{"uid":"cap_gNsaQR0daawGz8ere94Bo","slug":"safe-upgrade-decision-api-18aaf804","name":"Safe Upgrade Decision API","description":"Evidence-backed npm package upgrade decisions for coding agents.","url":"https://x402-safe-upgrade-api.onrender.com/v1/dependency-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"dependencies":{"type":"object","description":"Package-name to version map, exactly as in package.json (max 100 entries).","additionalProperties":{"type":"string"}}}},"responseSchema":{"type":"json","example":{"summary":{"audited":2,"deprecated":0,"attentionNeeded":["express"],"withKnownVulnerabilities":1},"packages":[{"name":"express","status":"audited","vulnerabilities":[{"id":"GHSA-example"}]}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.25","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.25/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bDNNGuHwOA7WC074j5k01","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.25","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits npm package dependencies for vulnerabilities, deprecations, and upgrade safety, returning evidence-backed recommendations for coding agents.","exampleAgentPrompt":"Can you audit my npm dependencies for security vulnerabilities and deprecations? Here's my dependency map: { \"express\": \"4.18.2\", \"lodash\": \"4.17.20\", \"axios\": \"1.3.0\" }","exampleUseCases":[{"title":"Pre-deploy security check","prompt":"Before I push this Node.js app to production, can you scan these dependencies for known CVEs or deprecated packages? { \"express\": \"4.18.2\", \"mongoose\": \"6.8.0\", \"jsonwebtoken\": \"8.5.1\" }"},{"title":"CI pipeline dependency gate","prompt":"I want to block my CI build if any of these npm packages have known vulnerabilities — can you audit them and tell me which ones need attention? { \"webpack\": \"5.75.0\", \"babel-core\": \"6.26.3\", \"react\": \"18.2.0\" }"},{"title":"Legacy codebase upgrade triage","prompt":"My project has a bunch of old npm packages and I need to know which ones are actually dangerous to keep using — can you check these for vulnerabilities and flag anything critical? { \"request\": \"2.88.2\", \"moment\": \"2.29.1\", \"underscore\": \"1.13.1\" }"}],"resultDescription":"Returns a JSON object with a summary (count of audited packages, number deprecated, list of packages needing attention, count with known vulnerabilities) and a per-package breakdown including vulnerability IDs (e.g. GHSA identifiers), status, and any relevant advisory details.","failureModes":["Input exceeds 100 package limit — request is rejected","Invalid package name or version format causes validation error","Unknown package not found in registry returns partial or missing data","Service unavailable on Render cold start causing timeout","Payment not completed via x402 protocol results in 402 response blocking the call"],"whenToPreferThis":"Use this endpoint when a coding agent needs fast, evidence-backed vulnerability and deprecation signals for npm packages specifically, without running a full local `npm audit` process — ideal for CI pipelines, automated code review agents, or pre-deploy safety checks where access to the local filesystem is unavailable.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T20:28:52.790Z","isFirstParty":false}