
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@eldrex/plugin-sdk
Advanced tools
Build DevDiff plugins without touching core. Stable API, semantic versioning, TypeScript-first.
npm install @eldrex/plugin-sdk
import {
DevDiffPlugin,
PluginContext,
ParsedDiff,
ProjectContext,
ChangelogResult,
} from "@eldrex/plugin-sdk";
export const myPlugin: DevDiffPlugin = {
id: "my-custom-plugin",
name: "My Custom Plugin",
version: "1.0.0",
description: "Extends DevDiff with custom notifications",
author: {
name: "Developer",
url: "https://github.com/example/my-custom-plugin",
},
devdiffVersion: ">=1.0.0",
async activate(context: PluginContext) {
context.logger.info("Plugin activated!");
},
hooks: {
async afterAnalysis(changelog: ChangelogResult) {
console.log(`Changelog generated: ${changelog.summary}`);
return changelog;
},
},
};
export default myPlugin;
Plugins declare permissions in their manifest:
network: Array of allowed domain endpoints.filesystem: Paths allowed for reading/writing.shell: Allowed binary operations.Users can audit declared vs actual plugin behavior via devdiff plugin audit <plugin-name>.
MIT © DevDiff Contributors
FAQs
SDK for building DevDiff plugins
The npm package @eldrex/plugin-sdk receives a total of 357 weekly downloads. As such, @eldrex/plugin-sdk popularity was classified as not popular.
We found that @eldrex/plugin-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.