
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
agent-regress-npm-cli
Advanced tools
Statistical regression testing for LLM agents from the command line. Thin Node wrapper around the agent-regress-cli Python package (agent-regress command) -- compare two agent versions and get a p-value, Cohen's d, and a bootstrap CI on whether behavior a
Statistical regression testing for LLM agents, from the command line or npx.
This is a thin Node.js wrapper around the agent-regress-cli Python package (its console command is agent-regress; the PyPI distribution is named agent-regress-cli since agent-regress was blocked as too similar to an unrelated existing project) -- the actual statistics (Mann-Whitney U, bootstrap confidence interval, Cohen's d) run in Python, so you need Python installed too:
pip install agent-regress-cli
(uv tool install agent-regress-cli or pipx install agent-regress-cli also work, and this wrapper will fall back to uvx/pipx automatically if the agent-regress command isn't on your PATH.)
npm install -g agent-regress-npm-cli
Or run it without installing:
npx agent-regress-npm-cli --help
npx agent-regress-npm-cli compare \
--version-a-results version_a_scores.json \
--version-b-results version_b_scores.json \
--metric task_success_rate \
--json
Each --version-*-results file is a JSON array of per-run scores, e.g. [0.82, 0.79, 0.91]. --json prints a single machine-readable JSON object to stdout (verdict, p-value, Cohen's d, confidence interval) -- built for agents and CI scripts to parse.
Full documentation, the Python API, and the statistics methodology live in the main repo:
FAQs
Statistical regression testing for LLM agents from the command line. Thin Node wrapper around the agent-regress-cli Python package (agent-regress command) -- compare two agent versions and get a p-value, Cohen's d, and a bootstrap CI on whether behavior a
We found that agent-regress-npm-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.