Socket Security
Secure your supply chain and ship with confidence
什么是Socket Security？
Socket Security是由https://socket.dev开发的Chrome扩展程序，该扩展的主要功能是“Secure your supply chain and ship with confidence”。
扩展截图
下载Socket Security扩展crx文件
下载Socket Security扩展crx格式的文件，手动将Chrome插件安装到浏览器中，也可以将crx文件分享给朋友，轻松安装Chrome插件。
扩展使用说明
The Socket Security browser extension adds security metrics to your NPM package pages and search results, protecting you from threats in open-source packages before you even install them.
By the time CVEs and known vulnerabilities make it to public databases, it's often too late. Using advanced code analysis techniques and AI-powered risk detection, Socket searches for malware and security vulnerabilities throughout your open-source dependency tree and defends your project against cyberattacks in advance.
---
Over the past decade, it's become clear that open source software has won. Sharing code freely has made it drastically cheaper and faster to build software – and tech innovation has accelerated as a result. But security has often been an afterthought.
We are a team of open source maintainers with over 1 billion monthly downloads to our names. Working on the frontlines of open source, we've witnessed firsthand how supply chain attacks have swept across our communities and damaged trust in open source.
The entire security industry is obsessed with identifying known vulnerabilities. There are hundreds of variations of CVE scanners, but they all miss the point. Looking for known vulnerabilities is reactive. Vulnerabilities take weeks or months to be discovered. In today's culture of fast development, a malicious dependency can be updated, merged, and running in production in days or even hours.
Unlike other tools, Socket detects and blocks supply chain attacks before they strike, mitigating the worst consequences. Socket uses deep package inspection to peel back the layers of a dependency to characterize its actual behavior.
Want to defend your entire organization against open-source attacks? Install the Socket GitHub app at https://github.com/apps/socket-security and get protected today! 扩展基本信息
| 名称 |  Socket Security |
| ID | jbcobpbfgkhmjfpjjepkcocalmpkiaop |
| 官方URL | https://chromewebstore.google.com/detail/socket-security/jbcobpbfgkhmjfpjjepkcocalmpkiaop |
| 简介 | Secure your supply chain and ship with confidence |
| 文件大小 | 1.05 MB |
| 安装次数 | 1,537 |
| 当前版本 | 0.1.4 |
| 更新时间 | 2023-11-07 |
| 上架时间 | 2023-06-19 |
| 评分 | 5.00/5 共6次评分 |
| 开发者 | https://socket.dev |
| 电子邮箱 | [email protected] |
| 付费类型 | free |
| 扩展官网 | https://socket.dev |
| 帮助页面URL | https://docs.socket.dev/docs/contact-support |
| 隐私政策页面URL | https://socket.dev/privacy |
| 支持的语言 | en-US |
| manifest.json | |
{
"update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
"manifest_version": 3,
"name": "Socket Security",
"description": "__MSG_site_dot_shortDescription__",
"version": "0.1.4",
"icons": {
"16": "logo.f89f0335.png",
"32": "logo.60e5741c.png",
"48": "logo.c6ec5cad.png",
"64": "logo.7df45a6a.png",
"128": "logo.226c70cc.png"
},
"default_locale": "en_US",
"host_permissions": [
"https:\/\/socket.dev\/*"
],
"content_scripts": [
{
"matches": [
"https:\/\/www.npmjs.com\/*"
],
"js": [
"inject-history-patcher.35f384c9.js"
],
"run_at": "document_end",
"css": []
},
{
"matches": [
"https:\/\/www.npmjs.com\/*"
],
"js": [
"inject.1dd51d50.js",
"inject.fc0da482.js"
],
"run_at": "document_end",
"css": []
}
],
"web_accessible_resources": [
{
"matches": [
"https:\/\/www.npmjs.com\/*"
],
"resources": [
"patch-history.c18ac740.js"
]
},
{
"matches": [
"https:\/\/www.npmjs.com\/*"
],
"resources": [
"icon.e6f91667.svg"
]
}
]
} | |
