{"uid":"cap_fl3iVltYwUfL5set6LdJm","slug":"alpha-stream-agentdiet-dev-real-time-open-source-package-cve-ghsa-9e4f9f89","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/zero-day-advisories)","url":"https://alpha-stream.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ShsOTtbqErnmiqGsj2lvg","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"alpha-stream.agentdiet.dev","brandSlug":"alpha-stream-agentdiet-dev-mpp","brandBaseUrl":"https://alpha-stream.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev live vulnerability data for a given PyPI, npm, Go, or Rust package and returns active CVEs, GHSA advisories, and patched version information.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories right now, and tell me which versions are patched?","exampleUseCases":[{"title":"Pre-deployment dependency security check","prompt":"Before I deploy my new Python service, can you scan the 'PyPI:cryptography' package for any active CVEs or GHSA advisories and let me know if there's a safe patched version I should upgrade to?"},{"title":"Auditing a Node.js project's lodash dependency","prompt":"I'm using lodash in my Node.js app — can you pull up any current vulnerability advisories for 'npm:lodash' from OSV.dev, including affected versions and any available fixes?"},{"title":"Rust crate security review before open-source release","prompt":"We're about to release our Rust project publicly but want to make sure 'crates.io:hyper' doesn't have any known security issues — can you check for active CVEs and advisories and what patched version I should be on?"}],"resultDescription":"Returns a structured object containing active vulnerability records for the queried package sourced from Google OSV.dev, including CVE and GHSA advisory IDs, severity information, affected version ranges, and available patched versions.","failureModes":["Package not found or unrecognized ecosystem prefix returns empty results or error","Malformed package identifier (missing ecosystem or typo) may return no results","OSV.dev upstream unavailability could cause timeout or partial data","Payment failure (HTTP 402) if x402 micropayment is not completed","Rate limiting or quota exhaustion on the upstream OSV.dev API"],"whenToPreferThis":"Choose this endpoint when you need real-time, live CVE and GHSA vulnerability data for a specific open-source package across PyPI, npm, Go, or Rust ecosystems — especially when you need the most current advisory intelligence directly from OSV.dev rather than a static or cached database. Prefer it for automated security checks in CI/CD pipelines, agent-driven dependency audits, or pre-deployment risk assessments.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:24:45.726Z","isFirstParty":false,"canonicalSlug":"alpha-stream-agentdiet-dev-real-time-open-source-package-cve-ghsa-82c19d0f"}