GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing socket.dev — Socket for GitHub

socket-securityBotcommented on Jun 3

Caution

Review the following alerts detected in dependencies.According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Priority

Alert (click "▶" to expand/collapse)

Action

▶Malicious package: npm axios

Block

View full report

Company name
Job title
Organization name
Create organization
Set up your organization in Socket to manage access and protection settings.
Authorize with GitHub
Connect your GitHub account to allow Socket to access and scan your repositories.
frontend-app412 deps
api-server30 deps
mobile-client412 deps
data-pipeline67 deps
Pick repositories
Choose the repositories you want Socket to automatically protect.

Socket is one of the most interesting approaches to supply chain security. If you are interested in the risks of malicious deps in your apps, I definitely recommend taking a look at Socket!

Add dependency #482

Open

by @author

"dependencies": { + "utils-extra": "2.2.0"

utils-extrav2.2.0

Network Calls

Obfuscated Code

Merging is blocked

Create project health reports
Socket creates a project health report for your project. Uploads your package.json or package-lock.json.
Secure your PR workflow
Run Socket on your CI/CD pipeline to create branches and deploy requests. Socket will create a report for you to review.
Lookup package risks
Socket allows you to look up supply chain risks for a given version of a package in the ecosystem registry.

Call us at (844) SOCKET-0

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.

GeezerVison

Create organization

Authorize with GitHub

Pick repositories

Create project health reports

Secure your PR workflow

Lookup package risks