{"uid":"cap_Qv-nbxkSOOPo8M1yxF9mK","slug":"agent-data-tools-package-safety-metadata-lookup-43df7e1e","name":"Agent Data Tools – Package Safety & Metadata Lookup","description":"Pay-per-call tools for AI agents: web page text extraction and summaries, screenshots, image generation, speech-to-text, image description, domain and email-auth intelligence, and live Base token and wallet lookups. No account or API key; pay per request in USDC on Base via x402.","url":"https://agent-data-tools.revmesh2074.workers.dev/package?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ecosystem","name"],"properties":{"name":{"type":"string","description":"Exact package name, e.g. lodash or @scope/name"},"ecosystem":{"type":"string","description":"One of npm, pypi, cargo, go, maven, nuget"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"name":"lodash","flags":[],"exists":true,"ageDays":5282,"verdict":"ok","licenses":["MIT"],"ecosystem":"npm","advisories":[],"deprecated":false,"repository":"git+https://github.com/lodash/lodash.git","versionCount":117,"latestVersion":"4.18.1","weeklyDownloads":162476177,"knownVulnerabilities":0}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_UUzPJoeghjr5u__egZHWh","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up security, licensing, version, and download metadata for open-source packages across ecosystems (npm, PyPI, Cargo, Go, Maven, NuGet) and returns a safety verdict.","exampleAgentPrompt":"Can you check whether the npm package 'axios' is safe to use — any known vulnerabilities, advisories, or deprecation warnings?","exampleUseCases":[{"title":"Pre-install dependency security check","prompt":"Before I add 'requests' from PyPI to my project, can you check if it has any known vulnerabilities or security advisories?"},{"title":"License compliance audit","prompt":"What license does the npm package 'moment' use, and is it still actively maintained or deprecated?"},{"title":"Supply chain vetting for new package","prompt":"I've never used the Cargo crate 'serde' before — can you tell me how old it is, how many versions it has, and whether there are any known security issues?"}],"resultDescription":"Returns a JSON object with the package name, ecosystem, existence flag, age in days, a safety verdict string (e.g. 'ok'), list of licenses, list of security advisories, deprecation status, repository URL, total version count, latest version string, weekly download count, and count of known vulnerabilities.","failureModes":["Package not found in the specified ecosystem — exists:false returned","Invalid ecosystem name causes validation error","Typo in package name returns no results","Scoped npm packages (e.g. @scope/name) must be URL-encoded correctly","Rate or quota issues may return HTTP 402 if payment fails"],"whenToPreferThis":"Use this endpoint when an AI agent needs to programmatically vet an open-source package before recommending or installing it — especially for security verdicts, license checks, or deprecation status — without requiring an account or API key. Ideal for autonomous coding agents that want a pay-per-call, no-setup solution covering npm, PyPI, Cargo, Go, Maven, and NuGet in a single API.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:44:20.928Z","isFirstParty":false,"canonicalSlug":"agent-data-tools-package-safety-metadata-lookup-43df7e1e"}