Composer and @packagist serve billions of package installs a year. For most of their history, they've been funded largely by a single company.
This week @naderman and @seldaek announced a sponsorship program and @SocketSecurity signed on as a launch sponsor. Here's why.
When a
Socket signed the open letter on open-weight AI models, alongside Microsoft, Google, Meta, OpenAI, and NVIDIA. We're a 100-person startup, and this is one of the few policy letters we've ever signed.
@SocketSecurity exists because open ecosystems get attacked. We block 10,000+
"One of the best defenses against being phished is just being too busy to read your email."
@feross, Founder and CEO of @SocketSecurity, on how attackers compromised one of the most widely used JavaScript libraries:
"There's a maintainer who runs that project. He received an
