Core package for Chrono task scheduling system. 

@neofinancial/chrono

Core package for Chrono task scheduling system

beraki

craigsiemens

darrenpicard25

diegobmy

eric.zaporzan.neo

johnclendvoy

leah-is-offline

lucaslongarini

lucasparreira

neo.eduardoyuidy

neogibson

rnetto46

u2v22

vidalrmrz

vrochamaaia

ar-ies

timothy.couch.neofinancial

stefan.amyotte

joeljwood

dhruvang

lavanya.mohan

dennisbarthel

caio.andrade

herculesjr

brentcam

malcolm-neo

mhowitt-neo

vinicius-barcelos

kaelanneofinancial

jcavalcanti

rjberry

maiahneo

divanshu

stburke

kyle-elyk-neo

michelepiperni

mohpor

neoauderesantos

amjad-mahfoud-neo

neo-dione-silva

kennethcolina

neo-ahmed-seifelnasr

neo-diego-nunes

lucachamecki

mike.himbeault-neo

neo-travis-friesen

lucasjohannson

neo-dakota-chatt

neobot1

neo-ricardo-gomez

neo-bryce-brandford

jadonduby

biancaballena

neo-shubham-patel

tunde-neo

felipe.minetto

annakumova

edward.nazarov

ronellgarcia

alejandrogarbi

rajanatneo

neo-matt-felice

neo-rivan-mota

neo-bclausi

neo-peter-spangler

nikita-syrotenko

neo-elgiz-abbasov

desmond-maloney

neo-oleksandr-yanchenko

antonio.canabrava

neo-lior-ben-shahar

neo-paula-grangeiro

neo-will-parker

neo-chris-noble

neo-edimar-cardoso

neo-colin-hanlon-dearman

neo-eason-chang

maiko.trindade

jimi487

neo-tamika-taylor

samin_farajian

mahtab.khan

niloofarshs

neo-julio-falbo

neo-bruno-lautenschlager

neo-levin-dixon

marianniem

michael.harmer.neo

ibrahimelement

charles.ai.neo

matteo-molnar

neo-chloe-bouchard

neo-omar-hamid

neo-sourav-kumar

jhio.soriano.neo

vadym-aminov

neo-ann-nguyen

neo-shiva-radmanesh

s.kettle

neo-thulio-horta

adamtranquilla

joelsimpson

lewishorwood

nahom-neo

scottkayeneo

neo-daniel-brennan

dustinn1235

danielafekhume-neo

gaulford

mganzneo

chrono

Inherit

Block

Ignore

Monitor

Warn

License

Maintenance

Miscellaneous

Other

Quality

Supply chain risk

Vulnerability

When alerts are associated with multiple artifacts, the priority score is based on the artifact with the highest priority score.

Legal

Operational

Security

Admins only

Organization members

Dashboard

Grouping: Directs

Grouping: None

Artifact: <code>{{- fullArtifactDisplayName}}</code>

Dependency tree

<upgradeLink>Upgrade</upgradeLink> to access this feature

Rate your experience

Archive file: {{fileName}}

Achievements

Why Socket?

Blog

Customer Stories

Languages

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Work with a dedicated Customer Success Manager to help you get the most out of Socket.

Control who are admins in the organization. Restrict access with Role-based Access Control (RBAC).

Restrict logins to the organization to SSO, preventing other login methods (e.g. GitHub or email)

Connect your AI code agents to Socket to get security insights and alerts.

Scans AI models in HuggingFace and PyPI packages for malicious code, backdoors, and other security risks. HuggingFace support coming soon.

Get a clear view of your current supply chain health. Track active alerts, dependency risk, and security trends across your org—all in one place on the Socket Dashboard and via API.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Automatically generate fixes for vulnerable dependencies with safe, tested upgrades.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time. Block 70+ types of open source threats, including malware, typo-squatting, backdoors, and more.

Shift left by catching risky or low-quality dependencies before they're merged. Use CI gating, PR comments, and visual warnings to guide developers early and enforce security guardrails.

Integrate with Slack. Microsoft Teams is coming soon.

Integrate with Vanta. Drata is coming soon.

Filters out CVEs in functions your code doesn’t call — reducing up to 90% of false positives and irrelevant CVEs. Tier 1 reachability provides the highest quality reachability data. Easy to setup. Need to add a CLI command to CI/CD or GitHub Action to the repository.

Customize parts of the comment sent to developers in GitHub pull requests

See how your security changes over time with 30 days of historical insights. Track alert trends, monitor dependency changes, and export data via API for custom dashboards.

Analyzes IDE extensions for security risks — supports OpenVSX and VS Code. Coming soon.

Surfaces security issues directly in IDEs to help developers fix faster while coding. VS Code extension includes a bundled MCP server by default.

Surfaces issues and fixes in the IDE, helping developers catch and resolve problems as they code.

Socket scans for vulnerabilities in your dependencies, including CVEs, security advisories, and more.

Socket supports JavaScript, TypeScript, Python, Go, Java, Ruby, .NET, Scala, Kotlin, Rust, and more — with continuous expansion to cover the most popular ecosystems.

Automatically enforce license policies across all repositories, blocking non-compliant dependencies and ensuring your entire organization stays compliant.

Local AI connector that exposes dependency scoring and security context to your tools via a standardized protocol.

Define and enforce custom license policies using repo labels — based on factors like team, criticality, environment, or any criteria you choose.

Define and enforce custom security policies using repo labels — based on factors like team, criticality, environment, or any criteria you choose.

Ranks issues by exploitability, reachability, fixability, and custom priorities set via repo labels.

Faster replies to support questions via email and Slack.

Get dedicated support from technical experts and engineers in a private Slack channel.

Use Socket Web Extension to educate developers at the earliest possible point in time about package risks before they install them on their local development systems. Supports Chrome, Edge, and Firefox.

Analyze the reachability of vulnerabilities in your dependencies.

Import or export Software Bills of Materials (SBOMs) to track and audit dependencies.

Automate user provisioning and deprovisioning with SCIM. Coming soon.

Use Socket with a self-hosted source code management (GitHub Enterprise Server, GitLab Enterprise, Bitbucket Server, and Azure DevOps Server..

Inegrate with Elastic, Google BigQuery, Panther, and Splunk.

Socket is SOC2 Type II compliant and undergoes annual audits.

The Socket CLI allows teams to prevent risky dependencies from being installed, and to get dependency insights from the command line.

@neofinancial/chrono - npm Package Maintainers