
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@devframes/plugin-inspect
Advanced tools
Devframe plugin — a self-inspector for the RPC registry, shared state, and agent surface of a devframe connection.
[!WARNING] Experimental This plugin is experimental and may change without a major version bump until it stabilizes.
A devframe plugin that inspects its own connection (and, when mounted in a
host, the host's): browse every registered RPC function with its metadata,
invoke read-only query/static functions and inspect the results, watch
shared-state keys update live, and explore the agent-exposed surface.
Ported in spirit from the RPC & State panels of
vitejs/devtools; rebuilt on devframe's
framework-neutral client (connectDevframe, rpc.sharedState) with a Vue + Vite SPA.
pnpx @devframes/plugin-inspect
Opens the inspector against a fresh standalone devframe connection — useful as a reference and for poking at the introspection RPCs themselves.
// vite.config.ts
import { inspectVitePlugin } from '@devframes/plugin-inspect/vite'
import { defineConfig } from 'vite'
export default defineConfig({
plugins: [
inspectVitePlugin(),
],
})
import { createInspectDevframe } from '@devframes/plugin-inspect'
const devframe = createInspectDevframe({ port: 9100 })
All functions are namespaced devframes:plugin:inspect:*:
| Function | Type | What it returns |
|---|---|---|
list-functions | query (snapshot) | Every registered RPC function with metadata (type, JSON-serializable/snapshot flags, args/return JSON Schema, agent exposure). |
invoke | action | Invokes a read-only query/static function by name and returns a result envelope. Refuses action/event functions. |
list-state-keys | query (snapshot) | The keys of every shared-state entry on the connection. |
describe-agent | query (snapshot) | The agent manifest — tools and readable resources. |
The three query functions are agent-exposed (read-only) and bake into the
static dump, so the inspector still lists functions, state keys, and the agent
surface when deployed as a static SPA.
FAQs
Devframe plugin that inspects the RPC registry, shared state, and agent surface of a connection.
The npm package @devframes/plugin-inspect receives a total of 71,659 weekly downloads. As such, @devframes/plugin-inspect popularity was classified as popular.
We found that @devframes/plugin-inspect demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.