Socket

A group of software package maintainers has created a tool for defending applications that depend on open-source JavaScript libraries dubbed Socket, the tool uses a proactive defense against open-source software…