Use the Socket connector to score dependencies
Sets up the Socket MCP connector, checks sign-in and access, and scores packages with the depscore tool. It reports unscored entries separately and does not change anything in Socket.
Use it when
- You want package security scores through Socket inside your AI assistant.
- Sign-in to Socket keeps failing or the tool returns nothing.
- You need to check a list of dependencies in one pass.
Tools it uses
depscore
Score the dependencies in my package.json through Socket and tell me which ones I couldn't check.
Socket returned scores for 18 of 20 packages. Two were not scored: left-pad-legacy@1.0.0 (not found) and an internal package that your account cannot access. The lowest score was 42 for node-fetch-old, which I recommend reviewing before upgrading. A score is one signal, not proof of safety.