
Open source supply chain security
socket.dev (opens in a new tab)Socket helps developers and security teams ship faster by removing security busywork, letting thousands of organisations safely find, audit and manage the open source code their software depends on. Dependency risk is unusually hard to police because the surface expands with every transitive package, and most tooling produces alert volume rather than judgment. Customers include Anthropic, xAI, Figma and Vercel. The company was founded by Feross Aboukhadijeh, a long-time open source maintainer whose own software is downloaded over a billion times a month.