{"uid":"cap_6sgcYtOduVH1Lahw5hGu2","slug":"novapath-package-vulnerability-advisory-lookup-2cdf7f52","name":"NovaPath Package Vulnerability Advisory Lookup","description":"Query current OSV advisories for an exact npm, PyPI or Go package version, then return a bounded AI explanation with source-matched evidence and advisory IDs. No-match means no source match, never a safety guarantee. Supports up to ten matching advisories per request; no exploit execution.","url":"https://instructional-decision-engine-x402.vercel.app/ai/package-advisories?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"package":{"type":"string","pattern":"^[A-Za-z0-9@][A-Za-z0-9@._/+-]{0,99}$","maxLength":100,"minLength":1},"version":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9._+!~-]{0,59}$","maxLength":60,"minLength":1},"ecosystem":{"enum":["npm","PyPI","Go"],"type":"string"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_VqRHmSUOH3Rf5yKQQe8F6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Queries current OSV vulnerability advisories for an exact npm, PyPI, or Go package version and returns an AI-generated explanation with source-matched evidence and advisory IDs","exampleAgentPrompt":"Can you check if lodash version 4.17.20 on npm has any known security advisories? I want to know the OSV advisory IDs and a plain-English explanation of any vulnerabilities found.","exampleUseCases":[{"title":"Auditing a Python dependency before deployment","prompt":"Before I push this to production, can you check if requests version 2.27.1 on PyPI has any known security vulnerabilities? Give me the advisory IDs and a summary of what the issues are."},{"title":"Reviewing a Go module for supply chain risk","prompt":"I'm using golang.org/x/net version 0.0.0-20220425223048-2871e0cb64e4 in my Go project — does it have any OSV advisories I should know about?"},{"title":"Vetting an npm package for a security audit","prompt":"Run a vulnerability check on the npm package minimist at version 1.2.5 and tell me what advisories exist and what they mean in plain language."}],"resultDescription":"Returns up to ten matching OSV advisories for the specified package/version/ecosystem combination. Each result includes advisory IDs, a bounded AI-generated explanation of the vulnerability, and source-matched evidence. If no advisories are found, the response indicates no match — explicitly not a safety guarantee.","failureModes":["No advisories found (does not mean the package is safe, only that no OSV match exists)","Invalid package name or version format rejected by schema pattern validation","Unsupported ecosystem specified (only npm, PyPI, Go are accepted)","More than ten matching advisories exist — only the first ten are returned, potentially incomplete","Package/version combination does not exist in OSV database","Network timeout or upstream OSV API unavailability"],"whenToPreferThis":"Choose this endpoint when you need a quick, AI-explained vulnerability lookup for an exact package version in npm, PyPI, or Go ecosystems, backed by live OSV advisory data with traceable advisory IDs. It is especially useful when you want a human-readable summary alongside raw advisory IDs rather than raw database output. Prefer this over general web search for security info when you need structured, source-matched evidence tied to a specific package version.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-01T06:38:15.426Z","isFirstParty":false,"canonicalSlug":"novapath-package-vulnerability-advisory-lookup-2cdf7f52"}