Remember risks that I've accepted

[BevanR]

To adopt socket npm in our team we'd need a way for it to remember which risks we've previously accepted, and only surface new ones. This feature doesn't appear to be supported yet.

[felixranesberger]

Hey, we have a similar issue at our company. Is there some way to implement this?
Thanks for any feedback!

[jdalton]

Still not supported, and worth being clear about what exists today: socket.yml issueRules can turn a whole alert type on or off for a repo, but there is nothing that records "we looked at this specific package and version and accepted it" so later runs only surface what is new. That per-package acceptance, with the accepted set committed alongside the project so a team shares it, is the missing piece. It is a design question rather than a small patch — where the accepted set lives, whether an acceptance is pinned to an exact version or a range, and what expires it — so I'm writing up a scoped proposal rather than leaving this silent.