
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@workflow/errors
Advanced tools
Centralized errors package for Workflow SDK.
Use captureInvocationOutcome and unwrapInvocationOutcome from
@workflow/errors/invocation to transport a handler's return value or error. Both
use the InvocationOutcome type from @workflow/world.
Error outcomes preserve known Workflow error classes, messages, stacks, causes,
and diagnostic fields. Unrecognized classes become Error instances with their
original names and fields. The module also exports serializeWorkflowError and
deserializeWorkflowError for converting individual errors.
Diagnostic serialization omits object accessors and bounds circular or deeply
nested values. The transport must preserve Uint8Array and Date values in
diagnostic fields.
Wrap the handler call with captureInvocationOutcome, then store or deliver the
outcome separately. Storage and transport failures leave the caller uncertain
whether processing succeeded. By default, the helper captures every thrown error.
Pass isTerminalInvocationError as its second argument to rethrow transient or
unrecognized failures for the delivery layer to retry. The Postgres World uses
this retry policy.
FAQs
A package for standardizing errors in Workflow SDK
The npm package @workflow/errors receives a total of 1,272,551 weekly downloads. As such, @workflow/errors popularity was classified as popular.
We found that @workflow/errors demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.