✅ = Full support  
⏳ = Coming soon (within next 3 months)

| Category | Alert Type | Severity | JavaScript and TypeScript | Python | Go | Java and Kotlin | Ruby | .NET | Rust | Chrome | HuggingFace | Github Actions | OpenVSX |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|  |  |  | 50 alerts | 34 alerts | 29 alerts | 30 alerts | 30 alerts | 29 alerts | 29 alerts | 5 alerts | 28 alerts | 28 alerts | 17 alerts |
| Vulnerability | [Critical CVE](https://socket.dev/alerts/criticalCVE) | Critical | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ⏳ | ❌ |
|  | [High CVE](https://socket.dev/alerts/cve) | High | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ⏳ | ❌ |
|  | [Medium CVE](https://socket.dev/alerts/mediumCVE) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ⏳ | ❌ |
|  | [Low CVE](https://socket.dev/alerts/mildCVE) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ⏳ | ❌ |
| Supply Chain Risk | [Known Malware](https://socket.dev/alerts/malware) | Critical | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [Possible typosquat attack](https://socket.dev/alerts/didYouMean) | Critical | ✅ | ✅ | ⏳ | ✅ | ⏳ | ✅ | ✅ | ❌ | ✅ | ✅ | ⏳ |
|  | [Suspicious Stars on GitHub](https://socket.dev/alerts/suspiciousStarActivity) | High | ✅ | ✅ |  |  |  |  |  | ❌ | ❌ |  | ❌ |
|  | [AI-detected potential malware](https://socket.dev/alerts/gptMalware) | High | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
|  | [Git dependency](https://socket.dev/alerts/gitDependency) | High | ✅ |  |  |  |  |  |  | ❌ | ❌ | ❌ | ⏳ |
|  | [GitHub dependency](https://socket.dev/alerts/gitHubDependency) | High | ✅ |  |  |  |  |  |  | ❌ | ❌ | ❌ | ⏳ |
|  | [HTTP dependency](https://socket.dev/alerts/httpDependency) | High | ✅ |  |  |  |  |  |  | ❌ | ❌ | ❌ | ⏳ |
|  | [Obfuscated code](https://socket.dev/alerts/obfuscatedFile) | High | ✅ | ✅ |  |  |  |  |  | ❌ |  | ✅ | ✅ |
|  | [Protestware or potentially unwanted behavior](https://socket.dev/alerts/troll) | High | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
|  | [Telemetry](https://socket.dev/alerts/telemetry) | High | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
|  | [Unstable ownership](https://socket.dev/alerts/unstableOwnership) | High | ✅ |  |  |  |  |  |  | ❌ |  | ⏳ | ⏳ |
|  | [AI-detected possible typosquat](https://socket.dev/alerts/gptDidYouMean) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ⏳ | ⏳ |
|  | [AI-detected potential security risk](https://socket.dev/alerts/gptSecurity) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
|  | [Native code](https://socket.dev/alerts/hasNativeCode) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [Network access](https://socket.dev/alerts/networkAccess) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [Non-existent author](https://socket.dev/alerts/missingAuthor) | Medium | ✅ |  |  |  |  |  |  | ❌ |  | ⏳ | ❌ |
|  | [Potential vulnerability](https://socket.dev/alerts/potentialVulnerability) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |  | ✅ | ✅ |
|  | [Shell access](https://socket.dev/alerts/shellAccess) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [Trivial Package](https://socket.dev/alerts/trivialPackage) | Medium | ✅ |  |  |  |  |  |  | ❌ |  | ✅ | ❌ |
|  | [Uses eval](https://socket.dev/alerts/usesEval) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [AI-detected potential code anomaly](https://socket.dev/alerts/gptAnomaly) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
|  | [Environment variable access](https://socket.dev/alerts/envVars) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [Filesystem access](https://socket.dev/alerts/filesystemAccess) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ |
|  | [High entropy strings](https://socket.dev/alerts/highEntropyStrings) | Low | ✅ |  |  |  |  |  |  | ❌ |  | ✅ | ✅ |
|  | [New author](https://socket.dev/alerts/newAuthor) | Low | ✅ |  |  |  |  |  |  | ❌ |  |  | ⏳ |
|  | [URL strings](https://socket.dev/alerts/urlStrings) | Low | ✅ | ✅ | ✅ | ✅ | ✅ |  |  | ❌ |  | ✅ | ✅ |
| Quality | [Unpopular package](https://socket.dev/alerts/unpopularPackage) | Medium | ✅ | ✅ | ⏳ | ❌ Maven lacks support | ✅ | ✅ | ✅ | ❌ | ✅ |  | ⏳ |
|  | [Minified code](https://socket.dev/alerts/minifiedFile) | Low | ✅ |  |  |  |  |  |  | ❌ |  | ✅ | ⏳ |
| Maintenance | [Deprecated](https://socket.dev/alerts/deprecated) | Medium | ✅ | ✅ | ✅ | ❌ Maven lacks support | ❌ RubyGems lacks support |  |  | ❌ |  | ⏳ | ✅ |
|  | [Unmaintained](https://socket.dev/alerts/unmaintained) | Low | ✅ | ✅ | ⏳ | ✅ | ✅ |  |  | ❌ |  | ⏳ | ⏳ |
| License | [Explicitly Unlicensed Item](https://socket.dev/alerts/explicitlyUnlicensedItem) | High | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | License Policy Violation | High | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [Misc. License Issues](https://socket.dev/alerts/miscLicenseIssues) | Medium | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [Ambiguous License Classifier](https://socket.dev/alerts/ambiguousClassifier) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [Copyleft License](https://socket.dev/alerts/copyleftLicense) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [License exception](https://socket.dev/alerts/licenseException) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [No License Found](https://socket.dev/alerts/noLicenseFound) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [Non-permissive License](https://socket.dev/alerts/nonpermissiveLicense) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
|  | [Unidentified License](https://socket.dev/alerts/unidentifiedLicense) | Low | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ |
| JS-only: Supply Chain Risk | [NPM Shrinkwrap](https://socket.dev/alerts/shrinkwrap) | High | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |
|  | [Install scripts](https://socket.dev/alerts/installScripts) | Medium | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |
|  | [Manifest confusion](https://socket.dev/alerts/manifestConfusion) | Medium | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |
|  | [Debug access](https://socket.dev/alerts/debugAccess) | Low | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |
|  | [Dynamic require](https://socket.dev/alerts/dynamicRequire) | Low | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |
| JS-only: Quality | [Bad dependency semver](https://socket.dev/alerts/badSemverDependency) | Medium | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |
|  | [Wildcard dependency](https://socket.dev/alerts/floatingDependency) | Medium | ✅ |  |  |  |  |  |  | ❌ |  | ❌ | ❌ |

---

> 👍
>
> ### Tell us the alerts you want us to support next!
>
> At Socket, we're committed to expanding our detection capabilities across diverse programming languages and package managers. We're driven by the needs of our users and customers so if there's a specific alert you'd like us to support, we'd [love to hear from you](https://feedback.socket.dev/). Please reach out to us to discuss your specific requirements.

Updated 3 months ago

---