The npm registry now includes Socket security analysis links directly on package pages to help developers assess supply chain risks.