You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Socket have their own badge but it doesn't have all the options that an official badge has.
Given that Socket is now integrated directly into npmjs via the "Analyse security with Socket" button (https://www.npmjs.com/package/gsd-pi) I think this deserves official support. It might also be desireable to have badges for the other aspects of the security rating such as licenses.
Hey guys. I found something on the README of the socket-registry package. Try adding the badge to your README in this format: [](https://socket.dev/npm/package/@socketsecurity/registry)
Here is an example [](https://socket.dev/npm/package/@socketsecurity/registry)
Hi! I'd like to work on this. Quick question before I start —
does Socket have a public unauthenticated endpoint for package
scores, or does every request require an API token?
If auth is required, would this be implemented as a user-configured auth badge
similar to how some other private service badges work?
Happy to proceed once I know the intended approach!
Activity
ashif323 commentedon Apr 13, 2026
Hi @steinybot 👋
I'd love to take a stab at this! Before I start, a few questions for the maintainers:
Happy to start with a simple security score badge and expand from there!
jeky1950 commentedon May 15, 2026
Hey guys. I found something on the README of the socket-registry package. Try adding the badge to your README in this format:
[](https://socket.dev/npm/package/@socketsecurity/registry)Here is an example
[](https://socket.dev/npm/package/@socketsecurity/registry)abhiravi1912 commentedon Jun 1, 2026
Hi! I'd like to work on this. Quick question before I start —
does Socket have a public unauthenticated endpoint for package
scores, or does every request require an API token?
If auth is required, would this be implemented as a
user-configured auth badge
similar to how some other private service badges work?
Happy to proceed once I know the intended approach!