{"uid":"cap_WvzFs233niAiYLuE6sUYv","slug":"hn-pulse-agentdiet-dev-real-time-open-source-package-cve-ghsa-326e9fd3","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://hn-pulse.agentdiet.dev/v1/cve-lookup)","url":"https://hn-pulse.agentdiet.dev/v1/cve-lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_-lX6qtW87DlHwYba3Afc1","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"hn-pulse.agentdiet.dev","brandSlug":"hn-pulse-agentdiet-dev-mpp","brandBaseUrl":"https://hn-pulse.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the npm package lodash has any active CVEs or GHSA security advisories right now, and tell me which versions have patches?","exampleUseCases":[{"title":"Pre-deployment dependency security audit","prompt":"Before I deploy this Python service, can you check if the requests package on PyPI has any active CVEs or GHSA advisories, and let me know which version I should upgrade to if there are fixes?"},{"title":"Go module vulnerability check in CI","prompt":"I need to know if golang.org/x/net has any known vulnerabilities I should be worried about — look it up and tell me if there are patched versions available."},{"title":"Rust crate security review","prompt":"Can you scan the hyper crate on crates.io for any active CVEs or security advisories before I add it as a dependency to my Rust project?"}],"resultDescription":"Returns a structured list of active vulnerabilities for the queried package, including CVE IDs, GHSA advisory identifiers, severity information, affected version ranges, and recommended patched versions sourced from Google OSV.dev in real time.","failureModes":["Package not found in OSV.dev — returns empty or error if the ecosystem/name combination is invalid","Malformed package identifier (e.g. missing ecosystem prefix for ambiguous names) — may return no results or an error","OSV.dev upstream unavailability — may return a 5xx or timeout","No known vulnerabilities — returns an empty advisory list, which could be confused with an error","Rate limiting or payment failure ($0.015/call via x402) — returns HTTP 402 if payment is not provided"],"whenToPreferThis":"Use this endpoint when you need real-time, authoritative vulnerability data from Google OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates — especially when you need CVE and GHSA advisory IDs alongside patched version recommendations. Prefer this over static SCA databases when freshness and live intelligence matter, such as in CI/CD pipelines, pre-deployment audits, or agent-driven dependency reviews.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:41.747Z","isFirstParty":false,"canonicalSlug":"hn-pulse-agentdiet-dev-real-time-open-source-package-cve-ghsa-83ed8d11"}