Socket · Schema

SocketPURL

Supply Chain SecurityOpen Source SecuritySoftware Composition AnalysisSCAMalware DetectionDependency ScanningSBOMnpmPyPIGoMavenCargoNuGetRubyGemsDeveloper Security

Properties

Name Type Description
type object
namespace string Package namespace or scope, such as npm organizations (@angular), Maven groupIds, or Docker image owners
name string Package name within its ecosystem
version string Package version string
subpath string Path within the package to a specific file or directory, used to reference nested components
release string Package-specific release identifier, such as PyPI's artifact ID or the specific build/release version
View JSON Schema on GitHub

JSON Schema

socket-package-schema.json Raw ↑
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "type": {
      "$ref": "#/$defs/SocketPURL_Type"
    },
    "namespace": {
      "type": "string",
      "description": "Package namespace or scope, such as npm organizations (@angular), Maven groupIds, or Docker image owners",
      "default": ""
    },
    "name": {
      "type": "string",
      "description": "Package name within its ecosystem",
      "default": ""
    },
    "version": {
      "type": "string",
      "description": "Package version string",
      "default": ""
    },
    "subpath": {
      "type": "string",
      "description": "Path within the package to a specific file or directory, used to reference nested components",
      "default": ""
    },
    "release": {
      "type": "string",
      "description": "Package-specific release identifier, such as PyPI's artifact ID or the specific build/release version",
      "default": ""
    }
  },
  "required": [
    "type"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/socket-dev/main/json-schema/socket-socketpurl-schema.json",
  "title": "SocketPURL",
  "$defs": {
    "SocketPURL_Type": {
      "type": "string",
      "enum": [
        "alpm",
        "apk",
        "bitbucket",
        "cocoapods",
        "cargo",
        "chrome",
        "clawhub",
        "composer",
        "conan",
        "conda",
        "cran",
        "deb",
        "docker",
        "gem",
        "generic",
        "github",
        "golang",
        "hackage",
        "hex",
        "huggingface",
        "maven",
        "mlflow",
        "npm",
        "nuget",
        "qpkg",
        "oci",
        "pub",
        "pypi",
        "rpm",
        "socket",
        "swid",
        "swift",
        "vscode",
        "unknown"
      ],
      "description": "Package ecosystem type identifier based on the PURL specification",
      "default": "unknown"
    }
  }
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/socket-package"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.