To adopt `socket npm` in our team we'd need a way for it to remember which risks we've previously accepted, and only surface new ones. This feature doesn't appear to be supported yet.