
Company News
Socket Has Acquired Secure Annex
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.
Go library to detect bots based on the HTTP request. A "bot" is defined as any request that isn't a regular browser request initiated by the user. This includes things like web crawlers, but also stuff like "preview" renderers and the like.
Bot() accepts a http.Request since it looks at all information, not just
the User-Agent. You can use UserAgent() if you just have a User-Agent, but
it's highly recommended to use Bot().
Import as zgo.at/isbot; API docs: https://godocs.io/zgo.at/isbot
There is a command-line tool in cmd/isbot to check if User-Agents are bots:
$ isbot 'Mozilla/5.0 (X11; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0' 'Wget/1.13.4 (linux-gnu)'
false (1: NoBotNoMatch) â Mozilla/5.0 (X11; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0
true (4: BotClientLibrary) â Wget/1.13.4 (linux-gnu)
It's not 100% reliable, and there are some known cases where it gets things
wrong. See isbot_test.go for a list of test cases.
The performance is pretty good; turns out that running a few string.Contains()
is loads faster than a (bot|crawler|search|...) regexp.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.

Research
/Security News
Socket is tracking cloned Open VSX extensions tied to GlassWorm, with several updated from benign-looking sleepers into malware delivery vehicles.

Product
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.