Socket
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
Why people recommend it
“I like the approach Socket is taking”
“The only ones actually re-identifying the malware implants as miasma malware samples correctly were the socket.dev folks.”
Show 2 more
“seem to be able to track this malware implant's changes were socket.dev”
“Not aware of any NPM native ways but here are few community tools:”
Caveats and dissent
“Even our socket.dev scans returned nothing related to vulnerability”
Often compared with
From the makers not counted in the ranking
“based on our research, it’s not possible.”
“Our product is trusted by 10,000+ organizations”
“Docker Hardened Images integrate Socket Firewall, which provides protection from threats like Shai-Hulud during build steps.”
Threads where it came up
- Package Managers need global hooks 2 mentions
- A Safer Container Ecosystem with Docker: Free Docker Hardened Images 2 mentions
- Critical Next.js RCE Still Missing from GitHub Advisory Database and OSV 1 mention
- I got into YC by hacking it 1 mention
- Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Packages 1 mention
- item 47450142 1 mention
Also written as Socket Firewall, Socket.dev. Data: socket.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 6
“Even our socket.dev scans returned nothing related to vulnerability”
“I like the approach Socket is taking”
“The only ones actually re-identifying the malware implants as miasma malware samples correctly were the socket.dev folks.”
“seem to be able to track this malware implant's changes were socket.dev”
“One of the Docker employees mentioned one relevant feature”
“Not aware of any NPM native ways but here are few community tools:”