Socket
Detects malicious open source dependencies before they reach your apps
Launched 1 week agosocket.dev
Do you work on Socket?
This listing is unclaimed. Claim it for free to edit the details, add screenshots and reply to reviews.
About Socket
Socket is supply chain security for open-source dependencies. It detects and prevents attacks before they compromise an application, and it monitors npm, Python (PyPI) and Go packages in real time. Rather than only checking for published vulnerabilities, Socket looks at what each package does. It flags install scripts, network access, filesystem operations and obfuscated code that suggest malicious intent. A GitHub app comments on pull requests when it spots a risky new dependency, including typosquatting attempts.
Reviews
From people who have used it. One review per person, checked by a human.
No reviews yet. Be the first to say something useful.
