{"uid":"cap_SjaTgYSbxB_mmRfs0IT1p","slug":"attestpage-package-security-checker-b3dc2fd4","name":"AttestPage Package Security Checker","description":"Checks up to 10 npm, PyPI or crates names: listed, version, licence, OSV.dev advisories. US$0.005 per call; POST names.","url":"https://s2h6qt73jtzlgbgnnfacln2poq.srv.us/v1/check/packages?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"packages":{"type":"array","items":{"type":"object","required":["ecosystem","name"],"properties":{"name":{"type":"string","description":"Package name as you would install it (npm names may be scoped: @scope/name)."},"version":{"type":"string","maxLength":64,"description":"Optional: the version you will install (e.g. a pinned 4.17.20). Advisories are then listed for this version; without it, for the latest."},"ecosystem":{"enum":["npm","pypi","crates"],"type":"string"}},"additionalProperties":false},"maxItems":10,"minItems":1,"description":"1 to 10 packages to look up. Each is { ecosystem, name, version? }; ecosystem is npm, pypi or crates (crates.io)."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_x4QRp6Jl3nZ738mreOFPZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x036CbD53842c5426634e7929541eC2318f3dCF7e","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks up to 10 npm, PyPI, or crates.io packages for registry status, version info, licence, and OSV.dev security advisories","exampleAgentPrompt":"Can you check whether the npm packages lodash@4.17.20 and axios, plus the PyPI package requests, have any known security advisories or licence issues?","exampleUseCases":[{"title":"Pre-install dependency security audit","prompt":"Before I add these packages to my project, can you check for any known vulnerabilities: npm package express version 4.18.2, PyPI package flask version 2.3.0, and crates package tokio version 1.28.0?"},{"title":"Open source licence compliance review","prompt":"I need to check the licences on a few packages we're using — can you look up the licence info for the npm packages react and redux, and the PyPI package numpy?"},{"title":"Ongoing CVE monitoring for pinned dependencies","prompt":"Can you look up any OSV.dev advisories for these exact pinned versions: PyPI pillow 9.5.0, npm serialize-javascript 6.0.0, and crates openssl-sys 0.9.87?"}],"resultDescription":"For each queried package, the endpoint returns whether it is listed in the registry, its current or specified version, its licence, and any OSV.dev security advisories applicable to that version (or the latest version if none specified).","failureModes":["Package name not found in the specified ecosystem — returns unlisted status","Unsupported ecosystem value (only npm, pypi, crates accepted)","More than 10 packages submitted — request rejected","Network or OSV.dev upstream timeout — advisory data may be incomplete","Invalid version string format — advisory lookup may fall back to latest"],"whenToPreferThis":"Use this endpoint when you need a quick, multi-ecosystem, combined check of package existence, version, licence, and OSV.dev vulnerability data in a single call. Ideal for pre-install audits, CI pipeline checks, or licence compliance sweeps across npm, PyPI, and crates.io. It is cost-effective at $0.005 per call for up to 10 packages simultaneously, and returns signed, timestamped data suitable for audit trails.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-27T12:58:20.751Z","isFirstParty":false,"canonicalSlug":"attestpage-package-security-checker-b3dc2fd4"}