Socket

Socket checks the open-source packages your projects use for malware, typosquats, and risky behavior before they reach your code, with AI-assisted analysis and pull request alerts. It is a defensive tool that helps developers keep their supply chain safe, with a free plan for small teams.