{"uid":"cap_oNaS0HYq6aWHZ2QrfI3Yz","slug":"shopify-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-5faff5d6","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-intel.agentdiet.dev/v1/cve)","url":"https://shopify-intel.agentdiet.dev/v1/cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_IAjgsamKOwj7mdqnX-6pk","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-intel.agentdiet.dev","brandSlug":"shopify-intel-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories affecting a named open-source package, returning active vulnerabilities and patched versions.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me what patched versions are available?","exampleUseCases":[{"title":"Auditing Python dependencies for CVEs","prompt":"I'm about to deploy a Python app that uses PyPI:cryptography — can you check if it has any known CVEs or security advisories right now and what versions are safe?"},{"title":"Checking npm package before install","prompt":"Before I add lodash to my project, can you look up whether npm:lodash has any open GHSA vulnerabilities or CVEs I should know about?"},{"title":"Rust crate security review","prompt":"We're using the hyper crate in our Rust service — can you scan crates.io:hyper for active vulnerabilities and tell me the latest patched version?"}],"resultDescription":"Returns a structured list of active CVEs and GHSA advisories for the queried package, including vulnerability IDs, severity ratings, affected version ranges, and patched/safe versions sourced from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns empty or error response","Unsupported ecosystem prefix causes invalid input error","OSV.dev upstream unavailability causes timeout or 503","Package with no known vulnerabilities returns empty advisory list","Malformed 'Ecosystem:name' format causes validation failure"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for a specific open-source package across PyPI, npm, Go modules, or Rust crates — especially when you need both CVE identifiers and GitHub Security Advisory (GHSA) data in a single call with patched version guidance. Prefer it over static NVD lookups when freshness matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:25.333Z","isFirstParty":false,"canonicalSlug":"shopify-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-5faff5d6"}