{"uid":"cap_1W7WnRAYBjUfTniI-80zk","slug":"json-repair-agentdiet-dev-real-time-open-source-package-cve-ghsa-45190e89","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://json-repair.agentdiet.dev/v1/pypi-vuln-scan)","url":"https://json-repair.agentdiet.dev/v1/pypi-vuln-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kZpPWXbbwg9YMck6vEr8M","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"json-repair.agentdiet.dev","brandSlug":"json-repair-agentdiet-dev-mpp","brandBaseUrl":"https://json-repair.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust packages in real time.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories right now, and tell me which version I should upgrade to if it's vulnerable?","exampleUseCases":[{"title":"Auditing Python dependency before shipping","prompt":"Before I deploy this app, can you scan the PyPI package 'pillow' for any known CVEs or security advisories and tell me the safest version to pin?"},{"title":"Checking npm package for known exploits","prompt":"I'm about to install lodash in my Node project — does it have any active GHSA advisories or CVEs I should know about, and is there a patched version available?"},{"title":"Rust crate security review in CI","prompt":"Can you look up the crates.io package 'hyper' and tell me if there are any open vulnerabilities or CVEs reported against it right now?"}],"resultDescription":"Returns a structured response listing active CVE IDs, GHSA advisory identifiers, affected version ranges, severity details, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in specified ecosystem — returns empty or error response","Malformed package identifier format causes validation error","OSV.dev upstream timeout or unavailability results in error","Unrecognized ecosystem prefix returns no results","Rate limiting or payment failure (HTTP 402) blocks the request"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from OSV.dev for open source packages across PyPI, npm, Go modules, or Rust crates — especially when you need CVE and GHSA advisory coverage in a single call without setting up direct OSV.dev API integration. Preferred over static SCA tools when freshness of vulnerability data matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:23.197Z","isFirstParty":false,"canonicalSlug":"json-repair-agentdiet-dev-real-time-open-source-package-cve-ghsa-54d3a025"}