{"uid":"cap_DHMYRwewoLgaAOUWSWeQ9","slug":"stack-facts-stack-watch-package-security-vulnerability-monitor-f9b1a7ce","name":"Stack Facts: Stack Watch – Package Security & Vulnerability Monitor","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/stack/watch?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cves":{"type":"array","items":{"type":"string","pattern":"^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$","maxLength":32},"maxItems":100,"minItems":0},"full":{"type":"boolean"},"items":{"type":"array","items":{"anyOf":[{"type":"string","pattern":"^[^@]+@.+$","maxLength":401,"minLength":3},{"type":"object","required":["product","version"],"properties":{"product":{"type":"string","maxLength":200,"minLength":1},"version":{"type":"string","maxLength":200,"minLength":1}},"additionalProperties":false}]},"maxItems":50,"minItems":0},"token":{"type":"string","pattern":"^sfw1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$","maxLength":48000},"packages":{"type":"array","items":{"type":"string","pattern":"^pkg:","maxLength":512,"minLength":7},"maxItems":50,"minItems":0},"warn_days":{"type":"integer","maximum":365,"minimum":0}}},"responseSchema":{"type":"json","example":{"data":{"check":{"eol":{},"kev":{},"summary":{}},"watch":{"kind":"start","next":"POST /v1/stack/watch {\"token\":\"…","stack":{},"token":"sfw1.eyJleHAiOiIyMDI3LTA0LTA3VD…","warn_days":90,"checked_at":"2026-10-09T07:00:00.000Z","expires_at":"2027-04-07T07:00:00.000Z","suggested_recheck_at":"2026-10-09T10:00:00.000Z"}},"meta":{"stale":false,"notice":"Normalised (modified) from the …","dataset":"stack","datasets":{"eol":{},"kev":{}}}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.012","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.012/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.012","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.012","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_0VC1JvkpvPqWDA5YAevNw","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.012","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks software packages, CVEs, and LLM prices for malware, known vulnerabilities (OSV), actively exploited CVEs (CISA KEV), and end-of-life status, returning cryptographically signed answers with a watch token for rechecks.","exampleAgentPrompt":"Before I install express@4.18.2 and lodash@4.17.21, check if either package has known vulnerabilities, is end-of-life, or has CVEs that CISA flagged as actively exploited — and warn me if anything expires within 90 days.","exampleUseCases":[{"title":"Pre-install dependency security check","prompt":"I'm about to add react@18.2.0, axios@1.6.0, and webpack@5.88.0 to my project — can you check if any of them have known CVEs, are end-of-life, or show up in CISA's exploited vulnerabilities list before I run npm install?"},{"title":"CVE exploitability triage","prompt":"We just got flagged on CVE-2021-44228 and CVE-2023-44487 — can you tell me if either of those is in the CISA Known Exploited Vulnerabilities catalog so I know which one to patch first?"},{"title":"Scheduled stack health monitoring","prompt":"Set up a recurring watch on our production stack — nodejs@18.19.0, openssl@3.1.0, and pkg:npm/express@4.18.2 — and alert me if any become end-of-life or get added to the CISA KEV list within the next 90 days."}],"resultDescription":"Returns a JSON object with a 'check' section summarizing EOL status, KEV matches, and CVE counts per item, plus a 'watch' section containing a signed token for future rechecks, a suggested_recheck_at timestamp, and per-dataset metadata including cryptographic signatures, SHA256 hashes, source URLs, and data freshness indicators.","failureModes":["Invalid CVE format returns schema validation error","Unknown or misspelled package name yields unknown_count increment with no match","Expired or invalid watch token requires a fresh call without a token","Payment not received results in HTTP 402 response requiring USDC payment","Stale dataset indicated via meta.stale=true flag, results may be outdated"],"whenToPreferThis":"Choose this endpoint when you need cryptographically signed, authoritative vulnerability data combining OSV, CISA KEV, and end-of-life databases in a single call with no API key or account required — ideal for AI agents that need to pay per call in USDC, require signed audit-trail answers, or want to set up stateful monitoring via watch tokens. Prefer over raw CISA or OSV APIs when you need a unified, signed, pay-as-you-go response.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:45:00.707Z","isFirstParty":false,"canonicalSlug":"stack-facts-stack-watch-package-security-vulnerability-monitor-f9b1a7ce"}