Package Issues and Available Fixes
A 2-step recipe with Socket. We can help you get access.
Recipe · 2 steps
Package Issues and Available Fixes
with Socket
Batch-fetch package alerts by PURL, then fetch available fixes for vulnerabilities.
- Submit the batch of PURLs for org-scoped lookup with alert metadata enabled, returning a streamed list of package issues and scores.
- Fetch available fixes for the supplied vulnerability identifiers in the target repository, including advisory details.
What you'll need to have ready
- orgSlug: The slug of the organization.
- components: Array of component objects, each carrying a purl string to look up.
- repoSlug: Optional repository slug to scope the fixes lookup to.
- vulnerabilityIds: Comma-separated GHSA or CVE IDs, or "*" for all vulnerabilities.
For your developer
Arazzo workflow socket-dev:package-issues-and-fixes, 2 operations: batchPackageFetchByOrg → fetch-fixes. Specs on APIs.io.