{"uid":"cap_ezGxJSgFwmx0y9JuUXEyP","slug":"apiacre-com-dependency-vulnerability-audit-2c4e69d3","name":"apiacre.com Dependency Vulnerability Audit","description":"Audit exact Python/PyPI, npm, Go, Maven, NuGet, crates.io, or RubyGems dependencies against OSV and return affected packages and vulnerabilities.","url":"https://apiacre.com/v1/developer/dependency-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"ecosystem":{"enum":["PyPI","npm","Go","Maven","NuGet","crates.io","RubyGems"],"type":"string"},"dependencies":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"version":{"type":"string"}}}}}},"responseSchema":{"type":"json","example":{"data":{"clean":false,"source":"https://osv.dev","findings":[{"name":"requests","version":"2.32.3","vulnerabilities":[{"id":"GHSA-9hjg-9r4m-mvj7","aliases":[],"summary":null,"modified":"2026-07-07T17:56:56.234172Z"}]}],"ecosystem":"PyPI","dependencies":1,"vulnerabilityCount":4},"meta":{"cached":false,"sources":[],"warnings":[],"duration_ms":42,"next_actions":[]},"service":"developer.dependency-audit","version":"1","request_id":"018f1f54-7f38-7ba2-8dc3-5f90272d9f1a"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4xSrGc_dYsnMQG_pIzWJr","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans exact dependency versions against the OSV vulnerability database and returns affected packages and security advisories.","exampleAgentPrompt":"Can you audit these dependencies for known vulnerabilities: lodash 4.17.20, axios 0.21.1, and express 4.17.1 in the npm ecosystem — I want to see any OSV advisories and severity ratings.","exampleUseCases":[{"title":"CI pipeline security gate","prompt":"Before I merge this PR, scan these Python packages from requirements.txt for vulnerabilities: requests==2.25.0, urllib3==1.26.3, and cryptography==3.3.1 — flag anything with a high or critical severity advisory."},{"title":"Third-party vendor dependency review","prompt":"I need to vet a vendor's software bill of materials — can you check these npm packages for known CVEs: moment 2.29.1, serialize-javascript 5.0.1, and node-fetch 2.6.1?"},{"title":"Routine dependency health check","prompt":"Run a vulnerability audit on my Go modules: golang.org/x/net v0.0.0-20210226172049-4d7f7f7b7e7e and golang.org/x/crypto v0.0.0-20201221181555-eec23a3978ad — show me any OSV advisories that apply."}],"resultDescription":"Returns a list of affected packages with matched vulnerability advisories from the OSV database, including advisory IDs, CVE references, severity levels, affected version ranges, and remediation recommendations where available.","failureModes":["Unknown ecosystem or package name returns no matches or an error","Malformed version string causes validation failure","Package not found in OSV database returns empty advisory list","Rate limiting or quota exceeded returns payment/quota error","Network timeout if OSV database is temporarily unavailable"],"whenToPreferThis":"Use this endpoint when you need to programmatically check exact pinned dependency versions against the OSV vulnerability database in an automated or agentic workflow, especially when integrating security checks into CI/CD pipelines or software supply chain audits. It is preferable to manual OSV.dev lookups when processing multiple packages at once or when building automated advisory alerting systems.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T06:39:35.270Z","isFirstParty":false}