{"uid":"cap_Wqa9ifb6-GUBSYnrbYc2l","slug":"sitecheck-package-info-lookup-29110bf5","name":"SiteCheck Package Info Lookup","description":"Facts about a package on npm, PyPI or crates.io: latest version and date, license, description, repository, maintainers (npm), weekly downloads (npm), a deprecated or yanked flag, and how many known vulnerabilities the latest version has (OSV).","url":"https://api.sitecheck-api.workers.dev/api/package?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ecosystem","name"],"properties":{"name":{"type":"string","description":"Package name"},"ecosystem":{"type":"string","description":"npm, pypi or crates"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"name":"express","source":"npm registry and npm downloads API, vulnerabilities from OSV (https://osv.dev)","license":"MIT","checkedAt":"2026-10-14T04:49:24.763Z","ecosystem":"npm","deprecated":false,"repository":"https://github.com/expressjs/express","description":"Fast, unopinionated, minimalist web framework","maintainers":5,"publishedAt":"2026-10-09T12:56:54.505Z","latestVersion":"5.3.0","vulnerabilities":{"ids":[],"count":0,"forVersion":"5.3.0"},"weeklyDownloads":145199376,"deprecationMessage":null}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ZaIE_af9ZU52Wofy6BTbf","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves metadata, license, vulnerability, and download statistics for a software package from npm, PyPI, or crates.io","exampleAgentPrompt":"Can you check the express package on npm — is it deprecated, what's the latest version, and does it have any known vulnerabilities?","exampleUseCases":[{"title":"Dependency security audit before release","prompt":"Before we ship, can you check the requests package on PyPI for any known vulnerabilities in the latest version and tell me its current license?"},{"title":"Evaluating a new npm library","prompt":"I'm thinking of using the lodash npm package — can you tell me how many weekly downloads it gets, how many maintainers it has, and whether it's still actively maintained?"},{"title":"Checking a Rust crate before adoption","prompt":"Can you look up the serde crate on crates.io and tell me its latest version, license, and whether there are any known security issues?"}],"resultDescription":"Returns a JSON object with the package name, ecosystem, latest version, license, repository URL, description, number of maintainers, publish date, weekly download count, deprecation status and message, and a list of known CVE/vulnerability IDs with count for the latest version — sourced from the registry and OSV.","failureModes":["Package not found in the specified ecosystem returns an error","Invalid ecosystem value (must be npm, pypi, or crates) returns validation error","Network timeout reaching upstream registry","Vulnerability data temporarily unavailable from OSV","Package name typo results in not-found error"],"whenToPreferThis":"Use this endpoint when you need structured, aggregated package metadata — including security vulnerability data from OSV — for npm, PyPI, or crates packages in a single call. Prefer this over manually querying registries when you need license, deprecation status, download stats, and vulnerability info in one response at low cost ($0.002/call).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T06:44:35.799Z","isFirstParty":false,"canonicalSlug":"sitecheck-package-info-lookup-29110bf5"}