{"uid":"cap_2zlQES0Z5OEYTQUtSS8MC","slug":"codepulse-package-security-scanner-f5e91366","name":"CodePulse Package Security Scanner","description":"Package security scanner — CVEs, license check, typosquat detection.","url":"https://codepulse.waltsoft.net/v1/scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","properties":{"pkg":{"type":"string","description":"Package name (e.g. express, requests)"},"ecosystem":{"type":"string","description":"Ecosystem (npm, pypi, go, maven, cargo)"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_qXsuOI21AeoVLI27-YnB2","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a software package for CVE vulnerabilities, license compliance issues, and typosquatting risks across major ecosystems.","exampleAgentPrompt":"Can you scan the npm package 'lodash' for any known CVEs, license issues, or typosquatting risks before I add it to my project?","exampleUseCases":[{"title":"Pre-install dependency security check","prompt":"Before I install the Python package 'beautifulsoup4' from PyPI, can you check it for any known CVEs or security vulnerabilities?"},{"title":"Typosquat detection for suspicious package","prompt":"I found a package called 'reaquests' on PyPI — can you scan it to see if it looks like a typosquat of the real 'requests' library?"},{"title":"License compliance audit for Go module","prompt":"We need to make sure the Go package 'github.com/gin-gonic/gin' has an acceptable open-source license — can you check its license and flag any compliance issues?"}],"resultDescription":"Returns a security report including identified CVE vulnerabilities with severity details, license type and compliance flags, and whether the package name appears to be a typosquat of a known legitimate package, for the specified package and ecosystem.","failureModes":["Unknown or misspelled package name returns not-found error","Unsupported ecosystem value returns validation error","Package exists but has no indexed security data yet","Rate limiting or payment failure from x402 protocol","Network timeout for large or deeply nested packages"],"whenToPreferThis":"Choose CodePulse when you need a lightweight, per-call security scan covering CVEs, license checks, and typosquat detection in a single request across npm, PyPI, Go, Maven, or Cargo. Ideal for CI/CD pipelines, automated dependency auditing agents, or pre-install checks when you don't need a full SBOM or deep transitive dependency graph analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:31:38.762Z","isFirstParty":false,"canonicalSlug":"codepulse-package-security-scanner-f5e91366"}