
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
A lightweight CLI tool to analyze package freshness in your Node.js or Web projects. Roest - meaning "Rust" in Dutch - helps you identify outdated packages by checking when they were last updated, making it easier to keep your dependencies current and secure.
Navigate to your project directory and run:
npx roest check
This will analyze your package-lock.json file and display package update information.
-f, --file <path>: Path to your package-lock.json file (default: ./package-lock.json)-o, --output <path>: Output file path for JSON results (default: ./output.json)The tool also generates a detailed JSON file containing:
[
{
"name": "chalk",
"current": {
"version": "5.6.2",
"publishDate": "2024-01-15T10:30:00.000Z"
},
"next": {
"version": "5.6.3",
"publishDate": "2024-03-01T14:20:00.000Z"
}
}
]
Make sure you have Bun installed on your system.
bun install
MIT License - see LICENSE file for details.
FAQs
Unknown package
The npm package roest receives a total of 7 weekly downloads. As such, roest popularity was classified as not popular.
We found that roest demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.