{"uid":"cap_IzeMXx2wazoE3iXoy4RPz","slug":"package-risk-advisories-d4b87c0c","name":"Package Risk Advisories","description":"Deterministic dependency risk data for agents: maintenance, licence, and known advisories for one package, resolved against the version an installer would actually get today. No model calls, no personal data.","url":"https://x402-package-risk.x402-package-risk.workers.dev/v1/package/advisories?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["name","system"],"properties":{"name":{"type":"string"},"system":{"enum":["npm","pypi","go","maven","cargo","nuget"],"type":"string"},"version":{"type":"string"}}},"responseSchema":{"count":1,"package":{"name":"request","system":"npm"},"advisories":[{"id":"GHSA-p8p7-x288-28g6","summary":"Server-Side Request Forgery"}]},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zgTTSTU_NJSORGDY2VJyA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns known security advisories for a given package, resolved against the version an installer would actually get today, using deterministic (non-AI) data.","exampleAgentPrompt":"Can you check whether the npm package 'request' has any known security advisories right now, using the current version that would be installed today?","exampleUseCases":[{"title":"Pre-install dependency security check","prompt":"Before I add 'axios' from npm to my project, can you check if it has any known security advisories or vulnerabilities I should know about?"},{"title":"CI pipeline vulnerability gate","prompt":"Check the PyPI package 'pillow' for any known security advisories — I need to decide whether to block our build pipeline until it's patched."},{"title":"Auditing transitive dependency risk","prompt":"I found 'minimist' in my node_modules for npm — does it currently have any known GHSA advisories, and what are they about?"}],"resultDescription":"A JSON object with a count of advisories found, the resolved package name and ecosystem, and an array of advisory objects each containing a GHSA identifier and a plain-English summary of the vulnerability.","failureModes":["Unknown package name returns zero advisories or a 404-style error","Unsupported ecosystem/system value results in a validation error","Network or upstream advisory database unavailability may cause a 5xx response","Malformed request body (missing required 'name' or 'system' fields) returns a 400 error","Payment failure (x402 flow not completed) blocks the request before processing"],"whenToPreferThis":"Choose this endpoint when you need deterministic, up-to-date security advisory data for a specific package without relying on LLM-generated or cached results. It is ideal for CI/CD pipelines, pre-install checks, or agent workflows that require auditable, non-hallucinated vulnerability data. Prefer it over general web search or LLM knowledge for supply-chain security decisions, since it resolves against the version that would actually be installed today.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T06:36:43.586Z","isFirstParty":false,"canonicalSlug":"package-risk-advisories-d4b87c0c"}