{"uid":"cap_SO7TMpI2R1ZJzZwhvs8xk","slug":"dependency-risk-scanner-26893b69","name":"Dependency Risk Scanner","description":"Inspect dependency manifests for missing versions, risky install scripts, unknown licenses, and policy issues without claiming to replace a live CVE database.","url":"https://i3p3mgbsn54dvlivnk6wbumal40eqtsn.lambda-url.us-east-1.on.aws/v1/dependency-risk-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.35","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.35/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.35","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.35","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JxjFjq_sA59EWpfOdcT9l","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.35","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Inspects dependency manifests for missing versions, risky install scripts, unknown licenses, and policy violations without requiring a live CVE database.","exampleAgentPrompt":"Scan this package.json for dependency risks — flag any missing version pins, suspicious install scripts, unknown or risky licenses, and policy violations: {paste manifest content here}.","exampleUseCases":[{"title":"License compliance audit before release","prompt":"Before we ship this library, check our package.json for any dependencies with unknown or potentially problematic licenses — we need to stay BSD/MIT only per our company policy."},{"title":"CI pipeline dependency gate","prompt":"Run a dependency risk scan on this requirements.txt and flag anything with missing version pins, risky install scripts, or policy violations so we can block the build if needed."},{"title":"Open source contribution review","prompt":"We just got a pull request that adds 5 new npm packages — can you inspect this updated package.json for any suspicious install scripts, unpinned versions, or license issues before we merge?"}],"resultDescription":"Returns a structured list of risk findings per dependency, including flags for missing or unpinned versions, detected risky install scripts, unrecognized or policy-violating licenses, and general policy issues — without claiming to be a live CVE vulnerability database.","failureModes":["Malformed or unparseable manifest content returns a validation error","Unsupported manifest format (e.g. exotic package managers) may yield incomplete results","Very large manifests may hit payload size limits","Unknown licenses flagged as 'unknown' rather than definitively safe or unsafe","No live CVE data — does not detect known vulnerability IDs"],"whenToPreferThis":"Choose this endpoint when you need fast, static analysis of a dependency manifest for structural issues (unpinned versions, install scripts, license clarity, policy) rather than a live CVE or vulnerability database lookup. Ideal for CI/CD gates, pre-merge checks, and compliance audits where you want deterministic, policy-based risk signals without external database latency or cost.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T12:37:12.309Z","isFirstParty":false,"canonicalSlug":"dependency-risk-scanner-26893b69"}