{"uid":"cap_oSfm-K9yq6AmTqel9wIaX","slug":"sourcevane-security-npm-package-vulnerability-intelligence-a6585aed","name":"Sourcevane Security - NPM Package Vulnerability Intelligence","description":"Pay-per-call vulnerability intelligence for AI agents: CVSS (NVD) + exploit probability (EPSS) + active-exploitation status (CISA KEV) + affected packages (OSV), joined into a single 0-100 priority score, billed per call over x402.","url":"https://sourcevane-security-production.up.railway.app/v1/intel/package/npm/lodash?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","properties":{"properties":{"type":"string"}}},"responseSchema":{"type":"json","example":{"highestPriority":80,"vulnerabilityCount":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_5iIISRqsxZZ9A2hJptCsN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a consolidated 0-100 priority score and vulnerability intelligence for an npm package by combining CVSS, EPSS exploit probability, CISA KEV active-exploitation status, and OSV affected package data.","exampleAgentPrompt":"Can you pull the full vulnerability intelligence report for the npm package lodash — I want the combined priority score, how many CVEs it has, and whether any are actively being exploited in the wild right now?","exampleUseCases":null,"resultDescription":"A JSON object containing a 0-100 priority score (highestPriority), total vulnerability count, and underlying signals including CVSS severity, EPSS exploit probability, CISA KEV active-exploitation flag, and OSV-derived affected package version ranges for the queried npm package.","failureModes":["Package not found in NVD/OSV — returns empty vulnerability list or 404","Network timeout if upstream data sources (NVD, EPSS, CISA KEV) are slow","Payment not processed via x402 — returns 402 Payment Required","Invalid ecosystem or package name format — returns 400 Bad Request","Rate limiting if too many calls in short succession"],"whenToPreferThis":"Choose this endpoint when you need a single consolidated risk score for an npm package that combines multiple authoritative vulnerability sources (NVD, EPSS, CISA KEV, OSV) rather than querying each source separately. Ideal for automated dependency audits, CI/CD pipeline security gates, or agent workflows that need to triage which packages to patch first based on real-world exploit activity, not just CVSS severity alone.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:33:43.770Z","isFirstParty":false,"canonicalSlug":"sourcevane-security-npm-package-vulnerability-intelligence-a6585aed"}