A lightweight state management library for React and React Native. 

@shipt/osmosis

A lightweight state management library for React and React Native

dericcain

mobile-devs

hjboylan

adere1

alan.kenyon

cfilby

chaceburnette

coreybrandon

danigalvez

daw13

elenasparacio

gmpowell

jaldredge

jchang2014

jonealshipt

joshuakg

jscodeshipt

jurchfield

monicaparrillo

parkerroan

robby.white

shipt-ci

shipt-npm-ci-user

smwest87

tcore

wshirey_shipt

duncsully

gabrielgironda

jessicalynnkim

zachbullock

vnguyenshipt

cdfunderburk

srease

ishaanpota

austin.metzkes

jisdell

jkhusanov

cam-shipt

jonathan.che

gabriel-shipt

dennis.hutchinson

magacula

jdmadison

gregorysantini

rkyle35242

fromeror

hunter.wesson

brianmrc

daniellevert

mpshipt

owen.roberts

marcedev

dtgreene

richardgrehan

ayush.gupta-shipt

seifeddine-shipt

alvaropacoshipt

svc_artifactory_npm

justincubero

ryanshipt

jimmyatshipt

jonpelc

mallory.merkel

dleviminzi

thejoshj

wpjw

chare.hare

gilmored

treyd-shipt

dinesh1121

bccordeiro

amystanley

estavillo-shipt

dtidwell

jhbforlife

tombshipt

johnroesler

eroubalshipt

dspivey-shipt

josephruizshipt

harrisonshipt

kennedypalmer

neema.shakya

eric-schmidt-shipt

andrewpetrovics

anerishah3110

benniven

cstipes

derrick-lewis

dgshipt

dlennardshipt

eric.dowell.shipt

hankandre-shipt

hazalozcan

jaredbenskins

jflayhart

jhuggart-shipt

joshualondon

kartik-shipt

kartikk

kattikartikreddy7

kobbya

marquessv

mgalindob

rosswaycaster

sammahr

sethbattin

shipt-randall

bdaniel710

ians-shipt

johnrowe

orlando.felix

jamessayer

hwu-shipt

charlespark4395

shyam-shipt

dennisliu

fatemab

fathimamusthafa

abo-sh

regancloper

thomas.mahle

samin25

sari-shipt

aaron.mcmahan

jholland

osmosis

Inherit

Block

Ignore

Monitor

Warn

License

Maintenance

Miscellaneous

Other

Quality

Supply chain risk

Vulnerability

We may hide one of these components if their impact is neutral, e.g. unknown reachability. When alerts are associated with multiple artifacts, the priority score is based on the artifact with the highest priority score.

Legal

Operational

Security

Admins only

Organization members

Dashboard

Grouping: Directs

Grouping: None

Artifact: <code>{{- fullArtifactDisplayName}}</code>

Dependency tree

Summary with created, updated, and cleared alerts

{{feature}} is not available on your current plan. Upgrade to {{tier}} to access this feature

Unlock powerful security features for your {{tier}}

Upgrade to {{tier}}

<upgradeLink>Upgrade</upgradeLink> to access this feature

Upgrade to access this feature

Rate your experience

Archive file: {{fileName}}

Achievements

Why Socket?

Blog

Customer Stories

Languages

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Work with a dedicated Customer Success Manager to help you get the most out of Socket.

Restrict logins to the organization to SSO, preventing other login methods (e.g. GitHub or email)

Have members who are not admins in the organization. Restrict access with Role-based Access Control (RBAC).

Integrates with top AI coding assistants — including Claude Code, Claude Desktop, Gemini Code, and other MCP-compatible agents — to provide real-time dependency insights, vulnerability context, and security scoring directly inside your AI-powered coding environment.

Get a clear view of your current supply chain health. Track active alerts, dependency risk, and security trends across your org—all in one place on the Socket Dashboard and via API.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Automatically generate fixes for vulnerable dependencies with safe, tested upgrades.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time. Block 70+ types of open source threats, including malware, typo-squatting, and backdoors.

Shift left by catching risky or low-quality dependencies before they're merged. Use CI gating, PR comments, and visual warnings to guide developers early and enforce security guardrails.

Removes known vulnerabilities instantly without upgrading dependencies. Delivers safe, human-reviewed, AI-validated patches that live in your repo, eliminate risky updates, and keep builds stable while reducing supply chain exposure.

Socket opens pull requests for each patch so developers can review and merge fixes with no extra work.

Receive updated patches as new CVEs and package releases appear, with no extra work.

Remove a vulnerability instantly by clicking “Patch” in the dashboard or CLI. This applies a secure, prebuilt patch to remove a vulnerability without changing dependency versions.

Focus on vulnerabilities your code can actually hit, then fix them instantly with patches.

@shipt/osmosis - npm Package Maintainers