Socket Alerts Types Support

Filter Ecosystems:

npmPyPiGo PackagesMaven CentralRubyGemsNuGetCratesHugging FaceGithub ActionsOpenVSXChromeSwiftConan CenterJuliaPubHexCocoaPods

Vulnerability(4 alerts)

Alert Type	Severity	npm4 supported	PyPi4 supported	Go Packages4 supported	Maven Central4 supported	RubyGems4 supported	NuGet4 supported	Crates4 supported	Hugging Face4 supported	Github Actions0 supported	OpenVSX0 supported	Chrome0 supported	Swift4 supported	Conan Center4 supported	Julia4 supported	Pub4 supported	Hex4 supported	CocoaPods4 supported
Critical CVE	Critical	✅	✅	✅	✅	✅	✅	✅	✅	⏳	❌	❌	✅	✅	✅	✅	✅	✅
High CVE	High	✅	✅	✅	✅	✅	✅	✅	✅	⏳	❌	❌	✅	✅	✅	✅	✅	✅
Medium CVE	Medium	✅	✅	✅	✅	✅	✅	✅	✅	⏳	❌	❌	✅	✅	✅	✅	✅	✅
Low CVE	Low	✅	✅	✅	✅	✅	✅	✅	✅	⏳	❌	❌	✅	✅	✅	✅	✅	✅

Supply Chain Risk(31 alerts)

Alert Type	Severity	npm31 supported	PyPi18 supported	Go Packages15 supported	Maven Central16 supported	RubyGems15 supported	NuGet15 supported	Crates15 supported	Hugging Face14 supported	Github Actions18 supported	OpenVSX16 supported	Chrome5 supported	Swift0 supported	Conan Center0 supported	Julia0 supported	Pub0 supported	Hex0 supported	CocoaPods0 supported
Known Malware	Critical	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
Possible typosquat attack	Critical	✅	✅	⏳	✅	⏳	✅	✅	✅	✅	⏳	❌	❌	❌	❌	❌	❌	❌
Suspicious Stars on GitHub	High	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
AI-detected potential malware	High	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌
Git dependency	High	✅	❌	❌	❌	❌	❌	❌	❌	❌	⏳	❌	❌	❌	❌	❌	❌	❌
GitHub dependency	High	✅	❌	❌	❌	❌	❌	❌	❌	❌	⏳	❌	❌	❌	❌	❌	❌	❌
HTTP dependency	High	✅	❌	❌	❌	❌	❌	❌	❌	❌	⏳	❌	❌	❌	❌	❌	❌	❌
Obfuscated code	High	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌
Protestware/unwanted behavior	High	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌
Telemetry	High	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌
Unstable ownership	High	✅	❌	❌	❌	❌	❌	❌	❌	⏳	⏳	❌	❌	❌	❌	❌	❌	❌
AI-detected possible typosquat	Medium	✅	✅	✅	✅	✅	✅	✅	✅	⏳	⏳	❌	❌	❌	❌	❌	❌	❌
AI-detected potential security risk	Medium	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌
Native code	Medium	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
Network access	Medium	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
Non-existent author	Medium	✅	❌	❌	❌	❌	❌	❌	❌	⏳	❌	❌	❌	❌	❌	❌	❌	❌
Potential vulnerability	Medium	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌
Shell access	Medium	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
Trivial Package	Medium	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌
Uses eval	Medium	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
AI-detected potential code anomaly	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌
Environment variable access	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
Filesystem access	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌
High entropy strings	Low	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌
New author	Low	✅	❌	❌	❌	❌	❌	❌	❌	❌	⏳	❌	❌	❌	❌	❌	❌	❌
URL strings	Low	✅	✅	✅	✅	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌
NPM Shrinkwrap	High	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Install scripts	Medium	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Manifest confusion	Medium	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Debug access	Low	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Dynamic require	Low	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌

Quality(4 alerts)

Alert Type	Severity	npm4 supported	PyPi1 supported	Go Packages0 supported	Maven Central0 supported	RubyGems1 supported	NuGet1 supported	Crates1 supported	Hugging Face1 supported	Github Actions1 supported	OpenVSX0 supported	Chrome0 supported	Swift0 supported	Conan Center0 supported	Julia0 supported	Pub0 supported	Hex0 supported	CocoaPods0 supported
Unpopular package	Medium	✅	✅	⏳	❌	✅	✅	✅	✅	❌	⏳	❌	❌	❌	❌	❌	❌	❌
Minified code	Low	✅	❌	❌	❌	❌	❌	❌	❌	✅	⏳	❌	❌	❌	❌	❌	❌	❌
Bad dependency semver	Medium	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Wildcard dependency	Medium	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌

Maintenance(2 alerts)

Alert Type	Severity	npm2 supported	PyPi2 supported	Go Packages1 supported	Maven Central1 supported	RubyGems1 supported	NuGet0 supported	Crates0 supported	Hugging Face0 supported	Github Actions0 supported	OpenVSX1 supported	Chrome0 supported	Swift0 supported	Conan Center0 supported	Julia0 supported	Pub0 supported	Hex0 supported	CocoaPods0 supported
Deprecated	Medium	✅	✅	✅	❌	❌	❌	❌	❌	⏳	✅	❌	❌	❌	❌	❌	❌	❌
Unmaintained	Low	✅	✅	⏳	✅	✅	❌	❌	❌	⏳	⏳	❌	❌	❌	❌	❌	❌	❌

License(9 alerts)

Alert Type	Severity	npm9 supported	PyPi9 supported	Go Packages9 supported	Maven Central9 supported	RubyGems9 supported	NuGet9 supported	Crates9 supported	Hugging Face9 supported	Github Actions9 supported	OpenVSX0 supported	Chrome0 supported	Swift0 supported	Conan Center0 supported	Julia0 supported	Pub0 supported	Hex0 supported	CocoaPods0 supported
Explicitly Unlicensed Item	High	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
License Policy Violation	High	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
Misc. License Issues	Medium	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
Ambiguous License Classifier	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
Copyleft License	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
License exception	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
No License Found	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
Non-permissive License	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
Unidentified License	Low	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌