{"uid":"cap_8QFq5vjXoaBB5LuXrcmeo","slug":"hn-pulse-agentdiet-dev-real-time-open-source-package-cve-ghsa-2ba822c5","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://hn-pulse.agentdiet.dev/v1/maven-vuln-scanner)","url":"https://hn-pulse.agentdiet.dev/v1/maven-vuln-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_VjuVMYQAgwQzqtguqoI2-","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"hn-pulse.agentdiet.dev","brandSlug":"hn-pulse-agentdiet-dev-mpp","brandBaseUrl":"https://hn-pulse.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev live vulnerability data for a named open-source package and returns active CVEs, GHSA advisories, and patched version information.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which versions are patched?","exampleUseCases":[{"title":"Pre-deployment dependency security audit","prompt":"Before I ship this Python service, can you scan 'PyPI:cryptography' for any known CVEs or GHSA advisories and tell me if my version is affected?"},{"title":"Checking a Rust crate before adoption","prompt":"I'm thinking of using the 'crates.io:hyper' Rust crate in a new project — can you check whether it has any active security vulnerabilities or advisories I should know about?"},{"title":"Investigating a flagged npm package","prompt":"Our security team flagged 'npm:lodash' in our codebase — can you pull up all current CVEs and GHSA advisories for it and show me which versions have fixes?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory references, affected version ranges, patched/safe versions, and severity metadata sourced live from Google OSV.dev for the requested package.","failureModes":["Unknown or misspelled package name returns empty results or an error","Unsupported ecosystem prefix causes a lookup failure","OSV.dev upstream unavailability causes timeout or degraded response","Malformed 'Ecosystem:name' format may return no results","Rate limiting or payment failure (HTTP 402) blocks the request"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data for a specific open-source package across PyPI, npm, Go modules, or Rust crates — particularly when you want CVE and GHSA advisory details with patched version information sourced directly from Google OSV.dev. Prefer it over static advisory databases when freshness matters, such as just before a deployment or when evaluating a new dependency.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:35.404Z","isFirstParty":false,"canonicalSlug":"hn-pulse-agentdiet-dev-real-time-open-source-package-cve-ghsa-83ed8d11"}