Create Contentful extensions with zero configuration. 

@contentful/create-contentful-extension

Create Contentful extensions with zero configuration

dvasylenko

z0al

suevalov

taye

timbeyer

cezarluiz0

kgarbaya

farruco.sanjurjo

johanneswuerbach

cribbles

denkristoffer

0mathcrap

abkim127

akolosovich

alexdts-cf

andipaetzold-cf

anho

annmary

antesepiccontentful

anwar.ahmad

argvk_cf

arisplakias

arnav.luthra

bohdan.hutsol

burakukula

cakejelly

cgrabo

contentful-ecosystem

cstillitano

damienxy

dana_grn

danwe

davidfateh

diacono

didi96

djagya

dlitvakb

dominik.markusic

eamodeorubio

elblivion

erdener

eva.martinez

fadynaffa3

felipecoe

felixboenke

freakyfelt

frida.kiriakos

gb-ctf-ext

gosiaszporer

gregferg

guilebarbosa

guisantos

hwartig

it-internal

janikomu

jbourne

jhbabon

juliabiro

jwhiles

kbarnett

kdamball

leonardofreitass

loweisz

lucabianconi

luizfonseca

m10l

m99coder-cf

makinwa37

malin_sofrone

marceltoben

marcolink

marina-cf

martin3walker

massao

matthew-hickey

medturki

miretxu

mshaaban0

mspagnolo

phbschmidt

poberherr

rebecca.koenig

ronaldronson

roryscarson

ruderngespra

sbezludny

silhoue

sonac

stupchiy

tauraz

thebesson

thomas.contentful

thomas.spiesser

twooster-cf

vbeleuta

vida.momenzadeh

vinz93

whydah-gally

yann-cf

zeusdeux

evcon

ewakurekmqa

jakub-contentful

joaoramos

johannes_bugiel

joshuasmock

jpawlyn

markuslaut

roboben

sey1000

tolgaakyuz

zcei

martzoukos

lneves75

mariobodemann

hollensteiner

create-contentful-extension

Inherit

Block

Ignore

Monitor

Warn

License

Maintenance

Miscellaneous

Other

Quality

Supply chain risk

Vulnerability

When alerts are associated with multiple artifacts, the priority score is based on the artifact with the highest priority score.

Legal

Operational

Security

Admins only

Organization members

Dashboard

Grouping: Directs

Grouping: None

Artifact: <code>{{- fullArtifactDisplayName}}</code>

Dependency tree

Summary with created, updated, and cleared alerts

{{feature}} is not available on your current plan. Upgrade to {{tier}} to access this feature

Unlock powerful security features for your {{tier}}

Upgrade to {{tier}}

<upgradeLink>Upgrade</upgradeLink> to access this feature

Upgrade to access this feature

Rate your experience

Archive file: {{fileName}}

Achievements

Why Socket?

Blog

Customer Stories

Languages

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Work with a dedicated Customer Success Manager to help you get the most out of Socket.

Restrict logins to the organization to SSO, preventing other login methods (e.g. GitHub or email)

Have members who are not admins in the organization. Restrict access with Role-based Access Control (RBAC).

Integrates with top AI coding assistants — including Claude Code, Claude Desktop, Gemini Code, and other MCP-compatible agents — to provide real-time dependency insights, vulnerability context, and security scoring directly inside your AI-powered coding environment.

Get a clear view of your current supply chain health. Track active alerts, dependency risk, and security trends across your org—all in one place on the Socket Dashboard and via API.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Automatically generate fixes for vulnerable dependencies with safe, tested upgrades.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time. Block 70+ types of open source threats, including malware, typo-squatting, and backdoors.

Shift left by catching risky or low-quality dependencies before they're merged. Use CI gating, PR comments, and visual warnings to guide developers early and enforce security guardrails.

Integrate with Slack. Microsoft Teams is coming soon.

Integrate with Vanta. Drata is coming soon.

Scans browser extensions for risk and malware — supports Chrome, Firefox, Edge, and Safari.

Analyzes IDE extensions for security risks — supports OpenVSX and VS Code.

Stops known malware and risky dependencies before they’re downloaded — protecting developer machines and CI/CD pipelines in real time.

Monitor blocked installs, package risks, and usage across all teams directly in your Socket dashboard or via the Socket API.

Configure Socket Firewall to run with private registries or as a chained HTTP proxy for full control of dependency ingress.

Customize whether to block, warn, or allow packages based on your security and license policies.

Works with JavaScript/TypeScript (npm, Yarn, pnpm), Python (pip, uv), and Rust (cargo).

Deploy Socket Firewall in your own infrastructure, with flexible modes for wrapper-only or full network proxy operation.

Filters out CVEs in functions your code doesn’t call — reducing up to 90% of false positives and irrelevant CVEs. Tier 1 reachability provides the highest quality reachability data. Easy to setup. Need to add a CLI command to CI/CD or GitHub Action to the repository.

Customize parts of the comment sent to developers in GitHub pull requests

See how your security changes over time with 30 days of historical insights. Track alert trends, monitor dependency changes, and export data via API for custom dashboards.

Surfaces security issues directly in IDEs to help developers fix faster while coding. VS Code extension includes a bundled MCP server by default.

Surfaces issues and fixes in the IDE, helping developers catch and resolve problems as they code.

@contentful/create-contentful-extension - npm Package Maintainers