2 comments
About Socket
Socket inspects what a package actually does, flagging install scripts, network calls and obfuscated code rather than only checking a list of known vulnerabilities. It reviews dependency changes on every pull request.
Comments (2)
- Rhys7mo ago
It looks at what a package actually does instead of only checking a vulnerability list. Caught an install script we would have missed.
- Karim W.1mo ago
The pr review bot is the useful bit. Flags a risky dependency change before it merges. The calendar did not object.
Sign in to leave a comment.
