socket-patch-core

Core library for socket-patch — a CLI tool that applies security patches to npm and Python dependencies (plus Cargo, Go, Maven, Ruby, Composer, and NuGet via feature flags) without waiting for upstream fixes.

What this crate provides

• Manifest management — read, write, and validate .socket/manifest.json patch manifests
• Patch engine — apply and rollback file-level patches using git SHA-256 content hashes
• Crawlers — discover installed packages across npm and PyPI (default), plus Cargo, Go, Maven, Ruby gems, Composer, and NuGet (via feature flags)
• API client — fetch patches from the Socket API
• Utilities — PURL parsing, blob storage, hash verification, fuzzy matching

Usage

This crate is used internally by the socket-patch-cli binary. If you need the CLI, install that instead:

cargo install socket-patch-cli

License

MIT