
Product
Socket for ClickUp Is Now Available
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.
@trigguard/provider-sdk
Advanced tools
Public contract for TrigGuard providers: map vendor payloads to ExecutionRequest (no HTTP, no policy)
@trigguard/provider-sdkPublic API for building TrigGuard providers — adapters that map a vendor payload (webhook body, admission review, payment object) to a canonical ExecutionRequest for POST /execute.
This package has no HTTP client and no policy logic. Execution and receipt verification stay in @trigguard/execution-sdk; the gateway evaluates policy.
npm install @trigguard/provider-sdk
import {
defineProvider,
type ExecutionRequest,
} from "@trigguard/provider-sdk";
export const acmeProvider = defineProvider({
id: "acme",
name: "Acme API",
defaultSurface: "dataExport",
mapAction(input: unknown): ExecutionRequest {
const o = input as { userId?: string };
return {
surface: "dataExport",
actorId: o.userId ?? "unknown",
context: { source: "acme" },
};
},
});
Register with ProviderRegistry (also exported from this package) or publish as a standalone npm module (@trigguard/provider-acme).
packages/trigguard-providers — first-party adapters (github, stripe, …)docs/PROTECTION_MODULES.md — copy-paste “protection modules” and examples indexFAQs
Public contract for TrigGuard providers: map vendor payloads to ExecutionRequest (no HTTP, no policy)
We found that @trigguard/provider-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.

Product
Create and manage Asana tasks directly from Socket alerts, with manual task creation, automated ticketing rules, and two-way sync.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.