Messaging
Socket.IO: latest release and open vulnerabilities today
The latest release of the socket.io package is 4.8.4. No advisories for the socket.io package were published in the last 12 months; none of its advisories is on CISA’s list of exploited vulnerabilities.
- Latest socket.io release
- 4.8.4
- npm downloads last week
- 19.5M
- GitHub stars
- 63.2k
- Licence
- MIT
- OpenSSF Scorecard
- 6.5 / 10
Security advisories
No advisories published in the last 12 months. 3 in total since records began. Checked packages: socket.io.
Maintenance and supply chain
OpenSSF Scorecard 6.5 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 20 issue updates found in the last 90 days.
Weakest checks
- No static analysis (SAST 0/10)
- No fuzzing (Fuzzing 0/10)
- No OpenSSF best-practices badge (CII-Best-Practices 0/10)
Docs and release notes
Check Socket.IO in your own stack
This page checks Socket.IO in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.