nowfound

Dev tools · June 21, 2022

Socket for GitHub 1.0

Secure your JavaScript supply chain – block malware packages

Socket for GitHub 1.0 launched on June 21, 2022 with 91 votes, #367 of 3,005 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 4 years on.

What it does

Detect and block software supply chain attacks Unlike a traditional vulnerability scanner, Socket can actually detect an active supply chain attack and help you to block it. Socket detects over 60 issues in open source code, for comprehensive protection.

Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.

Does a similar job

all alternatives →
  • Socket – Secure your JavaScript supply chain2022 · socket.dev · ▲133

    Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…

  • Socket2022 · socket.dev · ▲211

    Secure your JavaScript supply chain

  • Socket for Python2023 · socket.dev · ▲84

    Keep your Python code secure and compliant with Socket

  • Socket web extension – free NPM supply chain protection2023 · chrome.google.com · ▲10

    Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. Chrome extension: https://chrome.google.com/webstore/detail/socket-security/jb... Firefox add-on: https://addons.mozilla.org/en-US/firefox/addon/socket-securi... Socket scans NPM packages for malware, vulnerabilities, code smell, and…

  • Tips to stay safe from NPM supply chain attacks2025 · github.com · ▲96

    Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

  • BITE: Supply Chain Security2023 · bitedata.io · ▲33

    Protect your business, mitigate risk, stay competitive

More dev tools this month

the category →
  • /dev/null▲472

    a social network for devs

    Dev tools · 2d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 27d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 25d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 22d ago · openbot.run

  • Talanoa▲340

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 20d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 27d ago · corespeed.io

Source: Product Hunt launch ↗

Launched alongside, June 2022

the whole month →
  • AF

    I've seen some interests in (simulation) video games here on HN so I thought I'd share a short version of our story. More than 6 years ago, me and my friend from university were playing around with an idea of making a game we always wanted to play. We worked on it on weekends but the progress was quite slow, especially due to so many dead ends and wasted effort. Eventually however, we solidified our direction and decided to take the risk to resign from our well paid SWE jobs and work on it full time. It took more than a year but yesterday we have finally released it on Steam:…

    Life & fun · 2022

  • Life & fun · 2022 · benoitessiambre.com

  • min(DALL·E) is a fast, minimal port of DALL·E Mini to PyTorch - kuprel/min-dalle

    Life & fun · 2022 · github.com

  • 1,100+ free Figma icons for modern UI design.

    Dev tools · 2022 · untitledui.com

  • MakerBox▲621

    600 tools with generous free plans for indie entrepreneurs

    Dev tools · 2022 · makerbox.club

  • Display your Notion data beautifully on your site, no-code

    Dev tools · 2022 · typedream.com