{"uid":"cap_LQ8xn1ElfrCbMwDUWXARR","slug":"ops-control-hq-npm-dependency-risk-brief-b19a8bc9","name":"Ops Control HQ npm Dependency Risk Brief","description":"One-call npm package health plus exact-version OSV vulnerability/fixed-version brief and minimum OSV-clear upgrade version","url":"https://tkoqkknsezxavtxfywkm.supabase.co/functions/v1/npm-dependency-risk-x402-v1?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["package","version"],"properties":{"package":{"type":"string","description":"npm package name"},"version":{"type":"string","description":"exact installed version"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_G5yTSdbB1pIQhmTgoNkKn","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns npm package health metrics combined with exact-version OSV vulnerability data and fixed-version recommendations in a single call","exampleAgentPrompt":"Can you pull a full vulnerability and health brief for lodash version 4.17.20 — I need to know if there are any known OSV vulnerabilities and what version I should upgrade to?","exampleUseCases":[{"title":"Pre-deploy dependency security check","prompt":"Before I ship this release, can you check whether axios version 0.21.1 has any known vulnerabilities and tell me what version fixes them?"},{"title":"Vulnerability triage for existing codebase","prompt":"I'm auditing our package-lock.json and need to know if express version 4.17.1 has any OSV-listed security issues and how serious they are."},{"title":"CI pipeline security gate","prompt":"My build system just flagged lodash 4.17.15 — can you get me the full OSV vulnerability brief and the earliest safe fixed version I should pin to?"}],"resultDescription":"A combined brief containing the npm package's current health status (download trends, maintenance signals) alongside any OSV-indexed vulnerabilities matching the exact installed version, including CVE IDs, severity ratings, and the recommended fixed version to upgrade to.","failureModes":["Package name not found on npm registry — returns error or empty result","Exact version does not exist for the specified package — may return no vulnerability match","OSV database has no records for the package — returns clean/empty vulnerability list","Malformed package name or version string — returns validation error","Payment not completed or x402 auth failure — returns 402 Payment Required","Rate limit or Supabase function timeout — returns 5xx error"],"whenToPreferThis":"Choose this endpoint when you need both npm package health signals and exact-version OSV vulnerability data in a single call, rather than querying the npm registry and OSV separately. Ideal for CI/CD pipelines, dependency auditing tools, or security dashboards where you know the exact installed version and need actionable upgrade guidance with minimal API round-trips.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T18:33:33.263Z","isFirstParty":false,"canonicalSlug":"ops-control-hq-npm-dependency-risk-brief-b19a8bc9"}