capabilities.work

Audit Organization Dependencies

A 2-step recipe with Socket. We can help you get access.

Recipe · 2 steps

Audit Organization Dependencies

with Socket

Confirm dependencies are in use, then fetch their alert metadata.

  1. Search the organization's in-use dependencies, filtered to the supplied PURLs, to confirm which packages are present and where.
  2. Run an org-scoped batch PURL lookup with alerts enabled to surface supply-chain issues for the audited packages.
What you'll need to have ready
  • orgSlug: The slug of the organization.
  • purls: PURL strings to filter the dependency search by.
  • components: Component objects (each with a purl) for the alert lookup.
  • limit: Maximum number of dependency rows to return (1-100).
For your developer

Arazzo workflow socket-dev:audit-dependencies, 2 operations: searchDependencies → batchPackageFetchByOrg. Specs on APIs.io.