
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
csoai
Advanced tools
Council of AI — signed, deterministic AI-governance measurement: CLI + MCP server + agent-callable verifier
mcp-name: io.github.CSOAI-ORG/gspc
Council of AI — signed, deterministic AI-governance measurement.
The boring CLI is the primary agent rail; the MCP server wraps it; both emit the same signed atom. Public artifacts only (hiQ/Van Buren footing); measurement, not certification.
pip install csoai
csoai check --entity gpt2 --pack art50 --json # measure a public artifact -> signed card
csoai verify --record card.json # verify a signed record offline
pip install "csoai[mcp]" && python -m csoai.mcp_server # agent-callable MCP tools
CI gate: csoai check exits 3 on a missing transparency predicate — fail the build on it.
mcp-name: io.github.CSOAI-ORG/csoai
FAQs
Council of AI — signed, deterministic AI-governance measurement: CLI + MCP server + agent-callable verifier
The pypi package csoai receives a total of 607 weekly downloads. As such, csoai popularity was classified as not popular.
We found that csoai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.