
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@readystack/gitlab-ci-break-lint
Advanced tools
Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade

Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade
npx @readystack/gitlab-ci-break-lint file
Node 18+. The same 16 rules as the VS Code extension, from a terminal or CI.
--rules lists every rule@readystack/gitlab-ci-break-lint --dir ./templates --report html --out report.html
A freelance DevOps engineer's hour runs about $100, and reading a repository's pipelines by hand against a removals list is most of a morning.
Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
{ "mcpServers": { "gitlab-ci-break-lint": { "command": "npx", "args": ["-y", "@readystack/gitlab-ci-break-lint", "--mcp"] } } }
Tools: check_text and check_file (free) · check_dir (licence; the full sweep is free for 7 days). The agent gets every finding with the line number.
- name: GitLab CI Break Lint
run: npx -y @readystack/gitlab-ci-break-lint --dir . --ci
(container: docker run --rm -v "$PWD:/work" getreadystack/gitlab-ci-break-lint --dir /work --ci)
Try the full run free for 7 days — no key needed. Then one licence, 7-day refund, no questions. Set READYSTACK_LICENSE=<key> or run --license <key> once.
FAQs
Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade
The npm package @readystack/gitlab-ci-break-lint receives a total of 521 weekly downloads. As such, @readystack/gitlab-ci-break-lint popularity was classified as not popular.
We found that @readystack/gitlab-ci-break-lint demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.