Socket

Analyzes what a package actually does, including install scripts, network and filesystem access and obfuscated code, to catch supply chain attacks that advisory based scanners never see.