Communication bridge SDK for embedded apps in Salla Dashboard. 

@salla.sa/embedded-sdk

Communication bridge SDK for embedded apps in Salla Dashboard

s.alkhwlani

abdelrahman-salla

jalmatari

salla.dev

ali-subaie

kamalmirzayev

abady009

m.ayari

ajibadeabd

jamalla

owieselshaikh

maqalaqil

ibra-hassan

anass_at

salahmyn

anasred

adelgs

dev-tarek

shamoon1997

mohammed_ashraaf

hassankotti

mazizsalla

canarydev41

iabdallah

ahmed4324345

ali-mhd

ossycodes

egkrinkel

omersamli

mzfrshk

ghofranesalla

abdulrahman_salla

naderm91

abubakermoharram

ahmed-amlas

nullish-one

thaifani

dhafer

adel.elshafey

ytaha

malshoubaki

mohanad7afiz

rashaamer87

ahmed-alkatheri

hossamelsawy

dhassanali

khaled.almqayyad

a-athamneh-salla

oalachi

a.djedaini

zafari8

kulth00m

muhammed-sh

ahmed-elnaggar

aminealyate

ahmed3mmar

ashraf.reda

devlomingo

elzakzouk

ali.arsalan177

hamzasalla

mostafaezzeldin

jojomak13

dev_fouda

yalattas-salla

buhori

mohammad-altamimi

maher-salla

ilyasabdul94

iahmadzain

hanisaeed

hazemsalla

osameyy

abdulrhman_kassem

eslammoo

halsairi

wael_bettayeb

yasser.s

mostafanabawy

aboubakar.dev

m.alfaifi

mozedan-salla

mfkfawaz

alquhaitsalla

abbasshdev

alialjishi

ochanii-salla

ahmednabil

attia_salla

osama-k-salla-sa

m-shaeel

ibrahimkubaisy

halwany_salla

aladdin-salla

faisal-alhus

a.almomani

emanlowndi

nikhilpawar30

waleed.salla

hamedov93

embedded-sdk

Blocks malicious packages at install time across 10+ ecosystems — protecting developers before threats reach production. Works out of the box with unlimited packages, flexible deployments, and enterprise-ready self-hosting.

Firewall

Access certified security patches for vulnerable packages, enabling safe upgrades without breaking changes.

Socket Patches

Provides real-time access to curated vulnerability and malware threat data for use in your own tools and workflows.

Threat Feed

License

Maintenance

Miscellaneous

Other

Quality

Supply chain risk

Vulnerability

We may hide one of these components if their impact is neutral, e.g. unknown reachability. When alerts are associated with multiple artifacts, the priority score is based on the artifact with the highest priority score.

Legal

Operational

Security

View organization entitlements and feature access permissions.

Admins only

Organization members

Dashboard

Artifact: <code>{{- fullArtifactDisplayName}}</code>

Dependency chains

Grouping: Directs

Grouping: None

Dependency tree

Summary with created, updated, and cleared alerts

{{feature}} is not available on your current plan. Upgrade to {{tier}} to access this feature

Unlock powerful security features for your {{tier}}

Upgrade to {{tier}}

<upgradeLink>Upgrade</upgradeLink> to access this feature

Feature locked

Rate your experience

Archive file: {{fileName}}

Achievements

Why Socket?

Blog

Customer Stories

Languages

This will terminate all your active sessions on every device. You will need to sign in again on each device.

Sign out from all devices?

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Update available

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Work with a dedicated Customer Success Manager to help you get the most out of Socket.

Restrict logins to the organization to SSO, preventing other login methods (e.g. GitHub or email)

Have members who are not admins in the organization. Restrict access with Role-based Access Control (RBAC).

Integrates with top AI coding assistants — including Claude Code, Claude Desktop, Gemini Code, and other MCP-compatible agents — to provide real-time dependency insights, vulnerability context, and security scoring directly inside your AI-powered coding environment.

Get a clear view of your current supply chain health. Track active alerts, dependency risk, and security trends across your org—all in one place on the Socket Dashboard and via API.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Automatically generate fixes for vulnerable dependencies with safe, tested upgrades.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time. Block 70+ types of open source threats, including malware, typo-squatting, and backdoors.

Shift left by catching risky or low-quality dependencies before they're merged. Use CI gating, PR comments, and visual warnings to guide developers early and enforce security guardrails.

Removes known vulnerabilities instantly without upgrading dependencies. Delivers safe, human-reviewed, AI-validated patches that live in your repo, eliminate risky updates, and keep builds stable while reducing supply chain exposure.

Socket opens pull requests for each patch so developers can review and merge fixes with no extra work.

Receive updated patches as new CVEs and package releases appear, with no extra work.

Remove a vulnerability instantly by clicking “Patch” in the dashboard or CLI. This applies a secure, prebuilt patch to remove a vulnerability without changing dependency versions.

Focus on vulnerabilities your code can actually hit, then fix them instantly with patches.

Use patches vetted by experienced maintainers so you can remediate confidently. Patches ship with automated behavioral tests to ensure nothing breaks.

Integrate with Slack. Microsoft Teams is coming soon.

Integrate with Vanta. Drata is coming soon.

Export alert data to your own cloud storage (S3, GCS, Azure Blob).

Scans browser extensions for risk and malware — supports Chrome, Firefox, Edge, and Safari.

Analyzes IDE extensions for security risks — supports OpenVSX and VS Code.

Stops known malware and risky dependencies before they’re downloaded — protecting developer machines and CI/CD pipelines in real time.

Monitor blocked installs, package risks, and usage across all teams directly in your Socket dashboard or via the Socket API.

Configure Socket Firewall to run with private registries or as a chained HTTP proxy for full control of dependency ingress.

Customize whether to block, warn, or allow packages based on your security and license policies.

Works with JavaScript/TypeScript (npm, Yarn, pnpm), Python (pip, uv), and Rust (cargo).

Deploy Socket Firewall in your own infrastructure, with flexible modes for wrapper-only or full network proxy operation.

Customize parts of the comment sent to developers in GitHub pull requests

See how your security changes over time with 30 days of historical insights. Track alert trends, monitor dependency changes, and export data via API for custom dashboards.

Surfaces security issues directly in IDEs to help developers fix faster while coding. VS Code extension includes a bundled MCP server by default.

Surfaces issues and fixes in the IDE, helping developers catch and resolve problems as they code.

Socket scans for vulnerabilities in your dependencies, including CVEs, security advisories, and more.

Socket supports JavaScript, TypeScript, Python, Go, Java, Ruby, .NET, Scala, Kotlin, Rust, and more — with continuous expansion to cover the most popular ecosystems.

Automatically enforce license policies across all repositories, blocking non-compliant dependencies and ensuring your entire organization stays compliant.

Local AI connector that exposes dependency scoring and security context to your tools via a standardized protocol.

@salla.sa/embedded-sdk - npm Package Dependencies