Socket has joined the OpenJS Foundation’s new Security Stewardship Program as an inaugural partner, helping fund vulnerability research, triage, patching, and security releases across the JavaScript ecosystem. The program launches with an initial focus on Node.js, where the security workload is growing faster than the funding available to support it. “AI is driving a sharp rise in vulnerability reports, pushing many open source projects to shut down their bug bounty programs.