{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"A Python SDK that wraps the Socket.dev REST API, enabling programmatic access to package security analysis, SBOM export, and full-scan operations from Python code.","skillfed_tags":["supply-chain-security","sbom","api-client"],"use_cases":["Query package metadata and security scores for dependencies in your codebase by PURL.","Automate full scans of manifest files (package.json, requirements.txt, etc.) as part of CI/CD pipelines.","Export SBOMs in CycloneDX or SPDX format for compliance and supply-chain visibility.","Retrieve vulnerability and license alerts for a set of components to inform security decisions.","Integrate Socket.dev security checks into custom tooling or dashboards."],"what_it_does":"The Socket.dev Python SDK is a lightweight wrapper around the Socket.dev REST API that lets you query package metadata, security scores, and license information directly from Python. It handles authentication, request formatting, and response parsing so you don't have to build HTTP calls manually. The SDK supports querying packages by PURL (Package URL), running full scans on manifest files, and exporting SBOMs in multiple formats (CycloneDX, SPDX, OpenVEX).\n\nYou initialize it with an API token and optional timeout, then call methods like `purl.post()` to look up package details, `fullscans.post()` to analyze a set of manifest files, or `export.cdx_bom()` to convert scan results into standard SBOM formats. It depends only on requests for HTTP calls and typing-extensions for type hints, making it straightforward to integrate into existing Python projects.","worth_installing":"Yes. The SDK is actively maintained, has no known vulnerabilities, installs with minimal friction, and is licensed permissively under MIT. Install it if you need programmatic access to Socket.dev's package security API from Python; skip it if you only need one-off lookups via the web UI."},"id":"socketdev","links":{"html":"https://skillfed.io/packages/socketdev","md":"https://skillfed.io/packages/socketdev.md","pypi":"https://pypi.org/project/socketdev/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-06","license_spdx":null,"license_treatment":"permissive","name":"socketdev","python_support":"supports_current","summary":"Socket Security Python SDK"},"popularity":{"monthly_downloads":238203,"position":8944,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.5.0"}