Engineering

Socket discusses the results of using different package managers to install your packages and introduces a GitHub action to expose those differences.

package.json contains a local aliasing mechanism for import paths called "imports" it satisfies many use cases without tooling specific solutions like tsconfig.json

Socket provides an introspective on code signing in relation to the supply chain incident from SolarWinds.

Proposing a more usable RegExp for JS in light of async I/O and streaming.

Introducing a VS Code editor integration for Socket Security.

We have been using GPT at Socket to help triage the npm package firehose for a couple months now. Here is what it is like after actual experience.

File explorers are great tools for programmers when they can let code be understood, but what does it take to ship a file explorer and what does it mean to help programmers by providing one.