Hacker News Reader

There is a website here https://socket.dev where you can search for any OSS package and get the same information without the need for an extension.

The idea behind the extension is that it integrates directly into the developer workflow so you don’t have to remember to check a separate website.

View on HN

What would really integrate with the developer workflow would be some kind of npm command that can check the package.json or the lock file and generate instant output on the console. You can then have whitelists, integration with CI/CD, and lots of other neat stuff.

We have that too :)

https://docs.socket.dev/docs/socket-cli

Reply on news.ycombinator.com