And another big update: We shipped continuous monitoring of existing dependencies in Q1 2024. Now, when malware or a CVE shows up in a dependency that’s already in your codebase—merged to main, included in your SBOMs, etc.—Socket will automatically push an alert to your alert view so you’re notified right away.

We're working on this now -- we expect to ship this in Q1.