Similar to the Socket "safe npm" ( https://socket.dev/blog/introducing-safe-npm ) feature, Socket should support the same functionality for the pnpm package manager.

Bun ( https://bun.sh/ ) is new JS toolkit that especially includes a package manager that has its own lockfile format: bun.lockb https://bun.sh/docs/install/lockfile

Support the .NET programming language and the NuGet package manager.

Produce a score for each maintainer based on their trust in the ecosystem. Consider using something similar to PageRank. Then, use the Maintainer Score as a factor in the Supply Chain Risk score.

Support for PHP language, it's frameworks like Symphony & Laravel and it's package manager "Composer".

Add the ability to have Microsoft Teams integration in addition to Slack. Not all dev teams use Slack 😉

Some way to manage users through SSO / SAML

Support the Rust programming language and the Cargo package manager.

Make a GitLab app (in addition to the GitHub app) to detect and block supply chain attacks in new code changes.

Support the Java programming language and the Maven package manager.