Socket Registry - Core utilities and infrastructure for Socket.dev security tools
npm install @socketsecurity/registry



Query Socket Registry manifest data. Zero dependencies, ~5KB.
``bash`
pnpm install @socketsecurity/registry
`typescript
import { getManifestData, PURL_Type } from '@socketsecurity/registry'
// Get all manifest data
const manifest = getManifestData()
// Get ecosystem packages
const npmPackages = getManifestData('npm')
// Get specific package
const pkg = getManifestData('npm', 'deep-equal')
console.log(pkg.name) // '@socketregistry/deep-equal'
console.log(pkg.version) // '2.2.3'
console.log(pkg.categories) // ['speedup', 'cleanup']
`
`typescript`
function getManifestData(): Manifest
function getManifestData(ecosystem: string): ManifestEntry[] | undefined
function getManifestData(ecosystem: string, packageName: string): ManifestEntryData | ManifestEntry | undefined
`typescript`
import { version } from '@socketsecurity/registry'
`typescript
type ManifestEntryData = {
categories?: ('cleanup' | 'levelup' | 'speedup' | 'tuneup')[]
deprecated?: boolean
engines?: Record
interop?: ('browserify' | 'cjs' | 'esm')[]
license?: string
name: string // Socket registry name
package: string // Original package name
version: string
[key: string]: unknown
}
type ManifestEntry = [purl: string, data: ManifestEntryData]
type Manifest = Record
`
Ecosystem identifiers: APK, BITBUCKET, CARGO, COCOAPODS, COMPOSER, CONAN, CONDA, CRAN, DEB, DOCKER, GEM, GENERIC, GITHUB, GOLANG, HACKAGE, HEX, HUGGINGFACE, MAVEN, MLFLOW, NPM, NUGET, OCI, PUB, PYPI, QPKG, RPM, SWID, SWIFT, VCS
`typescript``
import manifest from '@socketsecurity/registry/manifest.json'
import pkg from '@socketsecurity/registry/package.json'
import extensions from '@socketsecurity/registry/extensions.json'
- Removed all utility subpath exports (constants, lib utilities, etc.)
- Removed all runtime dependencies
- Focused solely on manifest data access
Pin to v1.x if you need the removed utilities.
MIT