To adopt socket npm in our team we'd need a way for it to remember which risks we've previously accepted, and only surface new ones. This feature doesn't appear to be supported yet.