{"uid":"cap_DsbhVMSGOrX74cerlRpkc","slug":"briefs402-package-risk-brief-cd9f9147","name":"Briefs402 Package Risk Brief","description":"Ready-made intelligence reports for AI agents: company, country, daily market, EU tenders, domain due diligence, location, literature review, food product, package risk and document translation briefs. Each brief fuses several live data sources and is written by Llama 3.3 70B under strict no-fabrication rules (English or Arabic). USDC on Base mainnet over x402. No API key, no account.","url":"https://briefs402.worlddata402.workers.dev/v1/brief/package/%7Bregistry%7D/%7Bname%7D?utm_source=zero.xyz","method":"HEAD","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"pathParams":{"type":"object","required":["registry","name"],"properties":{"name":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9._-]{0,213}$","description":"Package name (unscoped)"},"registry":{"enum":["npm","pypi"],"type":"string","description":"npm or pypi"}}},"queryParams":{"type":"object","required":[],"properties":{"lang":{"enum":["en","ar"],"type":"string","default":"en","description":"Output language of the summary: en (default) or ar (Arabic)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"subject":"npm/hono","key_facts":{"license":"MIT","risk_level":"low","latest_version":"4.13.13","homepage_domain":"hono.dev","homepage_domain_age_years":4.6},"confidence":"high"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.15","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.15/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.15","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.15","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_f-3XU5OxFq9_8V9uR0JdU","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.15","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Generates a structured risk intelligence report for an npm or PyPI package, including license, risk level, version, and homepage domain age","exampleAgentPrompt":"Can you pull a package risk brief on the npm package 'hono' and tell me its license, risk level, and how old its homepage domain is?","exampleUseCases":[{"title":"Vetting a new npm dependency","prompt":"Before I add 'axios' to my project, can you get me a risk brief on it from npm — I want to know the license, risk level, and whether the domain behind it looks legit?"},{"title":"PyPI package security check","prompt":"I'm about to install 'requests' from PyPI — can you run a package risk assessment on it and tell me the confidence level and any risk flags?"},{"title":"Arabic-language supply chain report","prompt":"Get me a package risk brief in Arabic for the npm package 'lodash' — I need the license, latest version, and risk level for a report."}],"resultDescription":"A JSON object containing the package subject (registry/name), key facts including license type, risk level, latest version, homepage domain, and homepage domain age in years, plus an overall confidence rating (e.g. high/medium/low).","failureModes":["Unknown or misspelled package name returns an error or empty result","Unsupported registry (anything other than npm or pypi) is rejected by schema validation","Network or upstream data source unavailability may degrade confidence or fail the call","Payment failure over x402/USDC Base mainnet causes request to be rejected before processing","Very new packages with minimal metadata may return low confidence scores"],"whenToPreferThis":"Choose this endpoint when you need a fast, structured risk summary for a specific npm or PyPI package without setting up API keys or accounts. It is ideal for AI agents performing automated dependency vetting, supply chain audits, or developer due diligence where a pay-per-call model (USDC on Base) is acceptable. Prefer it over manual registry scraping when you need fused signals (license, domain age, version) in a single call with a no-fabrication guarantee.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T13:15:03.251Z","isFirstParty":false,"canonicalSlug":"briefs402-package-risk-brief-cd9f9147"}