{"uid":"cap_V3_DrLpPVbyITEHsnYobo","slug":"pkgpulse-pypi-preflight-check-63a5934e","name":"pkgpulse PyPI Preflight Check","description":"Dependency intelligence for AI coding agents, paid per-call via x402 (USDC on Base): npm package health scores with a disclosed rubric, typosquat checks, dependency audits, OSV known-vulnerability scans (npm, PyPI, Go, crates.io, Maven and more) and PyPI preflight checks. Free index at /, free sample at /api/sample.","url":"https://pkgpulse.letom1176.workers.dev/api/pypi-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["name"],"properties":{"name":{"type":"string","description":"PyPI project name, e.g. requests"},"version":{"type":"string","description":"Optional PEP 440 pin or specifier (==2.31.0, >=2.28,<3). Omit for latest"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"name":"reqeusts","exists":false,"verdict":"stop","headline":"reqeusts is NOT on PyPI. It resembles requests: likely a typo or a hallucinated name.","lookalike":{"matches":[{"popular_name":"requests","edit_distance":1,"popular_downloads_30d":1208056002}],"risk_level":"medium"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_idcvcDorj0XATK977JqfL","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a PyPI package name exists, detects typosquatting and hallucinated names, and returns a safety verdict before installation.","exampleAgentPrompt":"Before I add it to requirements.txt, check whether 'reqeusts' is a real PyPI package or a typo — and let me know if it looks like a typosquat of anything popular.","exampleUseCases":[{"title":"Validate AI-generated dependency names","prompt":"I just got a list of Python packages from an AI assistant — can you check whether 'beautifulsoup5' actually exists on PyPI or if it's a hallucinated name?"},{"title":"Catch typosquat before pip install","prompt":"Before I run pip install 'colourama', can you verify it's a legitimate PyPI package and not a typosquat of something popular?"},{"title":"Preflight check on pinned package version","prompt":"Check if 'numpy==1.24.99' is a real PyPI package at that version, or if the name or version looks suspicious."}],"resultDescription":"Returns a JSON object with: whether the package exists on PyPI, a verdict string (e.g. 'stop', 'caution', 'ok'), a human-readable headline explaining the finding, and a lookalike object listing close matches by edit distance along with their 30-day download counts and an overall risk level.","failureModes":["Missing 'name' query parameter returns a validation error","Network timeout from PyPI API upstream causes a 502 or error response","Very obscure packages may have limited lookalike data","Version specifier syntax errors may cause unexpected behavior","Payment failure via x402 returns 402 with payment details before any data is returned"],"whenToPreferThis":"Use this endpoint when you need a fast, single-package PyPI existence and typosquat check — especially when validating package names generated by AI coding assistants or received from untrusted sources. Prefer it over general OSV vulnerability scans when the primary concern is whether the package name itself is legitimate, not whether it has known CVEs.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T19:04:56.146Z","isFirstParty":false,"canonicalSlug":"pkgpulse-pypi-preflight-check-63a5934e"}