Capslock: What is your code really capable of?

This article introduces Capslock, a capability analysis CLI for Go that reports privileged operations (such as network access and arbitrary code execution) within packages and their transitive dependencies to complement traditional vulnerability management. It highlights how capability signals can help prioritize audits, compare dependencies, detect unwanted behaviors or supply chain attacks, and monitor changes via CI/CD, with plans to expand features and language support.