++ b/src/commands/manifest/cmd-manifest-auto.ts
@@ -110,6 +110,11 @@ async function run(
     return
   }
 
+  if (cli.flags['dryRun']) {
+    logger.log(DRY_RUN_BAIL_TEXT)
+    return
+  }
+
   // Show new help screen and exit.
   meow(
     `
diff --git a/src/commands/manifest/cmd-manifest-gradle.test.ts b/src/commands/manifest/cmd-manifest-gradle.test.ts
new file mode 100644
index 000000000..c6fd8c27c
--- /dev/null
+++ b/src/commands/manifest/cmd-manifest-gradle.test.ts
@@ -0,0 +1,120 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket manifest gradle', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(
+    ['manifest', 'gradle', '--help'],
+    'should support --help',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(
+        `
+      "[beta] Use Gradle to generate a manifest file (\`pom.xml\`) for a Gradle/Java/Kotlin/etc project
+
+        Usage
+          $ socket manifest gradle [--gradle=path/to/gradle/binary] [--out=path/to/result] DIR
+
+        Options
+          --bin             Location of gradlew binary to use, default: CWD/gradlew
+          --cwd             Set the cwd, defaults to process.cwd()
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --gradleOpts      Additional options to pass on to ./gradlew, see \`./gradlew --help\`
+          --help            Print this help.
+          --out             Path of output file; where to store the resulting manifest, see also --stdout
+          --stdout          Print resulting pom.xml to stdout (supersedes --out)
+          --task            Task to target. By default targets all.
+          --verbose         Print debug messages
+
+        Uses gradle, preferably through your local project \`gradlew\`, to generate a
+        \`pom.xml\` file for each task. If you have no \`gradlew\` you can try the
+        global \`gradle\` binary but that may not work (hard to predict).
+
+        The \`pom.xml\` is a manifest file similar to \`package.json\` for npm or
+        or requirements.txt for PyPi), but specifically for Maven, which is Java's
+        dependency repository. Languages like Kotlin and Scala piggy back on it too.
+
+        There are some caveats with the gradle to \`pom.xml\` conversion:
+
+        - each task will generate its own xml file and by default it generates one xml
+          for every task.
+
+        - it's possible certain features don't translate well into the xml. If you
+          think something is missing that could be supported please reach out.
+
+        - it works with your \`gradlew\` from your repo and local settings and config
+
+        Support is beta. Please report issues or give us feedback on what's missing.
+
+        Examples
+
+          $ socket manifest gradle .
+          $ socket manifest gradle --gradlew=../gradlew ."
+    `
+      )
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest gradle\`, cwd: <redacted>"
+    `)
+
+      expect(code, 'help should exit with code 2').toBe(2)
+      expect(
+        stderr,
+        'header should include command (without params)'
+      ).toContain('`socket manifest gradle`')
+    }
+  )
+
+  cmdit(
+    ['manifest', 'gradle', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest gradle\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - The DIR arg is required \\x1b[31m(missing!)\\x1b[39m
+
+        - Can only accept one DIR (make sure to escape spaces!) \\x1b[32m(ok)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['manifest', 'gradle', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest gradle\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/manifest/cmd-manifest-kotlin.test.ts b/src/commands/manifest/cmd-manifest-kotlin.test.ts
new file mode 100644
index 000000000..097e5386e
--- /dev/null
+++ b/src/commands/manifest/cmd-manifest-kotlin.test.ts
@@ -0,0 +1,120 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket manifest kotlin', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(
+    ['manifest', 'kotlin', '--help'],
+    'should support --help',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(
+        `
+      "[beta] Use Gradle to generate a manifest file (\`pom.xml\`) for a Kotlin project
+
+        Usage
+          $ socket manifest kotlin [--gradle=path/to/gradle/binary] [--out=path/to/result] DIR
+
+        Options
+          --bin             Location of gradlew binary to use, default: CWD/gradlew
+          --cwd             Set the cwd, defaults to process.cwd()
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --gradleOpts      Additional options to pass on to ./gradlew, see \`./gradlew --help\`
+          --help            Print this help.
+          --out             Path of output file; where to store the resulting manifest, see also --stdout
+          --stdout          Print resulting pom.xml to stdout (supersedes --out)
+          --task            Task to target. By default targets all.
+          --verbose         Print debug messages
+
+        Uses gradle, preferably through your local project \`gradlew\`, to generate a
+        \`pom.xml\` file for each task. If you have no \`gradlew\` you can try the
+        global \`gradle\` binary but that may not work (hard to predict).
+
+        The \`pom.xml\` is a manifest file similar to \`package.json\` for npm or
+        or requirements.txt for PyPi), but specifically for Maven, which is Java's
+        dependency repository. Languages like Kotlin and Scala piggy back on it too.
+
+        There are some caveats with the gradle to \`pom.xml\` conversion:
+
+        - each task will generate its own xml file and by default it generates one xml
+          for every task. (This may be a good thing!)
+
+        - it's possible certain features don't translate well into the xml. If you
+          think something is missing that could be supported please reach out.
+
+        - it works with your \`gradlew\` from your repo and local settings and config
+
+        Support is beta. Please report issues or give us feedback on what's missing.
+
+        Examples
+
+          $ socket manifest kotlin .
+          $ socket manifest kotlin --gradlew=../gradlew ."
+    `
+      )
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest kotlin\`, cwd: <redacted>"
+    `)
+
+      expect(code, 'help should exit with code 2').toBe(2)
+      expect(
+        stderr,
+        'header should include command (without params)'
+      ).toContain('`socket manifest kotlin`')
+    }
+  )
+
+  cmdit(
+    ['manifest', 'kotlin', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest kotlin\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - The DIR arg is required \\x1b[31m(missing!)\\x1b[39m
+
+        - Can only accept one DIR (make sure to escape spaces!) \\x1b[32m(ok)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['manifest', 'kotlin', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest kotlin\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/manifest/cmd-manifest-scala.test.ts b/src/commands/manifest/cmd-manifest-scala.test.ts
new file mode 100644
index 000000000..1635bf45e
--- /dev/null
+++ b/src/commands/manifest/cmd-manifest-scala.test.ts
@@ -0,0 +1,119 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket manifest scala', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['manifest', 'scala', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "[beta] Generate a manifest file (\`pom.xml\`) from Scala's \`build.sbt\` file
+
+        Usage
+          $ socket manifest scala [--sbt=path/to/sbt/binary] [--out=path/to/result] FILE|DIR
+
+        Options
+          --bin             Location of sbt binary to use
+          --cwd             Set the cwd, defaults to process.cwd()
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --out             Path of output file; where to store the resulting manifest, see also --stdout
+          --sbtOpts         Additional options to pass on to sbt, as per \`sbt --help\`
+          --stdout          Print resulting pom.xml to stdout (supersedes --out)
+          --verbose         Print debug messages
+
+        Uses \`sbt makePom\` to generate a \`pom.xml\` from your \`build.sbt\` file.
+        This xml file is the dependency manifest (like a package.json
+        for Node.js or requirements.txt for PyPi), but specifically for Scala.
+
+        There are some caveats with \`build.sbt\` to \`pom.xml\` conversion:
+
+        - the xml is exported as socket.pom.xml as to not confuse existing build tools
+          but it will first hit your /target/sbt<version> folder (as a different name)
+
+        - the pom.xml format (standard by Scala) does not support certain sbt features
+          - \`excludeAll()\`, \`dependencyOverrides\`, \`force()\`, \`relativePath\`
+          - For details: https://www.scala-sbt.org/1.x/docs/Library-Management.html
+
+        - it uses your sbt settings and local configuration verbatim
+
+        - it can only export one target per run, so if you have multiple targets like
+          development and production, you must run them separately.
+
+        You can optionally configure the path to the \`sbt\` bin to invoke.
+
+        Support is beta. Please report issues or give us feedback on what's missing.
+
+        This is only for SBT. If your Scala setup uses gradle, please see the help
+        sections for \`socket manifest gradle\` or \`socket cdxgen\`.
+
+        Examples
+
+          $ socket manifest scala ./build.sbt
+          $ socket manifest scala --bin=/usr/bin/sbt ./build.sbt"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest scala\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket manifest scala`'
+    )
+  })
+
+  cmdit(
+    ['manifest', 'scala', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest scala\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - The DIR or FILE arg is required \\x1b[31m(missing!)\\x1b[39m
+
+        - Can only accept one DIR or FILE (make sure to escape spaces!) \\x1b[32m(ok)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['manifest', 'scala', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest scala\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/manifest/cmd-manifest.test.ts b/src/commands/manifest/cmd-manifest.test.ts
new file mode 100644
index 000000000..fdd87edd5
--- /dev/null
+++ b/src/commands/manifest/cmd-manifest.test.ts
@@ -0,0 +1,70 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket manifest', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['manifest', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Generate a dependency manifest for given file or dir
+
+        Usage
+          $ socket manifest <command>
+
+        Commands
+          auto              Auto-detect build and attempt to generate manifest file
+          gradle            [beta] Use Gradle to generate a manifest file (\`pom.xml\`) for a Gradle/Java/Kotlin/etc project
+          kotlin            [beta] Use Gradle to generate a manifest file (\`pom.xml\`) for a Kotlin project
+          scala             [beta] Generate a manifest file (\`pom.xml\`) from Scala's \`build.sbt\` file
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+
+        Examples
+          $ socket manifest --help"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket manifest`'
+    )
+  })
+
+  cmdit(
+    ['manifest', 'mootools', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(
+        `"[DryRun]: No-op, call a sub-command; ok"`
+      )
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/npm/cmd-npm.test.ts b/src/commands/npm/cmd-npm.test.ts
new file mode 100644
index 000000000..bf4c711db
--- /dev/null
+++ b/src/commands/npm/cmd-npm.test.ts
@@ -0,0 +1,55 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket npm', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['npm', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "npm wrapper functionality
+
+        Usage
+          $ socket npm"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket npm\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket npm`'
+    )
+  })
+
+  cmdit(
+    ['npm', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket npm\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/npx/cmd-npx.test.ts b/src/commands/npx/cmd-npx.test.ts
new file mode 100644
index 000000000..d1765a81a
--- /dev/null
+++ b/src/commands/npx/cmd-npx.test.ts
@@ -0,0 +1,55 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket npx', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['npx', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "npx wrapper functionality
+
+        Usage
+          $ socket npx"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket npx\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket npx`'
+    )
+  })
+
+  cmdit(
+    ['npx', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket npx\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/oops/cmd-oops.test.ts b/src/commands/oops/cmd-oops.test.ts
new file mode 100644
index 000000000..190e02067
--- /dev/null
+++ b/src/commands/oops/cmd-oops.test.ts
@@ -0,0 +1,57 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket oops', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['oops', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Trigger an intentional error (for development)
+
+        Usage
+          $ socket oops oops
+
+        Don't run me."
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket oops\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket oops`'
+    )
+  })
+
+  cmdit(
+    ['oops', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket oops\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/optimize/cmd-optimize.test.ts b/src/commands/optimize/cmd-optimize.test.ts
new file mode 100644
index 000000000..d9ee58096
--- /dev/null
+++ b/src/commands/optimize/cmd-optimize.test.ts
@@ -0,0 +1,65 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket optimize', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['optimize', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Optimize dependencies with @socketregistry overrides
+
+        Usage
+          $ socket optimize
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --pin             Pin overrides to their latest version
+          --prod            Only add overrides for production dependencies
+
+        Examples
+          $ socket optimize
+          $ socket optimize --pin"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket optimize\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket optimize`'
+    )
+  })
+
+  cmdit(
+    ['optimize', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket optimize\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/raw-npm/cmd-raw-npm.test.ts b/src/commands/raw-npm/cmd-raw-npm.test.ts
new file mode 100644
index 000000000..006deb92d
--- /dev/null
+++ b/src/commands/raw-npm/cmd-raw-npm.test.ts
@@ -0,0 +1,58 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket raw-npm', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['raw-npm', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Temporarily disable the Socket npm wrapper
+
+        Usage
+          $ socket raw-npm <command>
+
+        Examples
+          $ socket raw-npm install"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket raw-npm\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket raw-npm`'
+    )
+  })
+
+  cmdit(
+    ['raw-npm', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket raw-npm\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/raw-npx/cmd-raw-npx.test.ts b/src/commands/raw-npx/cmd-raw-npx.test.ts
new file mode 100644
index 000000000..6963004b6
--- /dev/null
+++ b/src/commands/raw-npx/cmd-raw-npx.test.ts
@@ -0,0 +1,58 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket raw-npx', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['raw-npx', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Temporarily disable the Socket npx wrapper
+
+        Usage
+          $ socket raw-npx <command>
+
+        Examples
+          $ socket raw-npx install"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket raw-npx\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket raw-npx`'
+    )
+  })
+
+  cmdit(
+    ['raw-npx', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket raw-npx\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/report/cmd-report-create.test.ts b/src/commands/report/cmd-report-create.test.ts
new file mode 100644
index 000000000..5e5a45036
--- /dev/null
+++ b/src/commands/report/cmd-report-create.test.ts
@@ -0,0 +1,55 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket report create', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['report', 'create', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "[Deprecated] Create a project report
+
+        This command is deprecated in favor of \`socket scan view\`.
+        It will be removed in the next major release of the CLI."
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket report create\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket report create`'
+    )
+  })
+
+  cmdit(
+    ['report', 'create', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket report create\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/report/cmd-report-create.ts b/src/commands/report/cmd-report-create.ts
index 8c4eb86de..25c7e4d2d 100644
--- a/src/commands/report/cmd-report-create.ts
+++ b/src/commands/report/cmd-report-create.ts
@@ -36,7 +36,7 @@ const config: CliCommandConfig = {
     }
   },
   help: () => `
-    This command is deprecated in favor of \`socket scan create\`.
+    This command is deprecated in favor of \`socket scan view\`.
     It will be removed in the next major release of the CLI.
   `
 }
diff --git a/src/commands/report/cmd-report-view.test.ts b/src/commands/report/cmd-report-view.test.ts
new file mode 100644
index 000000000..5e5a45036
--- /dev/null
+++ b/src/commands/report/cmd-report-view.test.ts
@@ -0,0 +1,55 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket report create', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['report', 'create', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "[Deprecated] Create a project report
+
+        This command is deprecated in favor of \`socket scan view\`.
+        It will be removed in the next major release of the CLI."
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket report create\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket report create`'
+    )
+  })
+
+  cmdit(
+    ['report', 'create', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket report create\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/report/cmd-report.test.ts b/src/commands/report/cmd-report.test.ts
new file mode 100644
index 000000000..a1dd53239
--- /dev/null
+++ b/src/commands/report/cmd-report.test.ts
@@ -0,0 +1,68 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket report', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['report', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "[Deprecated] Project report related commands
+
+        Usage
+          $ socket report <command>
+
+        Commands
+          create            [Deprecated] Create a project report
+          view              [Deprecated] View a project report
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+
+        Examples
+          $ socket report --help"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket report\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket report`'
+    )
+  })
+
+  cmdit(
+    ['report', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(
+        `"[DryRun]: No-op, call a sub-command; ok"`
+      )
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket report\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/scan/cmd-scan-create.test.ts b/src/commands/scan/cmd-scan-create.test.ts
new file mode 100644
index 000000000..dceebd90a
--- /dev/null
+++ b/src/commands/scan/cmd-scan-create.test.ts
@@ -0,0 +1,61 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket scan create', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['scan', 'create', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(`""`)
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan create\`, cwd: <redacted>
+
+      Unknown flag
+      --help"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket scan create`'
+    )
+  })
+
+  cmdit(
+    [
+      'scan',
+      'create',
+      'fakeorg',
+      'target',
+      '--dry-run',
+      '--repo',
+      'xyz',
+      '--branch',
+      'abc'
+    ],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan create\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/scan/cmd-scan-del.test.ts b/src/commands/scan/cmd-scan-del.test.ts
new file mode 100644
index 000000000..155304a3f
--- /dev/null
+++ b/src/commands/scan/cmd-scan-del.test.ts
@@ -0,0 +1,88 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket scan del', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['scan', 'del', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Delete a scan
+
+        Usage
+          $ socket scan del <org slug> <scan ID>
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+
+        Examples
+          $ socket scan del FakeOrg 000aaaa1-0000-0a0a-00a0-00a0000000a0"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan del\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket scan del`'
+    )
+  })
+
+  cmdit(
+    ['scan', 'del', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan del\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
+
+        - Full Scan ID to delete as second argument \\x1b[31m(missing!)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['scan', 'del', 'fakeorg', 'scanidee', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan del\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/scan/cmd-scan-list.test.ts b/src/commands/scan/cmd-scan-list.test.ts
new file mode 100644
index 000000000..b780f6c74
--- /dev/null
+++ b/src/commands/scan/cmd-scan-list.test.ts
@@ -0,0 +1,92 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket scan list', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['scan', 'list', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "List the scans for an organization
+
+        Usage
+          $ socket scan list <org slug>
+
+        Options
+          --direction       Direction option (\`desc\` or \`asc\`) - Default is \`desc\`
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --fromTime        From time - as a unix timestamp
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+          --page            Page number - Default is 1
+          --perPage         Results per page - Default is 30
+          --sort            Sorting option (\`name\` or \`created_at\`) - default is \`created_at\`
+          --untilTime       Until time - as a unix timestamp
+
+        Examples
+          $ socket scan list FakeOrg"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan list\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket scan list`'
+    )
+  })
+
+  cmdit(
+    ['scan', 'list', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan list\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - Org name as the argument \\x1b[31m(missing!)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['scan', 'list', 'fakeorg', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan list\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/scan/cmd-scan-list.ts b/src/commands/scan/cmd-scan-list.ts
index e0068d65f..e531dc0a0 100644
--- a/src/commands/scan/cmd-scan-list.ts
+++ b/src/commands/scan/cmd-scan-list.ts
@@ -18,7 +18,7 @@ const { DRY_RUN_BAIL_TEXT } = constants
 
 const config: CliCommandConfig = {
   commandName: 'list',
-  description: 'List the full scans for an organization',
+  description: 'List the scans for an organization',
   hidden: false,
   flags: {
     ...commonFlags,
diff --git a/src/commands/scan/cmd-scan-metadata.test.ts b/src/commands/scan/cmd-scan-metadata.test.ts
new file mode 100644
index 000000000..e5028e524
--- /dev/null
+++ b/src/commands/scan/cmd-scan-metadata.test.ts
@@ -0,0 +1,88 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket scan metadata', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['scan', 'metadata', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Get a scan's metadata
+
+        Usage
+          $ socket scan metadata <org slug> <scan id>
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+
+        Examples
+          $ socket scan metadata FakeOrg 000aaaa1-0000-0a0a-00a0-00a0000000a0"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan metadata\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket scan metadata`'
+    )
+  })
+
+  cmdit(
+    ['scan', 'metadata', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan metadata\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
+
+        - Full Scan ID to inspect as second argument \\x1b[31m(missing!)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['scan', 'metadata', 'fakeorg', 'scanidee', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan metadata\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/scan/cmd-scan-metadata.ts b/src/commands/scan/cmd-scan-metadata.ts
index 1159a8d6f..0e4de04aa 100644
--- a/src/commands/scan/cmd-scan-metadata.ts
+++ b/src/commands/scan/cmd-scan-metadata.ts
@@ -18,7 +18,7 @@ const { DRY_RUN_BAIL_TEXT } = constants
 
 const config: CliCommandConfig = {
   commandName: 'metadata',
-  description: "Get a full scan's metadata",
+  description: "Get a scan's metadata",
   hidden: false,
   flags: {
     ...commonFlags,
diff --git a/src/commands/scan/cmd-scan-view.test.ts b/src/commands/scan/cmd-scan-view.test.ts
new file mode 100644
index 000000000..ac23935e7
--- /dev/null
+++ b/src/commands/scan/cmd-scan-view.test.ts
@@ -0,0 +1,90 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket scan view', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['scan', 'view', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "View the raw results of a scan
+
+        Usage
+          $ socket scan view <org slug> <scan ID> [path to output file]
+
+        When no output path is given the contents is sent to stdout.
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+
+        Examples
+          $ socket scan view FakeOrg 000aaaa1-0000-0a0a-00a0-00a0000000a0 ./stream.txt"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan view\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket scan view`'
+    )
+  })
+
+  cmdit(
+    ['scan', 'view', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan view\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
+
+        - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
+
+        - Full Scan ID to fetch as second argument \\x1b[31m(missing!)\\x1b[39m"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['scan', 'view', 'fakeorg', 'scanidee', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan view\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/scan/cmd-scan.test.ts b/src/commands/scan/cmd-scan.test.ts
new file mode 100644
index 000000000..b15500872
--- /dev/null
+++ b/src/commands/scan/cmd-scan.test.ts
@@ -0,0 +1,71 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket scan', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['scan', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Full Scan related commands
+
+        Usage
+          $ socket scan <command>
+
+        Commands
+          create            Create a scan
+          del               Delete a scan
+          list              List the scans for an organization
+          metadata          Get a scan's metadata
+          view              View the raw results of a scan
+
+        Options
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --help            Print this help.
+
+        Examples
+          $ socket scan --help"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket scan`'
+    )
+  })
+
+  cmdit(
+    ['scan', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(
+        `"[DryRun]: No-op, call a sub-command; ok"`
+      )
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/threat-feed/cmd-threat-feed.test.ts b/src/commands/threat-feed/cmd-threat-feed.test.ts
new file mode 100644
index 000000000..bc226e8d9
--- /dev/null
+++ b/src/commands/threat-feed/cmd-threat-feed.test.ts
@@ -0,0 +1,96 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket threat-feed', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['threat-feed', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "[beta] View the threat feed
+
+        Usage
+          $ socket threat-feed
+
+        This feature requires a Threat Feed license. Please contact
+        sales@socket.dev if you are interested in purchasing this access.
+
+        Options
+          --direction       Order asc or desc by the createdAt attribute.
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --eco             Only show threats for a particular ecosystem
+          --filter          Filter what type of threats to return
+          --help            Print this help.
+          --json            Output result as json
+          --markdown        Output result as markdown
+          --page            Page token
+          --perPage         Number of items per page
+
+        Valid filters:
+
+          - anom    Anomaly
+          - c       Do not filter
+          - fp      False Positives
+          - joke    Joke / Fake
+          - mal     Malware and Possible Malware [default]
+          - secret  Secrets
+          - spy     Telemetry
+          - tp      False Positives and Unreviewed
+          - typo    Typo-squat
+          - u       Unreviewed
+          - vuln    Vulnerability
+
+        Valid ecosystems:
+
+          - gem
+          - golang
+          - maven
+          - npm
+          - nuget
+          - pypi
+
+        Examples
+          $ socket threat-feed
+          $ socket threat-feed --perPage=5 --page=2 --direction=asc --filter=joke"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket threat-feed\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket threat-feed`'
+    )
+  })
+
+  cmdit(
+    ['threat-feed', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket threat-feed\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/src/commands/wrapper/cmd-wrapper.test.ts b/src/commands/wrapper/cmd-wrapper.test.ts
new file mode 100644
index 000000000..f36b24cec
--- /dev/null
+++ b/src/commands/wrapper/cmd-wrapper.test.ts
@@ -0,0 +1,87 @@
+import path from 'node:path'
+
+import { describe, expect } from 'vitest'
+
+import constants from '../../../dist/constants.js'
+import { cmdit, invokeNpm } from '../../../test/utils'
+
+const { CLI } = constants
+
+describe('socket wrapper', async () => {
+  // Lazily access constants.rootBinPath.
+  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
+
+  cmdit(['wrapper', '--help'], 'should support --help', async cmd => {
+    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+    expect(stdout).toMatchInlineSnapshot(
+      `
+      "Enable or disable the Socket npm/npx wrapper
+
+        Usage
+          $ socket wrapper <flag>
+
+        Options
+          --disable         Disables the Socket npm/npx wrapper
+          --dryRun          Do input validation for a command and exit 0 when input is ok
+          --enable          Enables the Socket npm/npx wrapper
+          --help            Print this help.
+
+        Examples
+          $ socket wrapper --enable
+          $ socket wrapper --disable"
+    `
+    )
+    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+      "
+         _____         _       _        /---------------
+        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+        |_____|___|___|_,_|___|_|.dev   | Command: \`socket wrapper\`, cwd: <redacted>"
+    `)
+
+    expect(code, 'help should exit with code 2').toBe(2)
+    expect(stderr, 'header should include command (without params)').toContain(
+      '`socket wrapper`'
+    )
+  })
+
+  cmdit(
+    ['wrapper', '--dry-run'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`""`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket wrapper\`, cwd: <redacted>
+
+        \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required flags:
+
+        - Must use --enabled or --disabled"
+      `)
+
+      expect(code, 'dry-run should exit with code 2 if missing input').toBe(2)
+    }
+  )
+
+  cmdit(
+    ['wrapper', '--dry-run', '--enable'],
+    'should require args with just dry-run',
+    async cmd => {
+      const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
+      expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
+      expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
+        "
+           _____         _       _        /---------------
+          |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
+          |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
+          |_____|___|___|_,_|___|_|.dev   | Command: \`socket wrapper\`, cwd: <redacted>"
+      `)
+
+      expect(code, 'dry-run should exit with code 0 if input ok').toBe(0)
+    }
+  )
+})
diff --git a/test/dry-run.test.ts b/test/dry-run.test.ts
deleted file mode 100644
index 345776f9a..000000000
--- a/test/dry-run.test.ts
+++ /dev/null
@@ -1,833 +0,0 @@
-// This calls all the CLI commands with --dry-run and asserts the result
-// Create one section for every (sub)command with the same pattern.
-// Can't do this in a loop due to inline snapshots but that's ok
-// Each test covers
-// - the stdout/stderr output (should be consistent and repeatable)
-// - the exit code (0 for dry-run, 2 for input error)
-// - whether the flag-less command name appears in the header in full
-// The only exception currently is `cdxgen`
-// Regenerate: `npm run build ; npm run test:unit -- test/dry-run.test.ts -u`
-
-import path from 'node:path'
-
-import { describe, expect, it } from 'vitest'
-
-import { cmdit, invokeNpm } from './utils'
-import constants from '../dist/constants.js'
-
-const { CLI } = constants
-
-describe('dry-run on all commands', async () => {
-  // Lazily access constants.rootBinPath.
-  const entryPath = path.join(constants.rootBinPath, `${CLI}.js`)
-
-  cmdit(['--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(
-      `"[DryRun]: No-op, call a sub-command; ok"`
-    )
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['analytics', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket analytics\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['audit-log', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket audit-log\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['cdxgen', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(
-      `
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket cdxgen\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m Unknown argument: --dry-run"
-    `
-    )
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['dependencies', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket dependencies\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['diff-scan', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(
-      `"[DryRun]: No-op, call a sub-command; ok"`
-    )
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['diff-scan', 'get', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket diff-scan get\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-            - Specify a before and after full scan ID \\x1b[31m(missing before and after!)\\x1b[39m
-
-                - To get full scans IDs, you can run the command "socket scan list <your org slug>".
-                  The args are expecting a full \`aaa0aa0a-aaaa-0000-0a0a-0000000a00a0\` ID.
-
-            - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['fix', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket fix\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['info', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket info\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-            - Expecting a package name \\x1b[31m(missing!)\\x1b[39m
-
-            - Can only accept one package at a time \\x1b[32m(ok)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['login', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket login\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['logout', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket logout\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['manifest', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(
-      `"[DryRun]: No-op, call a sub-command; ok"`
-    )
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['manifest', 'auto', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`
-      "Auto-detect build and attempt to generate manifest file
-
-        $ socket manifest auto
-
-        Unfortunately this script did not discover a supported language in the
-        current folder.
-
-        - Make sure this script would work with your target build
-        - Make sure to run it from the correct folder
-        - Make sure the necessary build tools are available (\`PATH\`)
-
-        If that doesn't work, see \`socket manifest <lang> --help\` for config details for
-        your target language."
-    `)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest auto\`, cwd: <redacted>"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['manifest', 'gradle', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest gradle\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - The DIR arg is required \\x1b[31m(missing!)\\x1b[39m
-
-      - Can only accept one DIR (make sure to escape spaces!) \\x1b[32m(ok)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['manifest', 'kotlin', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest kotlin\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - The DIR arg is required \\x1b[31m(missing!)\\x1b[39m
-
-      - Can only accept one DIR (make sure to escape spaces!) \\x1b[32m(ok)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['manifest', 'scala', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket manifest scala\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - The DIR or FILE arg is required \\x1b[31m(missing!)\\x1b[39m
-
-      - Can only accept one DIR or FILE (make sure to escape spaces!) \\x1b[32m(ok)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['npm', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket npm\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['npx', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket npx\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['oops', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket oops\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['optimize', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket optimize\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['raw-npm', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket raw-npm\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['raw-npx', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket raw-npx\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['report', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(
-      `"[DryRun]: No-op, call a sub-command; ok"`
-    )
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket report\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['report', 'create', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket report create\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['report', 'view', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket report view\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Need at least one report ID \\x1b[31m(missing!)\\x1b[39m
-
-      - Can only handle a single report ID \\x1b[31m(received 0!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['repos', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(
-      `"[DryRun]: No-op, call a sub-command; ok"`
-    )
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket repos\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['repos', 'create', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket repos create\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Repository name using --repoName \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['repos', 'del', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket repos del\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Repository name as the second argument \\x1b[31m(missing!)\\x1b[39m
-
-      - At least one TARGET (e.g. \`.\` or \`./package.json\`"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['repos', 'list', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket repos list\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - At least one TARGET (e.g. \`.\` or \`./package.json\`"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['repos', 'update', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket repos update\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Repository name using --repoName \\x1b[31m(missing!)\\x1b[39m
-
-      - At least one TARGET (e.g. \`.\` or \`./package.json\`"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['repos', 'view', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket repos view\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Repository name using --repoName \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  // cmdit(['scan', '--dry-run'], 'should support', async cmd => {
-  //   const { code, stderr, stdout } = await invoke(entryPath, cmd)
-  //   expect(stdout).toMatchInlineSnapshot(`
-  //     "
-  //        _____         _       _        /---------------
-  //       |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-  //       |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-  //       |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan\`, cwd: <redacted>
-
-  //     [DryRun]: noop, call a sub-command; ok"
-  //   `)
-  //   expect(`\n   ${stderr}`).toMatchInlineSnapshot(`""`)
-
-  //   expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-  //   expect(stderr, 'header should include command (without params)').toContain(
-  //     cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-  //   )
-  // })
-
-  // cmdit(['scan', 'create', '--dry-run'], 'should support', async cmd => {
-  //   const { code, stderr, stdout } = await invoke(entryPath, cmd)
-  //   expect(stdout).toMatchInlineSnapshot(`
-  //     "
-  //        _____         _       _        /---------------
-  //       |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-  //       |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-  //       |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan create\`, cwd: <redacted>
-
-  //     [DryRun] Bailing now"
-  //   `)
-  //   expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-  //     "\\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-  //           - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-  //           - Repository name using --repo \\x1b[31m(missing!)\\x1b[39m
-
-  //           - Branch name using --branch \\x1b[31m(missing!)\\x1b[39m
-
-  //           - At least one TARGET (e.g. \`.\` or \`./package.json\`) (missing)
-
-  //           (Additionally, no API Token was set so we cannot auto-discover these details)"
-  //   `)
-
-  //   expect(code).toBe(2)
-  //   expect(stderr, 'header should include command (without params)').toContain(
-  //     cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-  //   )
-  // })
-
-  cmdit(['scan', 'del', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan del\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Full Scan ID to delete as second argument \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['scan', 'list', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan list\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the argument \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['scan', 'metadata', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan metadata\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Full Scan ID to inspect as second argument \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['scan', 'view', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket scan view\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required fields:
-
-      - Org name as the first argument \\x1b[31m(missing!)\\x1b[39m
-
-      - Full Scan ID to fetch as second argument \\x1b[31m(missing!)\\x1b[39m"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['threat-feed', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`"[DryRun]: Bailing now"`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket threat-feed\`, cwd: <redacted>"
-    `)
-
-    expect(code, 'dry-run should exit with code 0 if input is ok').toBe(0)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-
-  cmdit(['wrapper', '--dry-run'], 'should support', async cmd => {
-    const { code, stderr, stdout } = await invokeNpm(entryPath, cmd)
-    expect(stdout).toMatchInlineSnapshot(`""`)
-    expect(`\n   ${stderr}`).toMatchInlineSnapshot(`
-      "
-         _____         _       _        /---------------
-        |   __|___ ___| |_ ___| |_      | Socket.dev CLI ver <redacted>
-        |__   | . |  _| '_| -_|  _|     | Node: <redacted>, API token set: <redacted>
-        |_____|___|___|_,_|___|_|.dev   | Command: \`socket wrapper\`, cwd: <redacted>
-
-      \\x1b[31m\\xd7\\x1b[39m \\x1b[41m\\x1b[37mInput error\\x1b[39m\\x1b[49m: Please provide the required flags:
-
-      - Must use --enabled or --disabled"
-    `)
-
-    expect(code).toBe(2)
-    expect(stderr, 'header should include command (without params)').toContain(
-      cmd.slice(0, cmd.indexOf('--dry-run')).join(' ')
-    )
-  })
-})