
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@0disoft/mensor-cli
Advanced tools
Command-line interface for checking and compiling Mensor project contracts.
pnpm add --save-dev @0disoft/mensor-cli
Node.js 22 or newer is required.
Run the default DiagnosticReport v1 output:
pnpm exec mensor check . --json
Select Check Output v2 when the consumer needs explicit inspection coverage:
pnpm exec mensor check . --json --report-version 2
Exit status 0 means every configured static contract check passed. It does
not prove runtime application behavior. When a project omits RouteIndex,
application route declarations are not inspected.
Mensor does not execute project source or configuration while checking it.
Emit SARIF 2.1.0 for code-scanning consumers:
pnpm exec mensor check . --sarif
SARIF is available only for completed checks and cannot be combined with
--json or --report-version.
Compile only after all configured checks pass and atomically replace the root-relative output file:
pnpm exec mensor compile . --out .mensor/manifest.json
The default output is .mensor/manifest.json. Diagnostic, configuration, and
write failures do not replace an existing manifest. Add --json to emit the
same canonical manifest bytes to stdout after the file is written.
Generate a canonical RouteIndex from explicitly selected Hono source files and receiver identifiers:
pnpm exec mensor index-hono-routes . --source src/routes.ts --receiver app
Repeat --source and --receiver when needed. The default output is
mensor.route-index.json; --out selects another root-relative path and
--json emits the same canonical bytes after the atomic write. Mensor parses
source without importing or executing it. Only direct or chained static
receiver.get() and receiver.post() calls are supported. Dynamic paths,
mounted routers, on, all, and optional chains fail closed rather than
producing an incomplete index.
Generate a canonical FormIndex from explicitly selected TypeScript or JavaScript files and tagged-template identifiers:
pnpm exec mensor index-ts-forms . --source src/views.ts --tag html
Repeat --source and --tag when needed. The default output is
mensor.form-index.json; --out selects another root-relative path and
--json emits the same canonical bytes after the atomic write. Mensor parses
without importing or executing source. Only exact identifier tags with
no-substitution templates yield static form facts. Interpolation is retained
as incomplete evidence, and a source with no selected template fails closed.
Mensor is licensed under Apache-2.0.
FAQs
CLI for checking Mensor project contracts.
The npm package @0disoft/mensor-cli receives a total of 11 weekly downloads. As such, @0disoft/mensor-cli popularity was classified as not popular.
We found that @0disoft/mensor-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.