
Product
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
A safer, faster way to eliminate vulnerabilities without updating dependencies
@stitch-fix/sf-next
Advanced tools
Developer toolkit for building Next UI apps.
sf-browser-testingsf-nextNext UI apps are set up with:
<GraphQLApiProvider> wrapping the app<ErrorBoundary>If you still have questions after reading the guides, feel free to reach out in slack at #next-ui.
For off-hours support, see our PagerDuty. Please use this only for urgent issues (i.e. a service outage related to the sf-next platform).
You can analyze bundle sizes using webpack bundle analyzer by setting the BUNDLE_ANALYZE environment variable to true. For example, running:
BUNDLE_ANALYZE=true npx sf-next dev
Set BUNDLE_ANALYZE to no-open to prevent it from automatically opening the analysis files in your browser. It will only write the files.
FAQs
Developer toolkit for building frontend-only apps at Stitch Fix.
We found that @stitch-fix/sf-next demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 168 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.