Skip to content

feat: add Socket.dev report URL to depscore output#158

Open
kapravel wants to merge 1 commit intomainfrom
feat/socket-report-url
Open

feat: add Socket.dev report URL to depscore output#158
kapravel wants to merge 1 commit intomainfrom
feat/socket-report-url

Conversation

@kapravel
Copy link
Collaborator

Add links to the full Socket.dev report page for each package when a score is returned. Users can click through for deeper analysis when scores raise concerns.

Why?

  • Gives users a direct path to detailed Socket.dev analysis when scores warrant review
  • Report URL is only shown when a score is found (omitted for "No score found" packages)

Public Changelog

Depscore tool now includes a link to the Socket.dev report page for each package with a score, enabling deeper analysis when scores raise concerns.

Checklist

  • Is PR safe to revert (yes/no)?: yes

Validation

  • TypeScript type check passed
  • Lint passed
  • Unit tests passed (50/52; 2 integration tests require SOCKET_API_KEY, run in CI with secrets)
  • buildSocketReportUrl unit tests added for all supported ecosystems

Made with Cursor

Include a link to the full Socket.dev report page for each package when
a score is returned. Users can click through for deeper analysis when
scores raise concerns. Report URL is omitted when package is not found.

Made-with: Cursor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant