@sigmacomputing/plugin

maxseiden

adityasigmacomputing

alexisjohnson

anandnarayanan

benjixd

czhang_sigmacomputing

dbronnik

donhcd

dyoung_ncc

eranatsigma

ericbannatyne-sigma

greg-at-sigma

jfranty

jmhain

ktruong

madisonchamberlain

messerc

mtoader

rjsigma

sinanunan

wtgjxj

yifeng-sigma

kevinpham

munteanuic

phillipwhite99

pearce-sigma

yi-sigma

peternandersson

ryankwong

hiranmaya

daisywang

cgreybosh

slequar

christophermouri

aarshinova

sharviln

yuchristina

ezimanyi-sigma

jhu_sigma

mansa_pabbaraju

moonero

nicholaschandler

jaredspickard

hannahsigma

brett_b_at_sigma

tedbrakob

mdevsigma

borissigma

diego-sigma

aaron-sigma

reitmr

haoxu-sigma

wessigma

ayman-sigma

rounaksalim95

samirapatel

tifn

liz425

miguelsigma

mjones-sigma

chukamattah

justineyuan

purvilmehta

montefern

angelafan

gsharoya

nathansigma

dmadelyn

matei_the_sigmanaut

obashaw

tinocaersigma

maximus-sigma

aileensigma

fanfan-sigma

gary-sigma

jcheung-sigma

asadakram

rohan322

curtiscastro

matt-bierman-sigma

olcawthorne

smoir

jscherererer

ding-harrison

abeljohnsigma

alison.lai

jonathan-cook-sigma

sahilsalim99

asingh888

jonathanzhang53

jsmn-hou

eeshakurode

voidd7

acholmes

morriswan

pat-haimbaugh

pballai

azule-lux

linusmt

robinpille

duci9y

jlgale

rudysigma

rwoollen

sigmaci

turese

sam_sigma

terence.wils

ankita.shankar

cynthiashen

vikas-rp

muralisigma

alexbiba

mwong-sigma

yusufsigma

vjeyaram

charlesnelson-sigma

wenxuan5

zyzhu525

rajsigma

rgdutta

robarnold

ardaakmann

sivadheeraj2

albert-sigma

jadefleishhacker

plugin

Inherit

Block

Ignore

Monitor

Warn

License

Maintenance

Miscellaneous

Other

Quality

Supply chain risk

Vulnerability

When alerts are associated with multiple artifacts, the priority score is based on the artifact with the highest priority score.

Legal

Operational

Security

Admins only

Organization members

Dashboard

Grouping: Directs

Grouping: None

Artifact: <code>{{- fullArtifactDisplayName}}</code>

Dependency tree

Summary with created, updated, and cleared alerts

{{feature}} is not available on your current plan. Upgrade to {{tier}} to access this feature

Unlock powerful security features for your {{tier}}

Upgrade to {{tier}}

<upgradeLink>Upgrade</upgradeLink> to access this feature

Upgrade to access this feature

Rate your experience

Archive file: {{fileName}}

Achievements

Why Socket?

Blog

Customer Stories

Languages

Impersonation Mode Active

Update your browser to the latest version for the best experience.

Your web browser is outdated

Use another browser for the best experience.

Your web browser is unsupported

{{count, number}} commits last two months

{{count, number}} critical severity alert

{{count, number}} critical severity alerts

{{count, number}} dependency vulnerability

{{count, number}} dependency vulnerabilities

{{count, number}} development dependencies

{{count, number}} transitive dependencies

{{count, number}} version published last month

{{count, number}} versions published last month

{{count, number}} version published in last two months

{{count, number}} versions published in last two months

{{count, number}} version published last week

{{count, number}} versions published last week

{{count, number}} version published last year

{{count, number}} versions published last year

Socket undergoes annual SOC2 Type II audits. Socket customers can request a copy of the full SOC2 Type II report.

Work with a dedicated Customer Success Manager to help you get the most out of Socket.

Restrict logins to the organization to SSO, preventing other login methods (e.g. GitHub or email)

Have members who are not admins in the organization. Restrict access with Role-based Access Control (RBAC).

Integrates with top AI coding assistants — including Claude Code, Claude Desktop, Gemini Code, and other MCP-compatible agents — to provide real-time dependency insights, vulnerability context, and security scoring directly inside your AI-powered coding environment.

Get a clear view of your current supply chain health. Track active alerts, dependency risk, and security trends across your org—all in one place on the Socket Dashboard and via API.

Allows organization owners and admins to access detailed records of actions taken by members of their organization, complete with timestamps.

Automatically generate fixes for vulnerable dependencies with safe, tested upgrades.

Prevent compromised packages from infiltrating your supply chain by monitoring for changes in real-time. Block 70+ types of open source threats, including malware, typo-squatting, and backdoors.

Shift left by catching risky or low-quality dependencies before they're merged. Use CI gating, PR comments, and visual warnings to guide developers early and enforce security guardrails.

Integrate with Slack. Microsoft Teams is coming soon.

Integrate with Vanta. Drata is coming soon.

Scans browser extensions for risk and malware — supports Chrome, Firefox, Edge, and Safari.

Analyzes IDE extensions for security risks — supports OpenVSX and VS Code.

Stops known malware and risky dependencies before they’re downloaded — protecting developer machines and CI/CD pipelines in real time.

Monitor blocked installs, package risks, and usage across all teams directly in your Socket dashboard or via the Socket API.

Configure Socket Firewall to run with private registries or as a chained HTTP proxy for full control of dependency ingress.

@sigmacomputing/plugin - npm Package Maintainers