{"uid":"cap_6MXMLvnHOFXtBWhMclwyI","slug":"depscout-vercel-app-63afcf4a","name":"DepScout Package Risk Checker","description":"Check an npm package, PyPI package, or GitHub repo and return a DepScout install verdict.","url":"https://depscout.vercel.app/risk/package","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"headers":{"type":"object","additionalProperties":{"type":"string"}},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"queryParams":{"type":"object","additionalProperties":{"type":"string"}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{}}}}},"responseSchema":null,"example":{"request":{"package":"lodash","ecosystem":"npm"},"response":{"ok":true,"name":"lodash","type":"package-risk","score":100,"source":"https://www.npmjs.com/package/lodash","license":"MIT","service":"DepScout","signals":[],"verdict":"safe","version":"4.18.1","ecosystem":"npm","topReasons":[],"lastRelease":"2026-04-01T21:01:20.458Z","recommendation":"Install may proceed without extra user confirmation.","dependencyCount":0,"installSizeBytes":1413741,"maintainerActivity":{"maintainers":["jdalton"],"maintainerCount":1}}},"exampleRequest":{"package":"lodash","ecosystem":"npm"},"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FOawO-e9whaNA_jhRYOqM","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes an npm package, PyPI package, or GitHub repo and returns a security/safety install verdict","exampleAgentPrompt":"Can you check if the npm package 'colors' is safe to install? I want to know if there are any supply chain risks or security red flags before I add it as a dependency.","exampleUseCases":null,"resultDescription":"A DepScout install verdict indicating whether the package is safe, risky, or dangerous, along with supporting risk signals about the npm, PyPI, or GitHub package analyzed.","failureModes":["Package not found in the specified registry — returns error or unknown verdict","Invalid or malformed package name or repo URL — returns validation error","Registry API unavailable — upstream timeout or service error","Unsupported package ecosystem — only npm, PyPI, and GitHub repos are supported"],"whenToPreferThis":"Use this endpoint when an AI agent or developer needs a fast, automated security verdict on a specific npm, PyPI, or GitHub dependency before installation or inclusion in a project. Prefer this over general web searches when you need a structured, machine-readable install verdict rather than community forum opinions.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:37:43.987Z","isFirstParty":false}