{"uid":"cap_rIlfJNqEeapwZnwIOvhEx","slug":"github-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-c8805d2c","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/npm-vuln-scan)","url":"https://github-audit.agentdiet.dev/v1/npm-vuln-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_18DfpPE6wkR10XTfhNmtn","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Check if the npm package lodash has any known CVEs or GHSA security advisories, and tell me which versions have patches available.","exampleUseCases":[{"title":"Auditing Python dependencies for CVEs","prompt":"Scan the PyPI package 'requests' for any active CVEs or GHSA advisories and tell me which versions are safe to upgrade to."},{"title":"Checking Rust crate before production deployment","prompt":"Before I ship this release, can you check if the Rust crate 'hyper' on crates.io has any known vulnerabilities I should know about?"},{"title":"Go module security review","prompt":"Does the Go module golang.org/x/net have any open security advisories or CVEs right now? I want to know the affected versions and whether patches exist."}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory references, affected version ranges, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns empty results or a not-found error","Invalid ecosystem prefix causes a parsing error or no match","OSV.dev upstream API unavailability causes a 502 or timeout","Package with no known vulnerabilities returns an empty advisories list, which may be misread as an error","Missing required 'package' query parameter returns a 400 validation error"],"whenToPreferThis":"Use this endpoint when you need real-time, authoritative vulnerability data directly from Google OSV.dev for PyPI, npm, Go, or Rust crate packages. Prefer it over static NVD database lookups when you need live CVE and GHSA advisory coverage with patched version guidance. It is especially useful in CI/CD pipelines, dependency audits, or supply chain security workflows where up-to-date patch information matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:46.337Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-efe6e5d6"}