{"uid":"cap_oYUONHXufhOL27pBN_T6q","slug":"factstamp-package-dependency-checker-d2356b31","name":"Factstamp Package Dependency Checker","description":"Reports on a dependency at the point of installation. Give a package and, optionally, a version with its ecosystem (npm, PyPI, crates.io); the answer says whether that exact version exists, whether it is yanked or deprecated, and every advisory OSV lists against it. A version that was never published returns not_found with the real versions nearest to it. Verdicts: verified, advisory, yanked, not_found, unknown.","url":"https://agents.factstamp.dev/package?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input","output"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"body":{"type":"object"},"type":{"const":"http"},"method":{"const":"POST"},"bodyType":{"const":"application/json"}},"additionalProperties":true},"output":{"type":"object","required":["type","example"],"properties":{"type":{"const":"json"},"example":{"type":"object"}},"additionalProperties":true}},"additionalProperties":false},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_q-OTi1OsS79QwdzcMVLkJ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a specific package version against existence, deprecation/yanked status, and all OSV security advisories at install time","exampleAgentPrompt":"Before we ship, check whether lodash version 4.17.20 on npm is safe — I need to know if it exists, if it's yanked, and whether there are any OSV security advisories against it.","exampleUseCases":[{"title":"Pre-deploy dependency audit","prompt":"We're about to deploy and I want to make sure requests 2.28.0 on PyPI is safe — can you check if that version exists, whether it's been yanked, and if there are any known security advisories against it?"},{"title":"Rust crate vulnerability check","prompt":"Check crates.io for serde version 1.0.150 — does it exist, is it yanked, and are there any OSV advisories I should know about before adding it to our Cargo.toml?"},{"title":"Investigate suspicious npm package version","prompt":"Someone pinned our project to left-pad version 1.1.3 on npm — can you verify that version actually exists, whether it's deprecated, and if any security advisories apply to it?"}],"resultDescription":"A JSON object containing a verdict (one of: verified, advisory, yanked, not_found, or unknown), the OSV advisory list (with IDs, severity, and details) if any exist, whether the version is yanked or deprecated, and — if the version was never published — the nearest real versions that do exist in that ecosystem.","failureModes":["Package ecosystem not supported — returns unknown verdict","Version never published — returns not_found with nearest real versions","Package name misspelled or nonexistent — returns not_found","OSV data temporarily unavailable — may return unknown","Malformed request body — HTTP 400 error","Payment not attached or insufficient — HTTP 402 error"],"whenToPreferThis":"Choose this endpoint when you need a point-in-time, authoritative check on a specific package version at install or ship time — combining existence, yanked/deprecated status, and full OSV advisory data in a single call. Prefer it over querying npm/PyPI/OSV APIs separately when you need a single structured verdict. Particularly valuable in CI/CD pipelines, agent-driven dependency resolution, or document fact-checking workflows where a clear verdict enum (verified/advisory/yanked/not_found/unknown) is needed rather than raw registry data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:19:31.903Z","isFirstParty":false,"canonicalSlug":"factstamp-package-dependency-checker-d2356b31"}