René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"socket package shallow command does not output npm namespaces","articleBody":"Example:\n\n```text\nsocket package shallow npm @axe-core/react       \n   _____         _       _        /---------------\n  |   __|___ ___| |_ ___| |_      | CLI: v1.1.46\n  |__   | . |  _| '_| -_|  _|     | token: ****** (config), org: **** (config)\n  |_____|___|___|_,_|___|_|.dev   | Command: `socket package shallow`, cwd: ~/work/xxxxxxx\n\nℹ Requesting shallow score data for 1 package urls (purl): pkg:npm/@axe-core/react\n✔ Received Socket API response (after requesting looking up package).\n\nShallow Package Score\n\nPlease note: The listed scores are ONLY for the package itself. It does NOT\n             reflect the scores of any dependencies, transitive or otherwise.\n\n\nPackage: pkg:npm/react@4.11.0\n\n- Supply Chain Risk:   99\n- Maintenance:        95\n- Quality:           100\n- Vulnerabilities:   100\n- License:            70\n- Alerts (0/0/2):     [low] copyleftLicense and [low] nonpermissiveLicense\n```\n\n-----\n\nInformative print includes correct purl but output does not. The root cause:\n\nhttps://github.com/SocketDev/socket-cli/blob/9cc003bf3e00113fe426016027f2fa3980d37816/packages/cli/src/commands/package/output-purls-shallow-score.mts#L81\n\n`socket package score` command seems to be working fine because it is using data directly and on markdown generation `data.purl` is used as package name.\n\n","author":{"url":"https://github.com/jikuja","@type":"Person","name":"jikuja"},"datePublished":"2025-12-14T11:34:33.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/971/socket-cli/issues/971"}