
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
phab-lookup-cli
Advanced tools
A convenience CLI for phabricator
yarn global add phab-lookup-cli
# or npm
npm i -g phab-lookup-cli
This expects an ~/.arcrc to exist with authentication info (if you use phab, you might already have one). e.g.
{
"hosts": {
"https://phab-url.com/api/": {
"token": "..."
}
}
}
NOTE: when providing a repo name, you can provide either the full name (e.g. scope/repo-name) or short name (e.g. repo-name). It'll try to pick the best match based on the search results, but you may need to specify the full name in some cases
Clone repo (shorthand: phab c)
phab clone repo-name
# git clones `scope/repo-name`
phab clone repo-name -b some-branch
# passes extra args directly into `git clone`
phab clone asdf
#> Repo not found: asdf
Open repo in browser (shorthand: phab o)
phab open scope/repo-name
# opens repo in browser
phab open repo-name
# opens repo in browser
phab open asdf
#> Repo not found: asdf
Print diffusion url for repo (shorthand: phab r)
phab repo repo-name
#> https://phab-url.com/diffusion/WECREHQ
phab repo asdf
#> Repo not found: asdf
FAQs
A convenience CLI for phabricator
We found that phab-lookup-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.