--- title: "Get issues by package" method: GET path: "/npm/{package}/{version}/issues" tags: ["deprecated"] deprecated: true --- # Get issues by package `GET /npm/{package}/{version}/issues` > **Deprecated.** **This endpoint is deprecated.** Use the [successor version](https://docs.socket.dev/reference) instead. Get all the issues related with a particular npm package version. This endpoint returns the issue type, location, and additional details related to each issue in the `props` attribute. You can [see here](https://socket.dev/alerts) the full list of issues. This endpoint consumes 1 unit of your quota. This endpoint requires the following org token scopes: - No Scopes Required, but authentication is required ## Path parameters - `package` string, required - `version` string, required ## Response `200` Socket issue lists - SocketIssue[] - union - object - `type` 'gptSecurity' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `notes` string, required - `confidence` number, required - `severity` number, required - `detectedAt` string, nullable, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'gptAnomaly' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `notes` string, required - `confidence` number, required - `severity` number, required - `risk` 'low' | 'medium' | 'high', required - `detectedAt` string, nullable, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'gptMalware' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `notes` string, required - `confidence` number, required - `severity` number, required - `detectedAt` string, nullable, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'filesystemAccess' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `module` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'networkAccess' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `module` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'shellAccess' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `module` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'debugAccess' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `module` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'chromePermission' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `permission` string, required - `permissionType` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'chromeHostPermission' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `host` string, required - `permissionType` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'chromeWildcardHostPermission' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `host` string, required - `permissionType` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'chromeContentScript' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `scriptFile` string, required - `matches` string, required - `runAt` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'criticalCVE' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `cveId` string, required — Common Vulnerabilities and Exposures identifier (e.g., CVE-2021-44228) - `cwes` object[], required - `description` string, required - `id` string, required — Common Weakness Enumeration identifier (e.g., CWE-79) - `name` string, required - `cvss` object, required — Common Vulnerability Scoring System metrics - `score` number, required — CVSS base score ranging from 0.0 to 10.0 - `vectorString` string, required — CVSS vector string (e.g., CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) - `description` string, required - `firstPatchedVersionIdentifier` string, required — The first version that includes a patch for this vulnerability - `ghsaId` string, required — GitHub Security Advisory identifier (e.g., GHSA-1234-5678-9abc) - `severity` string, required - `title` string, required - `url` string, required - `vulnerableVersionRange` string, required — Version range affected by this vulnerability (e.g., >= 2.0.0, < 2.17.1) - `kevs` object[], nullable, required - `vulnerabilityName` string, required - `shortDescription` string, nullable, required - `requiredAction` string, nullable, required - `dateAdded` string, required — Date when added to CISA KEV catalog (ISO 8601 format) - `dueDate` string, nullable, required — Remediation deadline for federal agencies (ISO 8601 format) - `knownRansomwareCampaignUse` string, nullable, required — Known, Unknown, or specific ransomware campaign names - `notes` string, nullable, required - `vendorProject` string, required - `product` string, required - `epss` object, nullable, required — Exploit Prediction Scoring System https://www.first.org/epss/ - `score` number, required - `percentile` number, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'cve' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `cveId` string, required — Common Vulnerabilities and Exposures identifier (e.g., CVE-2021-44228) - `cwes` object[], required - `description` string, required - `id` string, required — Common Weakness Enumeration identifier (e.g., CWE-79) - `name` string, required - `cvss` object, required — Common Vulnerability Scoring System metrics - `score` number, required — CVSS base score ranging from 0.0 to 10.0 - `vectorString` string, required — CVSS vector string (e.g., CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) - `description` string, required - `firstPatchedVersionIdentifier` string, required — The first version that includes a patch for this vulnerability - `ghsaId` string, required — GitHub Security Advisory identifier (e.g., GHSA-1234-5678-9abc) - `severity` string, required - `title` string, required - `url` string, required - `vulnerableVersionRange` string, required — Version range affected by this vulnerability (e.g., >= 2.0.0, < 2.17.1) - `kevs` object[], nullable, required - `vulnerabilityName` string, required - `shortDescription` string, nullable, required - `requiredAction` string, nullable, required - `dateAdded` string, required — Date when added to CISA KEV catalog (ISO 8601 format) - `dueDate` string, nullable, required — Remediation deadline for federal agencies (ISO 8601 format) - `knownRansomwareCampaignUse` string, nullable, required — Known, Unknown, or specific ransomware campaign names - `notes` string, nullable, required - `vendorProject` string, required - `product` string, required - `epss` object, nullable, required — Exploit Prediction Scoring System https://www.first.org/epss/ - `score` number, required - `percentile` number, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'mediumCVE' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `cveId` string, required — Common Vulnerabilities and Exposures identifier (e.g., CVE-2021-44228) - `cwes` object[], required - `description` string, required - `id` string, required — Common Weakness Enumeration identifier (e.g., CWE-79) - `name` string, required - `cvss` object, required — Common Vulnerability Scoring System metrics - `score` number, required — CVSS base score ranging from 0.0 to 10.0 - `vectorString` string, required — CVSS vector string (e.g., CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) - `description` string, required - `firstPatchedVersionIdentifier` string, required — The first version that includes a patch for this vulnerability - `ghsaId` string, required — GitHub Security Advisory identifier (e.g., GHSA-1234-5678-9abc) - `severity` string, required - `title` string, required - `url` string, required - `vulnerableVersionRange` string, required — Version range affected by this vulnerability (e.g., >= 2.0.0, < 2.17.1) - `kevs` object[], nullable, required - `vulnerabilityName` string, required - `shortDescription` string, nullable, required - `requiredAction` string, nullable, required - `dateAdded` string, required — Date when added to CISA KEV catalog (ISO 8601 format) - `dueDate` string, nullable, required — Remediation deadline for federal agencies (ISO 8601 format) - `knownRansomwareCampaignUse` string, nullable, required — Known, Unknown, or specific ransomware campaign names - `notes` string, nullable, required - `vendorProject` string, required - `product` string, required - `epss` object, nullable, required — Exploit Prediction Scoring System https://www.first.org/epss/ - `score` number, required - `percentile` number, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'mildCVE' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `cveId` string, required — Common Vulnerabilities and Exposures identifier (e.g., CVE-2021-44228) - `cwes` object[], required - `description` string, required - `id` string, required — Common Weakness Enumeration identifier (e.g., CWE-79) - `name` string, required - `cvss` object, required — Common Vulnerability Scoring System metrics - `score` number, required — CVSS base score ranging from 0.0 to 10.0 - `vectorString` string, required — CVSS vector string (e.g., CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) - `description` string, required - `firstPatchedVersionIdentifier` string, required — The first version that includes a patch for this vulnerability - `ghsaId` string, required — GitHub Security Advisory identifier (e.g., GHSA-1234-5678-9abc) - `severity` string, required - `title` string, required - `url` string, required - `vulnerableVersionRange` string, required — Version range affected by this vulnerability (e.g., >= 2.0.0, < 2.17.1) - `kevs` object[], nullable, required - `vulnerabilityName` string, required - `shortDescription` string, nullable, required - `requiredAction` string, nullable, required - `dateAdded` string, required — Date when added to CISA KEV catalog (ISO 8601 format) - `dueDate` string, nullable, required — Remediation deadline for federal agencies (ISO 8601 format) - `knownRansomwareCampaignUse` string, nullable, required — Known, Unknown, or specific ransomware campaign names - `notes` string, nullable, required - `vendorProject` string, required - `product` string, required - `epss` object, nullable, required — Exploit Prediction Scoring System https://www.first.org/epss/ - `score` number, required - `percentile` number, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'emptyPackage' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'trivialPackage' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `linesOfCode` integer, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'noREADME' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'missingLockfile' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `manifestFile` string, required - `ecosystem` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'oversizedManifest' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `manifestFile` string, required - `ecosystem` string, required - `size` integer, required - `limit` integer, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'shrinkwrap' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'tooManyFiles' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `fileCount` integer, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'generic' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `title` string, required - `description` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaArgToSink' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaEnvToSink' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaContextToSink' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaArgToOutput' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaArgToEnv' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaContextToOutput' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ghaContextToEnv' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `message` string, required - `sourceLocation` object, required - `sinkLocations` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'recentlyPublished' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `publishedAt` string, required - `checkedAt` string, required - `thresholdDays` number, required — Org-configured recently published threshold in days. - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'licenseSpdxDisj' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `spdxDisj` string, required - `licenseScanResult` string, required - `violationData` object[], required - `warnData` object[], required - `monitorData` object[], required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'unsafeCopyright' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'licenseChange' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `prevLicenseId` string, required - `newLicenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'nonOSILicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `licenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'deprecatedLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `licenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'missingLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'nonSPDXLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'unclearLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `possibleLicenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'mixedLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `licenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'notice' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'modifiedLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `licenseId` string, required - `similarity` number, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'modifiedException' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `exceptionId` string, required - `similarity` number, required - `comments` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'licenseException' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `exceptionId` string, required - `comments` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'deprecatedException' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `exceptionId` string, required - `comments` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'miscLicenseIssues' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `description` string, required - `location` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'unidentifiedLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `location` string, required - `maybeByteSpan` object, required - `maybeTruncatedSource` string, required - `match_strength` integer, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'noLicenseFound' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'explicitlyUnlicensedItem' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `location` string, required - `maybeByteSpan` object, required - `maybeTruncatedSource` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'copyleftLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `licenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'nonpermissiveLicense' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `licenseId` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'ambiguousClassifier' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `classifier` string, required - `filepathOrProvenance` string, required - `maybeByteSpan` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'invalidPackageJSON' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'httpDependency' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `packageName` string, required - `url` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'gitDependency' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `packageName` string, required - `url` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'gitHubDependency' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `packageName` string, required - `githubUser` string, required - `githubRepo` string, required - `commitsh` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'fileDependency' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `label` string, required - `description` string, required - `props` object, required - `packageName` string, required - `filePath` string, required - `usage` SocketUsageRef - `file` SocketRefFile, required - `path` string, required - `range` SocketRefTextRange - … - `bytes` SocketRefByteRange - … - `dependencies` SocketRef[], required - union - … - object - `type` 'noTests' - `value` object - `severity` 'low' | 'middle' | 'high' | 'critical', required - `category` 'supplyChainRisk' | 'quality' | 'maintenance' | 'vulnerability' | 'license' | 'other', required - `locations` SocketRef[], required - union - object - … - object - … - object - … - object - … - … truncated; see the full OpenAPI document linked below ## Other responses - `400` — Bad request - `401` — Unauthorized - `403` — Insufficient max_quota for API method - `404` — Resource not found - `429` — Insufficient quota for API route --- [API](https://skmtc.dev/socket-dev/apis/socket.md) · [All operations](https://skmtc.dev/socket-dev/apis/socket/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/socket-dev/socket/revisions/bf994b75d33f/schema)