npm package report

Is socket.io safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/socket.io
npm packagelast checked 2026-06-10

socket.io · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 40 known dependencies · 1 flagged · provenance: unknown

Re-check live →

SIGNALS
Advisory HistoryclearOK

4 historical advisory record(s) on this package (max severity HIGH). Add a version to check whether it is affected.

DEPENDENCIES
accepts@~1.3.4clean
assertvanish@0.0.3-1clean
babel-eslint@^10.1.0clean
babel-preset-es2015@^6.24.1clean
babel-preset-es2015@6.3.13clean
base64id@0.1.0clean
base64id@~2.0.0clean
benchmark@0.2.2clean
colors@0.5.1block
cors@~2.8.5clean
debug@0.7.4clean
debug@2.1.0clean
debug@2.2.0clean
debug@2.3.3clean
debug@~2.6.6clean
debug@~3.1.0clean
debug@~4.1.0clean
debug@~4.3.1clean
debug@~4.3.2clean
del@2.2.0clean
PACKAGE socket.ioECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages