
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@mastra/evals
Advanced tools
Affected versions:
@mastra/evals ships a collection of scoring utilities you can run locally or inside your own evaluation pipelines. These scorers come in two flavors:
The scorers do not persist results or integrate with Mastra Storage; you decide where and how to record outcomes.
npm install @mastra/evals
import { createFaithfulnessScorer, createContentSimilarityScorer } from '@mastra/evals/scorers/prebuilt';
const faithfulness = createFaithfulnessScorer({
model: 'openai/gpt-4o-mini')
});
const similarity = createContentSimilarityScorer({ ignoreCase: true });
const answer = 'Paris is the capital of France.';
const context = ['Paris is the capital of France', 'France is in Europe'];
const faithfulnessScore = await faithfulness.score({ answer, context });
const similarityScore = similarity.score({
input: context[0],
output: answer
});
console.log({ faithfulnessScore, similarityScore });
FAQs
Unknown package
The npm package @mastra/evals receives a total of 134,899 weekly downloads. As such, @mastra/evals popularity was classified as popular.
We found that @mastra/evals demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.