{"uid":"cap_smh2l1XyoIE_xv3fDl5_R","slug":"npm-package-preflight-check-de1b86fd","name":"NPM Package Preflight Check","description":"Check npm package metadata, maintenance signals, deprecation, license, dependencies, and OSV vulnerabilities.","url":"https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/software/npm-package-preflight?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["package"],"properties":{"package":{"type":"string","example":"express","pattern":"^(?:@[A-Za-z0-9][A-Za-z0-9._~-]*/)?[A-Za-z0-9][A-Za-z0-9._~-]*$","maxLength":214,"minLength":1,"description":"npm package name, including an optional scope."},"version":{"type":"string","example":"4.18.2","maxLength":80,"minLength":1,"description":"Exact npm version or latest. Defaults to latest."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","x-schema-family":"STRUCTURED_PRODUCT_RESULT","x-schema-authority":"STRUCTURED_PRODUCT_RESULT","additionalProperties":true}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.015","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_hlf5FZodOyePa9C9L87ag","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks npm package metadata, maintenance signals, deprecation status, license, dependencies, and OSV vulnerabilities before installation or use.","exampleAgentPrompt":"Before I add lodash to my project, can you run a preflight check on it — I want to know if it's deprecated, any known OSV vulnerabilities, its license, and whether it's still actively maintained?","exampleUseCases":[{"title":"Security audit before npm install","prompt":"Can you check the npm package 'colors' version 1.4.0 for any known vulnerabilities, deprecation warnings, and license issues before I install it?"},{"title":"Open source license compliance check","prompt":"I need to verify that 'axios' on npm has a permissive license compatible with commercial use and isn't flagged for any supply chain issues — can you run a preflight on it?"},{"title":"Unmaintained dependency review","prompt":"We're auditing our dependencies — can you check if 'request' on npm is still maintained, whether it's deprecated, and pull up any OSV advisories associated with it?"}],"resultDescription":"Returns structured metadata for the specified npm package including: package name and version details, deprecation status, maintenance signals (release recency, activity), license type, dependency list, and any OSV (Open Source Vulnerabilities) advisories matching the package.","failureModes":["Package not found on npm registry — returns 404 or error indicating unknown package","Invalid package name format — returns validation error","Network or registry timeout when fetching npm or OSV data","Rate limit or payment failure — x402 payment required at $0.015 USDC per call","Version not found for specified package version"],"whenToPreferThis":"Choose this endpoint when an AI agent needs to vet an npm package before installing or integrating it — especially for supply chain security, license compliance, or dependency health checks. Prefer it over general web search when you need structured, machine-readable vulnerability and maintenance data sourced directly from the npm registry and OSV database.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-02T18:33:21.907Z","isFirstParty":false,"canonicalSlug":"npm-package-preflight-check-de1b86fd"}