{"uid":"cap_qheWDg8hp4pB3vLixwR3Z","slug":"alpha-stream-agentdiet-dev-real-time-open-source-package-cve-ghsa-9d6f685b","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://alpha-stream.agentdiet.dev/v1/go-module-cve)","url":"https://alpha-stream.agentdiet.dev/v1/go-module-cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_rJodhNi2ACwdDU_7hKjzg","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"alpha-stream.agentdiet.dev","brandSlug":"alpha-stream-agentdiet-dev-mpp","brandBaseUrl":"https://alpha-stream.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time for any PyPI, npm, Go, or Rust package and returns active CVEs, GHSA advisories, and patched versions.","exampleAgentPrompt":"Check PyPI:requests against OSV.dev and tell me if there are any active CVEs or GHSA advisories, and what the patched versions are.","exampleUseCases":[{"title":"Pre-deployment dependency security audit","prompt":"Before we deploy, can you scan npm:lodash against OSV.dev and tell me if there are any active CVEs or security advisories I should be aware of?"},{"title":"Go module vulnerability check","prompt":"Check Go:golang.org/x/net for any known CVEs or GHSA advisories right now — I want to know if we need to upgrade before shipping this release."},{"title":"Rust crate security review","prompt":"Is crates.io:hyper vulnerable to anything currently listed on OSV.dev? Give me all active advisories and the versions that have patches."}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory references, vulnerability descriptions, severity information, and patched/fixed version numbers for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or no-vulnerability result","Invalid ecosystem prefix causes parsing error or 400 response","OSV.dev upstream unavailability causes timeout or 503","Malformed package identifier (missing colon separator) may return error","Package with no known vulnerabilities returns empty advisories list"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open source packages across PyPI, npm, Go modules, or Rust crates, especially when you want both CVE and GHSA advisory coverage in a single call. Prefer this over static database checks when freshness matters (e.g., pre-deployment gates, CI/CD pipelines, or dependency onboarding reviews).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:24:35.721Z","isFirstParty":false,"canonicalSlug":"alpha-stream-agentdiet-dev-real-time-open-source-package-cve-ghsa-82c19d0f"}