{"uid":"cap_9uzg6quPcWuIq-CR7wHZ9","slug":"onchain-risk-agentdiet-dev-real-time-open-source-package-cve-ghsa-542734cd","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/ghsa-advisories)","url":"https://onchain-risk.agentdiet.dev/v1/ghsa-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_piOeo8c5dTq2q2wPhw9R2","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories for a given PyPI, npm, Go, or Rust crate package and returns active vulnerabilities and patched versions.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions have patches available?","exampleUseCases":[{"title":"Auditing Python dependency before deploy","prompt":"Before I deploy, can you check if the PyPI package 'cryptography' has any known CVEs or GHSA advisories and whether there's a patched version I should upgrade to?"},{"title":"Scanning npm package for supply chain risk","prompt":"I'm about to add lodash to my project — can you look up any active CVEs or GitHub Security Advisories for the npm package lodash so I know if it's safe to use?"},{"title":"Rust crate security review for CI pipeline","prompt":"Can you scan the crates.io package 'hyper' for any known vulnerabilities or GHSA advisories right now, including which versions fix the issues?"}],"resultDescription":"Returns a structured list of active vulnerabilities for the queried package, including CVE identifiers, GHSA advisory IDs, vulnerability summaries, severity ratings, affected version ranges, and available patched versions sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-style response","Malformed package identifier format causes validation error","OSV.dev upstream API unavailability results in timeout or 503","Unsupported ecosystem prefix returns an error or no results","Rate limiting or payment failure due to x402 micropayment issues"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative CVE and GHSA vulnerability data for open-source packages across PyPI, npm, Go modules, or Rust crates. It is backed directly by Google OSV.dev, making it more up-to-date than static NVD snapshots or cached databases. Prefer it for supply chain security checks, CI/CD pipeline audits, or pre-deployment dependency reviews where freshness of vulnerability intelligence matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:45.702Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-real-time-open-source-package-cve-ghsa-d465dd5f"}