{"uid":"cap_QaQn1p2TYROwmvwgBlLlH","slug":"safe-upgrade-decision-api-eacb21e2","name":"Safe Upgrade Decision API","description":"Evidence-backed npm package upgrade decisions for coding agents.","url":"https://x402-safe-upgrade-api.onrender.com/v1/lockfile-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"filename":{"type":"string","description":"Optional filename hint (package-lock.json or yarn.lock)."},"lockfile":{"type":"string","description":"Full package-lock.json or yarn.lock contents."}}},"responseSchema":{"type":"json","example":{"summary":{"clean":false,"packagesResolved":320,"vulnerablePackages":3}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JRveFY0-05z1IRlD9B8Ph","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits npm lockfiles (package-lock.json or yarn.lock) to identify vulnerable packages and provide evidence-backed upgrade decisions for coding agents.","exampleAgentPrompt":"Can you audit my package-lock.json for vulnerable packages and tell me which ones need to be upgraded? Here's the full contents: [paste lockfile contents]","exampleUseCases":[{"title":"Pre-deploy dependency security check","prompt":"Before I deploy this Node.js app, can you scan my package-lock.json for any vulnerable packages and tell me what needs upgrading? Here are the full contents of my package-lock.json: [lockfile contents]"},{"title":"CI pipeline vulnerability gate","prompt":"I want to block our CI build if there are any vulnerable npm packages — can you audit this yarn.lock file and tell me if it's clean or flag any issues? [yarn.lock contents]"},{"title":"Open-source project dependency review","prompt":"I'm reviewing a contributor's pull request and want to check if their updated package-lock.json introduces any new vulnerabilities — can you analyze it and show me which packages, if any, are flagged? [lockfile contents]"}],"resultDescription":"Returns a JSON summary including whether the lockfile is clean, the total number of packages resolved, and the count and details of vulnerable packages found.","failureModes":["Malformed or incomplete lockfile content causes parsing failure","Unsupported lockfile format returns an error","Very large lockfiles may exceed payload size limits","Network timeout if the service is cold-starting on Render free tier","Payment failure via x402 protocol prevents request from being processed"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs programmatic, evidence-backed security decisions about npm dependency trees, particularly in automated CI/CD pipelines or agentic code-review workflows where human-readable audit output from npm audit is insufficient. Best suited for scenarios where a structured JSON verdict about lockfile safety is required without running npm locally.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:43:37.808Z","isFirstParty":false}