{"uid":"cap_OZovgnRN_qa_TLsHSxmDR","slug":"company-enrich-agentdiet-dev-real-time-open-source-package-cve-ghsa-00cda609","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://company-enrich.agentdiet.dev/v1/npm-vuln-scan)","url":"https://company-enrich.agentdiet.dev/v1/npm-vuln-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_LXNa565tWRaDQKK-0wjQ8","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"company-enrich.agentdiet.dev","brandSlug":"company-enrich-agentdiet-dev-mpp","brandBaseUrl":"https://company-enrich.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev live vulnerability data for a named package (PyPI, npm, Go, Rust) and returns active CVEs, GHSA advisories, and safe patched versions.","exampleAgentPrompt":"Can you check if the npm package lodash has any known CVEs or GHSA security advisories right now, and tell me which version patches them?","exampleUseCases":[{"title":"Pre-deployment dependency security check","prompt":"Before I deploy, can you scan the PyPI package 'requests' for any active CVEs or GHSA advisories and let me know if there's a patched version I should upgrade to?"},{"title":"Rust crate vulnerability audit","prompt":"I'm using crates.io hyper in my Rust project — are there any known security vulnerabilities or advisories I should be aware of, and what version should I be on?"},{"title":"Go module supply chain risk review","prompt":"Can you pull up any current CVEs or GHSA advisories for golang.org/x/net and tell me if the version we're using is still safe?"}],"resultDescription":"Returns a structured object containing all active CVEs, GHSA advisory IDs, vulnerability descriptions, severity information, affected version ranges, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Unrecognized package name or ecosystem format returns an empty or error response","Network or OSV.dev upstream outage may cause delayed or failed responses","Malformed package identifier (missing ecosystem prefix when ambiguous) may yield no results","Very new packages or obscure ecosystems may have no OSV.dev data"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative vulnerability data for a specific open-source package across PyPI, npm, Go modules, or Rust crates — particularly when you want CVE and GHSA advisory details with patched version guidance sourced directly from Google's OSV.dev database, rather than static or cached vulnerability lists.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:46:29.634Z","isFirstParty":false,"canonicalSlug":"company-enrich-agentdiet-dev-real-time-open-source-package-cve-ghsa-2fe4c696"}