René's URL Explorer Experiment

Title: Guide to Socket for GitHub

Open Graph Title: Guide to Socket for GitHub

X Title: Guide to Socket for GitHub

Description: Socket for GitHub helps developers protect their apps from software supply chain attacks by monitoring package manifest files for security risks and alerting developers to potential issues such as install scripts, telemetry, native code, known malware, troll packages, and typosquats.

Open Graph Description: Socket for GitHub helps developers protect their apps from software supply chain attacks by monitoring package manifest files for security risks and alerting developers to potential issues such as install scripts, telemetry, native code, known malware, troll packages, and typosquats.

X Description: Socket for GitHub helps developers protect their apps from software supply chain attacks by monitoring package manifest files for security risks and alerting developers to potential issues such as install scripts, telemetry, native code, known malware, troll packages, and typosquats.

direct link

Domain: docs.socket.dev

readme-deploy	5.575.0
readme-subdomain	socketdev
readme-repo	socketdev-b95694fd975b
readme-version	0
og:site_name	Socket
twitter:card	summary_large_image
og:image	https://cdn.readme.io/og-image/create?type=docs&title=Guide to Socket for GitHub&projectTitle=Socket&description=Socket for GitHub helps developers protect their apps from software supply chain attacks by monitoring package manifest files for security risks and alerting developers to potential issues such as install scripts, telemetry, native code, known malware, troll packages, and typosquats.&logoUrl=https://files.readme.io/346222b-small-logo-dark-280x80.png&color=#6b46c1&variant=light
twitter:image	https://cdn.readme.io/og-image/create?type=docs&title=Guide to Socket for GitHub&projectTitle=Socket&description=Socket for GitHub helps developers protect their apps from software supply chain attacks by monitoring package manifest files for security risks and alerting developers to potential issues such as install scripts, telemetry, native code, known malware, troll packages, and typosquats.&logoUrl=https://files.readme.io/346222b-small-logo-dark-280x80.png&color=#6b46c1&variant=light
og:image:width	1200
og:image:height	630
loadedProject	socketdev

Links:

Jump to Content	https://docs.socket.dev/docs/socket-for-github#content
	https://socket.dev
Documentation	https://docs.socket.dev/docs
API Reference	https://docs.socket.dev/reference
Log In	https://docs.socket.dev/login?redirect_uri=/docs/socket-for-github
	https://socket.dev
Log In	https://docs.socket.dev/login?redirect_uri=/docs/socket-for-github
Documentation	https://docs.socket.dev/docs
API Reference	https://docs.socket.dev/reference
Getting started	https://docs.socket.dev/docs/getting-started
FAQ	https://docs.socket.dev/docs/faq
Reachability Analysis	https://docs.socket.dev/docs/reachability-analysis
Dependency Reachability	https://docs.socket.dev/docs/dependency-reachability
Precomputed Reachability	https://docs.socket.dev/docs/precomputed-reachability
Full Application Reachability	https://docs.socket.dev/docs/full-application-reachability
Static Reachability Analysis	https://docs.socket.dev/docs/static-reachability-analysis
Phantom Dependencies	https://docs.socket.dev/docs/phantom-dependencies
Reachability Results	https://docs.socket.dev/docs/reachability-results
Ecosystem Support	https://docs.socket.dev/docs/language-support
Scala setup instructions	https://docs.socket.dev/docs/scala-setup-instructions
Kotlin setup instructions	https://docs.socket.dev/docs/kotlin-setup-instructions
Gradle setup instructions (for Java, Kotlin, and Scala)	https://docs.socket.dev/docs/gradle-setup-instructions-for-java-kotlin-and-scala
Anaconda setup instructions	https://docs.socket.dev/docs/anaconda-setup-instructions
Alert Types	https://docs.socket.dev/docs/issues-list
Alert Types Support	https://docs.socket.dev/docs/issues-list
Alert Categories	https://docs.socket.dev/docs/package-issues
Vulnerability	https://docs.socket.dev/docs/vulnerability
Critical CVE	https://socket.dev/alerts/criticalCVE
High CVE	https://socket.dev/alerts/cve
Medium CVE	https://socket.dev/alerts/mediumCVE
Low CVE	https://socket.dev/alerts/mildCVE
Supply Chain Risk	https://docs.socket.dev/docs/supply-chain-risk
Known malware	https://socket.dev/alerts/malware
Possible typosquat attack	https://socket.dev/alerts/didYouMean
AI-detected potential malware	https://socket.dev/alerts/gptMalware
Git dependency	https://socket.dev/alerts/gitDependency
GitHub dependency	https://socket.dev/alerts/gitHubDependency
HTTP dependency	https://socket.dev/alerts/httpDependency
Obfuscated code	https://socket.dev/alerts/obfuscatedFile
Protestware or potentially unwanted behavior	https://socket.dev/alerts/troll
Telemetry	https://socket.dev/alerts/telemetry
Unstable ownership	https://socket.dev/alerts/unstableOwnership
AI-detected potential security risk	https://socket.dev/alerts/gptSecurity
Native code	https://socket.dev/alerts/hasNativeCode
Network access	https://socket.dev/alerts/networkAccess
Non-existent author	https://socket.dev/alerts/missingAuthor
Potential vulnerability	https://socket.dev/alerts/potentialVulnerability
Shell access	https://socket.dev/alerts/shellAccess
Trivial Package	https://socket.dev/alerts/trivialPackage
Uses eval	https://socket.dev/alerts/usesEval
AI-detected potential code anomaly	https://socket.dev/alerts/gptAnomaly
Environment variable access	https://socket.dev/alerts/envVars
Filesystem access	https://socket.dev/alerts/filesystemAccess
High entropy strings	https://socket.dev/alerts/highEntropyStrings
New author	https://socket.dev/alerts/newAuthor
JS-only: NPM Shrinkwrap	https://socket.dev/alerts/shrinkwrap
JS-only: Install scripts	https://socket.dev/alerts/installScripts
JS-only: Manifest confusion	https://socket.dev/alerts/manifestConfusion
JS-only: Debug access	https://socket.dev/alerts/debugAccess
JS-only: Dynamic require	https://socket.dev/alerts/dynamicRequire
Quality	https://docs.socket.dev/docs/quality
Unpopular package	https://socket.dev/alerts/unpopularPackage
Minified code	https://socket.dev/alerts/minifiedFile
JS-only: Bad dependency semver	https://socket.dev/alerts/badSemverDependency
JS-only: Wildcard dependency	https://socket.dev/alerts/floatingDependency
Maintenance	https://docs.socket.dev/docs/maintenance
Deprecated	https://socket.dev/alerts/deprecated
Unmaintained	https://socket.dev/alerts/unmaintained
License	https://docs.socket.dev/docs/license
Explicitly Unlicensed Item	https://socket.dev/alerts/explicitlyUnlicensedItem
Misc. License Issues	https://socket.dev/alerts/miscLicenseIssues
Ambiguous License Classifier	https://socket.dev/alerts/ambiguousClassifier
Copyleft License	https://socket.dev/alerts/copyleftLicense
License Exception	https://socket.dev/alerts/licenseException
No License Found	https://socket.dev/alerts/noLicenseFound
Non-permissive License	https://socket.dev/alerts/nonpermissiveLicense
Unidentified License	https://socket.dev/alerts/unidentifiedLicense
Alert Actions	https://docs.socket.dev/docs/security-policy-defaults
Alert Purpose Definitions	https://docs.socket.dev/docs/alert-purpose-definitions
Alert Actions and Triage Functionality	https://docs.socket.dev/docs/alert-actions-and-triage-functionality
Package Scores	https://docs.socket.dev/docs/package-scores
Manifest File Detection in Socket	https://docs.socket.dev/docs/manifest-file-detection-in-socket
Organization Alerts	https://docs.socket.dev/docs/organization-alerts
Dependency Search	https://docs.socket.dev/docs/dependency-search
Repositories	https://docs.socket.dev/docs/repositories-1
Scans	https://docs.socket.dev/docs/scans
Security Policy (Default Enabled Alerts)	https://docs.socket.dev/docs/security-policy-default-enabled-alerts
Customizable Security Policies	https://docs.socket.dev/docs/enabled-issues
License Policy	https://docs.socket.dev/docs/license-policy
Threat Feed	https://docs.socket.dev/docs/threat-feed
Package Search	https://docs.socket.dev/docs/package-search
Users	https://docs.socket.dev/docs/users
Settings	https://docs.socket.dev/docs/api-keys
API Tokens	https://docs.socket.dev/docs/api-keys
Audit Log	https://docs.socket.dev/docs/audit-log
Integrations	https://docs.socket.dev/docs/slack-alerts
Slack	https://docs.socket.dev/docs/slack-alerts
Vanta	https://docs.socket.dev/docs/vanta-integration
SSO (Single Sign-On)	https://docs.socket.dev/docs/single-sign-on
SCIM	https://docs.socket.dev/docs/scim
SSO (Single Sign-On)	https://docs.socket.dev/docs/single-sign-on
Slack alerts	https://docs.socket.dev/docs/slack-alerts
Vanta integration	https://docs.socket.dev/docs/vanta-integration
Webhooks	https://docs.socket.dev/docs/webhooks
Guide to Socket for GitHub	https://docs.socket.dev/docs/socket-for-github
Install the App	https://docs.socket.dev/docs/socket-for-github-installation
Ignoring pull request alerts	https://docs.socket.dev/docs/ignoring-pull-request-alerts
socket.yml	https://docs.socket.dev/docs/socket-yml
What to do when you receive an alert	https://docs.socket.dev/docs/what-to-do-with-socket-alerts
GitHub App Permissions	https://docs.socket.dev/docs/permissions
Enable branch protection	https://docs.socket.dev/docs/enable-branch-protection
Understanding "Act on Your Behalf" Permission	https://docs.socket.dev/docs/understanding-act-on-your-behalf-permission
Socket for GitHub Actions	https://docs.socket.dev/docs/socket-for-github-actions
Socket for Gitlab Pipeline	https://docs.socket.dev/docs/socket-in-your-gitlab-pipeline
Socket for Bitbucket Pipeline	https://docs.socket.dev/docs/socket-in-your-bitbucket-pipeline
Socket for Jenkins Jobs	https://docs.socket.dev/docs/socket-for-jenkins-jobs
Socket for Azure DevOps (ADO Classic)	https://docs.socket.dev/docs/socket-for-azure-devops
Socket for Azure DevOps (Yaml)	https://docs.socket.dev/docs/socket-for-azure-devops-yaml
Create Variable Group for ADO	https://docs.socket.dev/docs/create-variable-group-key-for-azure-devops
Create Socket API Key for CI/CD	https://docs.socket.dev/docs/create-socket-api-key-for-cicd
Guide to Socket CLI	https://docs.socket.dev/docs/socket-cli
v1 Migration guide	https://docs.socket.dev/docs/v1-migration-guide
Socket CLI Commands	https://docs.socket.dev/docs/socket-analytics
socket analytics	https://docs.socket.dev/docs/socket-analytics
socket audit-log	https://docs.socket.dev/docs/socket-audit-log
socket ci	https://docs.socket.dev/docs/socket-ci
socket login	https://docs.socket.dev/docs/socket-login
socket logout	https://docs.socket.dev/docs/socket-logout
socket manifest	https://docs.socket.dev/docs/socket-manifest
socket manifest cdxgen	https://docs.socket.dev/docs/socket-cdxgen
socket npm & socket npx	https://docs.socket.dev/docs/socket-npm-socket-npx
socket organization	https://docs.socket.dev/docs/socket-organizations
socket optimize	https://docs.socket.dev/docs/socket-optimize
socket package	https://docs.socket.dev/docs/socket-package
socket raw-npm	https://docs.socket.dev/docs/socket-raw-npm
socket raw-npx	https://docs.socket.dev/docs/socket-raw-npx
socket repository	https://docs.socket.dev/docs/socket-repo
socket scan	https://docs.socket.dev/docs/socket-scan
socket scan github	https://docs.socket.dev/docs/socket-scan-github
socket threat-feed	https://docs.socket.dev/docs/socket-threat-feed
socket wrapper	https://docs.socket.dev/docs/socket-wrapper
socket fix	https://docs.socket.dev/docs/socket-fix
Socket CLI FAQ	https://docs.socket.dev/docs/socket-cli-faq
safe-npm FAQ	https://docs.socket.dev/docs/safe-npm-faq
Supported Node.js Versions	https://docs.socket.dev/docs/cli-support
socket.json	https://docs.socket.dev/docs/socketjson
Guide to Socket MCP	https://docs.socket.dev/docs/guide-to-socket-mcp
Remote Socket MCP	https://docs.socket.dev/docs/remote-socket-mcp
Local Socket MCP	https://docs.socket.dev/docs/local-socket-mcp
Socket MCP for Claude Desktop	https://docs.socket.dev/docs/socket-mcp-for-claude-desktop
Socket Firewall Overview	https://docs.socket.dev/docs/socket-firewall-overview
Socket Firewall Free	https://docs.socket.dev/docs/socket-firewall-free
Socket Firewall Enterprise	https://docs.socket.dev/docs/socket-firewall-enterprise
Enterprise Wrapper Mode	https://docs.socket.dev/docs/socket-firewall-enterprise-wrapper-mode
Enterprise Proxy Service Setup	https://docs.socket.dev/docs/socket-firewall-enterprise-proxy-service-setup
Generating Keys for Proxy Service	https://docs.socket.dev/docs/socket-firewall-enterprise-generating-keys
Enterprise Proxy Client Setup	https://docs.socket.dev/docs/socket-firewall-enterprise-proxy-client-setup
Enterprise Configuration	https://docs.socket.dev/docs/socket-firewall-enterprise-configuration
Guide to Socket for VS Code	https://docs.socket.dev/docs/socket-for-vs-code
Socket REST API	https://docs.socket.dev/reference
Socket JavaScript SDK	https://docs.socket.dev/docs/socket-javascript-sdk
Socket Python SDK	https://docs.socket.dev/docs/socket-python-sdk
Guide to Socket Chrome Extension	https://docs.socket.dev/docs/socket-security-chrome-extension
Extension Permissions	https://docs.socket.dev/docs/socket-chrome-extension-permissions-documentation
Deploying via Google Workspace	https://docs.socket.dev/docs/deploying-socket-web-extension-via-google-workspace
Join the community	https://docs.socket.dev/docs/join-the-community
Contact support	https://docs.socket.dev/docs/contact-support
Sample Malware Packages	https://docs.socket.dev/docs/sample-malware-packages
Known issues	https://docs.socket.dev/docs/known-issues
Incremental Rollout	https://docs.socket.dev/docs/incremental-rollout
Tool Configuration Files	https://docs.socket.dev/docs/tool-configuration-files
	https://readme.com?ref_src=hub&project=socketdev
	https://docs.socket.dev/docs/socket-for-github#today-thousands-of-organizations-rely-on-socket-to-prevent-bad-packages-from-infiltrating-their-software-supply-chain
	https://docs.socket.dev/docs/socket-for-github#quick-overview-of-socket-for-github
	https://docs.socket.dev/docs/socket-for-github#install-scripts
"install script"	https://socket.dev/npm/issue/installScripts
2022 paper	https://arxiv.org/abs/2112.10165
	https://docs.socket.dev/docs/socket-for-github#we-found-939--of-malicious-packages-had-at-least-one-install-script-indicating-that-malicious-attackers-use-install-scripts-frequently
the exact script	https://socket.dev/npm/package/styled-components/files/5.3.5/postinstall.js
much more destructive	https://www.bleepingcomputer.com/news/security/big-sabotage-famous-npm-package-deletes-files-to-protest-ukraine-war/
	https://docs.socket.dev/docs/socket-for-github#telemetry
telemetry	https://socket.dev/npm/issue/telemetry
angular-calendar	https://socket.dev/npm/package/angular-calendar
@scarf/scarf	https://socket.dev/npm/package/@scarf/scarf
	https://docs.socket.dev/docs/socket-for-github#native-code
native code	https://socket.dev/npm/issue/hasNativeCode
deasync	https://socket.dev/npm/package/deasync
	https://docs.socket.dev/docs/socket-for-github#known-malware
known malware on npm	https://socket.dev/npm/issue/malware
Socket CLI	https://docs.socket.dev/integrations
packages removed from npm for security reasons	https://socket.dev/npm/category/removed
	https://docs.socket.dev/docs/socket-for-github#troll-packages
bowserify	https://socket.dev/npm/package/bowserify
browserify	https://socket.dev/npm/package/browserify
standardjs	https://socket.dev/npm/package/standardjs
standard	https://socket.dev/npm/package/standard
-	https://socket.dev/npm/package/-
	https://docs.socket.dev/docs/socket-for-github#typosquats
potential typosquat	https://socket.dev/npm/issue/didYouMean
Install the App	https://docs.socket.dev/docs/socket-for-github-installation
Ignoring pull request alerts	https://docs.socket.dev/docs/ignoring-pull-request-alerts
socket.yml	https://docs.socket.dev/docs/socket-yml

Viewport: width=device-width, initial-scale=1.0

URLs of crawlers that visited me.