{"uid":"cap_4g_adlDKu2SLZ_vFqwL5U","slug":"vulnerability-intelligence-batch-package-vulnerability-check-19079be2","name":"Vulnerability Intelligence – Batch Package Vulnerability Check","description":"Check up to 10 package versions at once for known vulnerabilities: list as npm:lodash@4.17.15,PyPI:requests@2.19.0.","url":"https://vuln-intel.x402tookit.com/vuln-batch?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["packages"],"properties":{"packages":{"type":"string","description":"Comma-separated ecosystem:name@version, up to 10"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"asOf":{"type":["null","string"]},"source":{"type":["null","string"]},"checked":{"type":["null","number"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"packages":{"type":["array","null"],"items":{"type":"object","properties":{"ids":{"type":["array","null"],"items":{"type":"string"}},"package":{"type":["null","string"]},"advisories":{"type":["null","number"]}}}},"sourceUrl":{"type":["null","string"]},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"vulnerable":{"type":["null","number"]}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_tIZ0MSY4efSHPpkz8lMmC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Check up to 10 package versions across ecosystems (npm, PyPI, Go, Maven, etc.) for known vulnerabilities in a single call, returning advisory counts, verdicts, and affected package details.","exampleAgentPrompt":"Can you check these packages for known vulnerabilities all at once: npm:lodash@4.17.15, PyPI:requests@2.19.0, and npm:express@4.17.1?","exampleUseCases":[{"title":"Pre-deploy dependency security audit","prompt":"Before I push this release, check these five packages for known vulnerabilities: npm:lodash@4.17.15, npm:axios@0.21.1, PyPI:requests@2.19.0, PyPI:flask@1.0.2, and Go:github.com/gin-gonic/gin@1.6.3."},{"title":"CI pipeline vulnerability gate","prompt":"I need to verify whether npm:moment@2.29.1, npm:minimist@1.2.5, and PyPI:pyyaml@5.3.1 have any known security advisories — block the build if any come back vulnerable."},{"title":"Third-party library vetting","prompt":"We're considering using these libraries — can you check if npm:serialize-javascript@3.1.0, PyPI:Pillow@8.1.0, and Maven:org.apache.logging.log4j:log4j-core@2.14.1 have any known vulnerabilities before we approve them?"}],"resultDescription":"Returns a verdict (e.g. vulnerable/safe), the number of vulnerable packages, advisory counts per package, CVE/GHSA IDs per package, the data source and timestamp, a summary string, a list of any packages that could not be checked, and a disclaimer. Optionally includes a degraded flag if the data source was partially unavailable.","failureModes":["More than 10 packages submitted — only up to 10 are supported per call","Malformed package identifier format (missing ecosystem prefix or version) — package may appear in notChecked list","Unknown or unsupported ecosystem — package returned as unchecked","Stale or unavailable upstream vulnerability database — degraded flag set to true","Network timeout or upstream data source unavailability — may return partial results"],"whenToPreferThis":"Use this endpoint when you need to check multiple packages in a single request across one or more ecosystems (npm, PyPI, Go, Maven). It is more efficient than calling the single-package endpoint repeatedly. Prefer it when auditing a dependency list, running a CI/CD security gate, or vetting a batch of third-party libraries before adoption. If you need deeper detail on a single advisory by CVE/GHSA ID, use the single-advisory endpoint instead.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:20:16.357Z","isFirstParty":false,"canonicalSlug":"vulnerability-intelligence-batch-package-vulnerability-check-19079be2"}