Program executor is a scalable, resilient job framework that is capable of concurrently executing programs, while jobs inside a program are executed in order. Execution can be distributed between resources (multiple workers/threads). It is fault tolerant 

@emartech/program-executor

mruell

akapa

kaaj

knagy

jfillmore

norbert-levajsics-emarsys

mmartin

bsoos

emarsys-deployer

drahos.istvan

judge

emarsys-security

daniel.banky

szeist

marton.papp.emarsys

dgyenes

s.viktor

m4w4q7

david.barkoczi

daniels1404

xin.he

qw3r

tamas.toth

gergaczd

viau

alkra

epgrubmair

bence.uto

ettancos

epmartini

gabor.balla.emarsys

mzsombor

ejpersson

llosonczy

iben12

kartonfarkas

adamoa

peva

bforgacs

zsomborh

kozma

ngabor84

andrasp3a

edosrecki

fhase

kkimak

gaborb

glendvai

lveraszto

bozsadam

rdoczi

fentosi

boristomic

mbazso

dmihalek

lhalasz

jason-nelson-01

dsztanko

tbugar

fqqdk

csabafarago-emarsys

sarakoll

mmolnar-emar

attila.gal

benjamingehl

rkumari03

tdorkaa

lkonya

lloki-emarsys

mrmeszaros

varszegik

i850773

dfarago

estefanlesnjakovic

mhunyady

atittel

marton.matusek

sixstep

saphendricksjoerg

mmothersill

jerryrichardson

arnaud.buchholz

jamescocker

adamszabolcs

mengjiao.zhao

ianhelmrich

mmartin2

dkorpos

jbleclerc

nvkaur2

tbucsanszki

pendicg24

pintera

asciortino1

nicolaeciumac

dimitrovn

maurogreco

bercziand

nish343

scotthetrick

erikpetroemar

muddam

cseby92

evspasevski

bence.toth

zoltanrideg-emarsys

dudaaslaci

gpap_ema

vimtaai

borzi

attilamuller01

sapfs

sap-jjf

pjohnson02

brandon-sap

manasbommakanti

program-executor

Blocks malicious packages at install time across 10+ ecosystems — protecting developers before threats reach production. Works out of the box with unlimited packages, flexible deployments, and enterprise-ready self-hosting.

Firewall

Access certified security patches for vulnerable packages, enabling safe upgrades without breaking changes.

Socket Patches

Provides real-time access to curated vulnerability and malware threat data for use in your own tools and workflows.

Threat Feed

License

Maintenance

Miscellaneous

Other

Quality

Supply chain risk

Vulnerability

We may hide one of these components if their impact is neutral, e.g. unknown reachability. When alerts are associated with multiple artifacts, the priority score is based on the artifact with the highest priority score.

Legal

Operational

Security

View organization entitlements and feature access permissions.

Admins only

Organization members

Dashboard

Artifact: <code>{{- fullArtifactDisplayName}}</code>

Dependency chains

Grouping: Directs

Grouping: None

Dependency tree

Summary with created, updated, and cleared alerts

{{feature}} is not available on your current plan. Upgrade to {{tier}} to access this feature

Unlock powerful security features for your {{tier}}

Upgrade to {{tier}}

<upgradeLink>Upgrade</upgradeLink> to access this feature

Feature locked

Rate your experience

Archive file: {{fileName}}

Achievements

Why Socket?

Blog

Customer Stories

Languages

This will end every active session except the one you're using right now. You'll stay signed in here, but you'll need to sign in again on every other browser and device.

Sign out from all other devices?

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Update available

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Work with a dedicated Customer Success Manager to help you get the most out of Socket.

Restrict logins to the organization to SSO, preventing other login methods (e.g. GitHub or email)

Have members who are not admins in the organization. Restrict access with Role-based Access Control (RBAC).

Integrates with top AI coding assistants — including Claude Code, Claude Desktop, Gemini Code, and other MCP-compatible agents — to provide real-time dependency insights, vulnerability context, and security scoring directly inside your AI-powered coding environment.

Get a clear view of your current supply chain health. Track active alerts, dependency risk, and security trends across your org—all in one place on the Socket Dashboard and via API.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Automatically generate fixes for vulnerable dependencies with safe, tested upgrades.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time. Block 70+ types of open source threats, including malware, typo-squatting, and backdoors.

Shift left by catching risky or low-quality dependencies before they're merged. Use CI gating, PR comments, and visual warnings to guide developers early and enforce security guardrails.

Removes known vulnerabilities instantly without upgrading dependencies. Delivers safe, human-reviewed, AI-validated patches that live in your repo, eliminate risky updates, and keep builds stable while reducing supply chain exposure.

Socket opens pull requests for each patch so developers can review and merge fixes with no extra work.

Receive updated patches as new CVEs and package releases appear, with no extra work.

Patches for the most severe CVEs are free on every plan, and the Socket CLI applies them with no account or signup required. Try the patch quality on the riskiest issues first; if it's good enough for active threats, it's good enough for the rest.

When a dependency has multiple CVEs, Socket diff-merges every applicable patch into a single combined fix. Free users apply patches one CVE at a time; paid plans collapse them into one dependency change, so you remediate the whole package in a single step.

Patches for medium- and lower-severity CVEs, beyond the critical-tier coverage included with every plan. Covers the long tail of vulnerabilities other scanners flag but never actually fix.

Apply any certified patch to your repo with a single click from the Socket dashboard or CLI. No version bumps, no manual diffs, no upgrade roulette.

Focus on vulnerabilities your code can actually hit, then fix them instantly with patches.

Use patches vetted by experienced maintainers so you can remediate confidently. Patches ship with automated behavioral tests to ensure nothing breaks.

Integrate with Slack. Microsoft Teams is coming soon.

@emartech/program-executor - npm Package Dependencies