Socket.dev#
The Socket.dev module ingests organizations, monitored repositories, dependencies, security alerts, and available fixes.
Socket.dev organizations are labeled as ontology Tenant nodes. Dependencies
are labeled as Dependency, alerts as Risk and SecurityIssue, and fixes as
Fix. Monitored repositories link to matching ontology CodeRepository nodes,
and normalized dependency identifiers support cross-tool package matching.
The module discovers every organization visible to the token, then syncs repositories, dependencies, security alerts, and available fixes. The dependencies endpoint is account-scoped, so those records are associated with the first discovered organization.
See configuration for token setup and the generated schema for fields and relationships.