
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@peac/capture-core
Advanced tools
Runtime-neutral capture pipeline for PEAC interaction evidence. No filesystem dependencies.
pnpm add @peac/capture-core
@peac/capture-core provides a deterministic, tamper-evident capture pipeline for recording agent interactions as signed evidence. It is runtime-agnostic (no Node.js or filesystem dependencies) and runs in any JavaScript environment with WebCrypto support. Captured actions are chained via SHA-256 digests for integrity verification.
import { createCaptureSession, createHasher } from '@peac/capture-core';
import { createInMemorySpoolStore, createInMemoryDedupeIndex } from '@peac/capture-core/testkit';
const session = createCaptureSession({
store: createInMemorySpoolStore(),
dedupe: createInMemoryDedupeIndex(),
hasher: createHasher(),
});
const result = await session.capture({
id: 'action-001',
kind: 'tool.call',
platform: 'my-agent',
started_at: new Date().toISOString(),
tool_name: 'web_search',
});
if (result.success) {
console.log('Captured:', result.entry.entry_digest);
}
await session.close();
import { toInteractionEvidence, toInteractionEvidenceBatch } from '@peac/capture-core';
const evidence = toInteractionEvidence(spoolEntry);
const batch = toInteractionEvidenceBatch(spoolEntries);
import { GENESIS_DIGEST, SIZE_CONSTANTS } from '@peac/capture-core';
console.log(GENESIS_DIGEST); // 64 zero characters (chain start sentinel)
console.log(SIZE_CONSTANTS.TRUNC_1M); // 1048576 (truncation threshold)
@peac/capture-node: Filesystem-backed SpoolStore and DedupeIndex for Node.js@peac/schema (Layer 1): Interaction evidence schemas@peac/crypto (Layer 2): Deterministic hashing and canonicalizationIf you are building an AI agent or MCP server that needs evidence receipts:
@peac/mcp-server for a ready-to-use MCP tool server@peac/protocol for programmatic receipt issuance and verificationApache-2.0
PEAC Protocol is an open source project stewarded by Originary and community contributors.
FAQs
Runtime-neutral capture pipeline for PEAC interaction evidence
The npm package @peac/capture-core receives a total of 80 weekly downloads. As such, @peac/capture-core popularity was classified as not popular.
We found that @peac/capture-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.