Skip to content

Add Socket Security badges #11801

Open
Open

Description

@steinybot

📋 Description

Please add badges for Socket Security.

For example badge

Socket have their own badge but it doesn't have all the options that an official badge has.

Given that Socket is now integrated directly into npmjs via the "Analyse security with Socket" button (https://www.npmjs.com/package/gsd-pi) I think this deserves official support. It might also be desireable to have badges for the other aspects of the security rating such as licenses.

Activity

  1. ashif323 commented on Apr 13, 2026

    @ashif323
    Contributor

    Hi @steinybot 👋

    I'd love to take a stab at this! Before I start, a few questions for the maintainers:

    1. Is there a public Socket API endpoint we can use without authentication?
    2. Would the approach be similar to existing security badges (e.g. Snyk)?
    3. Should this be scoped to just the overall security score first, or include license/vulnerability breakdowns too?

    Happy to start with a simple security score badge and expand from there!

  2. jeky1950 commented on May 15, 2026

    @jeky1950

    Hey guys. I found something on the README of the socket-registry package. Try adding the badge to your README in this format:
    [![Socket Badge](https://socket.dev/api/badge/npm/package/@[ YOUR ORGANISATION ]/[ YOUR PACKAGE NAME ])](https://socket.dev/npm/package/@socketsecurity/registry)

    Here is an example
    [![Socket Badge](https://socket.dev/api/badge/npm/package/@socketsecurity/registry)](https://socket.dev/npm/package/@socketsecurity/registry)

  3. abhiravi1912 commented on Jun 1, 2026

    @abhiravi1912

    Hi! I'd like to work on this. Quick question before I start —
    does Socket have a public unauthenticated endpoint for package
    scores, or does every request require an API token?

    If auth is required, would this be implemented as a
    user-configured auth badge
    similar to how some other private service badges work?

    Happy to proceed once I know the intended approach!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    service-badgeNew or updated service badge

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions