{"uid":"cap_tJl1CIXJPqUXe5BUb_yLs","slug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-16473835","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/epss-scanner)","url":"https://x402-audit.agentdiet.dev/v1/epss-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QY9SLbmrogrhjc3xDQYwX","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which versions have patches?","exampleUseCases":[{"title":"Pre-deploy dependency security check","prompt":"Before I ship this update, can you scan 'npm:lodash' against OSV.dev and tell me if there are any unpatched CVEs or GitHub Security Advisories I should know about?"},{"title":"Rust crate vulnerability audit","prompt":"I'm adding 'crates.io:hyper' to my project — does it have any known vulnerabilities in OSV.dev, and if so, what's the earliest patched version I should upgrade to?"},{"title":"Go module supply chain review","prompt":"Can you pull the latest vulnerability intelligence from OSV.dev for 'Go:golang.org/x/net' and list all active CVEs and their severity levels?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory references, vulnerability descriptions, affected version ranges, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or no-vulnerability result","Malformed package identifier format causes a 400 bad request error","Upstream OSV.dev API unavailability leads to timeout or 503 error","Payment not processed (HTTP 402) if x402 payment header is missing or insufficient","Ambiguous package name without ecosystem prefix may return incorrect results"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates — especially when you need both CVE and GHSA advisory coverage in a single call with patched version guidance. Prefer it over static NVD lookups when freshness matters or when auditing supply chain risk before deployment.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:20.275Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-ed5903c2"}