feat: add "Security Sources" concept; add Socket in addition to OSV - #3188

Open

ljharb wants to merge 5 commits into

npmx-dev:mainfrom

ljharb:security-sources

Commits on Aug 18, 2026

refactor: extract the OSV client and add per-source scan status
ljharb
committed
aff3d5a
fix: distinguish "could not check" from "no vulnerabilities"
ljharb
committed
60af5e6
feat: add security data source concept with OSV
ljharb
committed
910f5c9
feat: add Socket as a second security data source
ljharb
committed
860fc76
docs: document security data sources in the guide
ljharb
committed
d9da7f5