
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
config-weather-mcp
Advanced tools
Measure local configuration complexity and environment contract pressure without returning values, keys, paths, or source.
Config Weather reports whether a project feels clear, cloudy, or stormy based on configuration file count, environment reference pressure, duplicate key signals, and format spread.
npm install
npm test
npm start
Use inspect_config_weather with a local project path.
The scanner reads bounded configuration and source-like files but returns only counts and broad categories. Values, secrets, paths, source text, and configuration key names are suppressed. This is a complexity signal, not a configuration validator.
FAQs
Measure local configuration complexity and environment contract pressure without returning values, keys, paths, or source.
We found that config-weather-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.