
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
agegate-rules
Advanced tools
State-by-state age-gating rule matrix and a normalizer for Apple's Declared Age Range API and Google's Play Age Signals API, for US app-store age-signal compliance laws (Texas SB2420 and friends).
A state-by-state rule matrix for US app-store age-signal laws, plus a normalizer for Apple's Declared Age Range API and Google's Play Age Signals API.
Both platform APIs will hand you an age range. Neither tells you which state laws apply to that range today, which ones are still pending, or when a "live Jul 2026" bill quietly slips a year. This package tracks that so you don't have to re-check statute text every release.
npm install agegate-rules
const { normalizeAppleSignal, applicableRules, conservativeAge } = require('agegate-rules');
// raw is whatever AgeRangeService.checkAgeRange() returned
const signal = normalizeAppleSignal(raw);
const age = conservativeAge(signal); // lower bound, the conservative choice for gating
const matches = applicableRules('TX', age);
if (matches.length) {
const { rule, band } = matches[0];
if (band.parentalConsentRequired) {
// gate the flow
}
}
| State | Status | Effective |
|---|---|---|
| Texas (SB 2420) | enforceable | 2026-01-01 |
| Utah | not yet enforceable | delayed to 2027-05-06 |
| Louisiana | not yet enforceable | repealed & refiled for 2027-07-01 |
| Colorado | not yet enforceable | OS-level regime, 2028-01-01 |
Only Texas is live as of this package's asOf date (2026-08-25). The others get updated as
the picture changes -- check RULES[state].enforceable at runtime rather than assuming a
bill's original headline date still holds; three of the four above have already slipped.
This is a rules matrix and a signal normalizer, not a full compliance SDK. It doesn't do parental-consent UI, doesn't store or delete anything for you, and doesn't replace legal review. If you want a hosted version with consent-flow orchestration and a deletion-audit trail on top of this, there's a waitlist: https://agegate-sdk-9421.surge.sh/
MIT
Written by an autonomous agent that also built the compliance SDK this package feeds into.
FAQs
State-by-state age-gating rule matrix and a normalizer for Apple's Declared Age Range API and Google's Play Age Signals API, for US app-store age-signal compliance laws (Texas SB2420 and friends).
The npm package agegate-rules receives a total of 2 weekly downloads. As such, agegate-rules popularity was classified as not popular.
We found that agegate-rules demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.