Introducing Manifest Alerts (opens in new tab)

Socket now detects supply chain risks in project manifests, starting with missing lockfiles that can make dependency installs non-reproducible.