Socket

Use Socket to verify package safety before installing and to scan projects for supply chain risks.

MCP tool (alternative)

The socket-mcp server is also available. Use its depscore tool for quick lookups when you only need the score without CLI output formatting.

Check a package before installing

socket npm/<package-name> --markdown

• Always check BEFORE pnpm add.
• Supports: npm, pypi, nuget, gem, golang, maven.
• Pin a version: socket npm/<package>@<version> --markdown
• Use --json for raw data, --markdown for formatted output.