{"uid":"cap_b6OooRcU-X7EHF73HfvhQ","slug":"fastx402-package-security-audit-28e55437","name":"FastX402 Package Security Audit","description":"200 pay-per-call tools for AI agents, from $0.001 per request in USDC on Base or Solana with x402. No account, no API key.","url":"https://fastx402.tools/pkg-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["packages"],"properties":{"packages":{"type":"string","description":"JSON array of 1-25 packages: {\"ecosystem\": \"npm\" or \"pypi\", \"name\": exact name, \"version\": optional}. In a POST body it may also be the array itself"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"results":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"risk":{"type":"string"},"exists":{"type":"boolean"},"ageDays":{"type":"integer"},"license":{"type":"string"},"reasons":{"type":"array","items":{"type":"string"}},"ecosystem":{"type":"string"},"repository":{"type":"null"},"latestVersion":{"type":"string"},"firstPublished":{"type":"string"},"vulnerabilities":{"type":"array","items":{}},"weeklyDownloads":{"type":"integer"},"requestedVersion":{"type":"null"},"requestedVersionExists":{"type":"boolean"}}}},"summary":{"type":"object","properties":{"low":{"type":"integer"},"high":{"type":"integer"},"medium":{"type":"integer"}}},"checkedAt":{"type":"string"}}}}}}},"responseSchema":{"type":"json","example":{"results":[{"name":"expresss","risk":"high","exists":true,"ageDays":3714,"license":"ISC","reasons":["typosquat-like name, similar to express"],"ecosystem":"npm","repository":null,"latestVersion":"0.0.0","firstPublished":"2016-08-15T18:34:04.884Z","vulnerabilities":[],"weeklyDownloads":698,"requestedVersion":null,"requestedVersionExists":true},{"name":"requests","risk":"medium","exists":true,"ageDays":5724,"license":"Apache-2.0","reasons":["found 6 vulnerability(ies)"],"ecosystem":"pypi","repository":"https://github.com/psf/requests","latestVersion":"2.34.2","firstPublished":"2011-02-14T08:49:42.641Z","vulnerabilities":[{"id":"GHSA-9hjg-9r4m-mvj7","summary":"Requests vulnerable to .netrc credentials leak via malicious URLs","severity":"MODERATE"}],"weeklyDownloads":null,"requestedVersion":"2.31.0","requestedVersionExists":true}],"summary":{"low":0,"high":1,"medium":1},"checkedAt":"2026-10-17T16:07:22.444Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_em8herFdDXYbqwl_RhXBW","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits npm and PyPI packages for security vulnerabilities, typosquatting, license info, and risk level","exampleAgentPrompt":"Can you audit these npm packages for security issues and tell me their risk levels: express, lodash 4.17.15, and axios?","exampleUseCases":[{"title":"Pre-install dependency safety check","prompt":"Before I install these Python packages, can you check them for vulnerabilities and flag anything suspicious: requests 2.31.0, flask 2.0.0, and numpy?"},{"title":"Typosquat detection in CI pipeline","prompt":"I want to make sure none of these npm packages are typosquats of popular libraries — can you audit expresss, reacct, and lodahs for me?"},{"title":"License and risk review for open source audit","prompt":"Can you pull security and license info for these packages from both npm and PyPI: left-pad from npm, and django from pypi version 4.2.0?"}],"resultDescription":"Returns a JSON object with a results array containing per-package details (name, ecosystem, risk level, exists flag, age in days, license, reasons for risk flags, repository URL, latest version, first published date, vulnerabilities with GHSA IDs and severity, weekly downloads, requested version existence) and a summary object with counts of low/medium/high risk packages, plus a checkedAt timestamp.","failureModes":["Invalid or malformed JSON in packages query param — returns error","More than 25 packages submitted — exceeds batch limit","Package not found in the specified ecosystem — exists: false in result","Payment not received or insufficient — 402 Payment Required","Unknown ecosystem specified (must be npm or pypi) — validation error"],"whenToPreferThis":"Use this endpoint when you need fast, pay-per-call package security auditing without registering for an API key or managing subscriptions. Ideal for AI agents that need to verify dependency safety on demand, check for typosquatting, assess license compatibility, and retrieve CVE/GHSA vulnerability data for npm or PyPI packages — especially in automated CI/CD pipelines or developer tooling where per-call micropayments via x402 are acceptable.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T16:00:14.328Z","isFirstParty":false,"canonicalSlug":"fastx402-package-security-audit-28e55437"}