{"uid":"cap_tUK-zURzS8jphqZKJVenH","slug":"pkgpulse-pypi-preflight-audit-0ba64b6e","name":"pkgpulse PyPI Preflight Audit","description":"Dependency intelligence for AI coding agents, paid per-call via x402 (USDC on Base): npm package health scores with a disclosed rubric, typosquat checks, dependency audits, OSV known-vulnerability scans (npm, PyPI, Go, crates.io, Maven and more) and PyPI preflight checks. Free index at /, free sample at /api/sample.","url":"https://pkgpulse.letom1176.workers.dev/api/pypi-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["names"],"properties":{"names":{"type":"string","description":"Comma-separated PyPI projects, optionally pinned: requests==2.19.0,numpy"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"summary":{"clean":1,"audited":3,"lookalikes":0,"not_on_pypi":1,"with_known_vulnerabilities":1},"verdict":"STOP: requirements name projects that do not exist on PyPI (hallucination/squat vector)"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_HUKSLOGmS_zSrGFx6X0mD","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a list of PyPI package names for typosquats, hallucinated packages, known vulnerabilities, and overall safety before installing them","exampleAgentPrompt":"Before I run pip install, can you audit these Python packages for typosquats, hallucinations, and known vulnerabilities: requests==2.28.0,numpy,fastapi==0.95.1,cryptograpy?","exampleUseCases":[{"title":"AI-generated requirements safety check","prompt":"My coding agent just generated a requirements.txt with these packages: langchain==0.1.0,openai,tiktoken,pydantic,fstapi — can you verify they all actually exist on PyPI and flag any that look like typosquats or hallucinations?"},{"title":"Pre-install vulnerability scan","prompt":"Before I install these Python packages in my project, check them for known security vulnerabilities and tell me if any have CVEs I should know about: pillow==9.0.0,urllib3==1.26.4,paramiko"},{"title":"CI pipeline dependency gate","prompt":"I want to block our deployment if any of our Python dependencies are flagged as unsafe — can you audit this list and give me a stop-or-go verdict: boto3,django==4.2.0,psycopg2-binary,cryptography==38.0.0?"}],"resultDescription":"Returns a JSON object with a summary containing counts of audited, clean, lookalike, not-on-PyPI, and vulnerability-affected packages, plus a human-readable verdict string (e.g. 'STOP: requirements name projects that do not exist on PyPI') indicating whether the package list is safe to install.","failureModes":["Missing 'names' query parameter returns an error","Non-existent or misspelled package names are flagged as not_on_pypi","Payment not included or invalid x402 USDC payment results in 402 Payment Required","Rate limiting or Cloudflare Worker timeout for very large package lists","OSV database unavailability may cause incomplete vulnerability results"],"whenToPreferThis":"Use this endpoint when you need to validate Python (PyPI) package dependencies specifically — especially when packages were generated by an AI coding agent and may be hallucinated, or when you want a combined typosquat + vulnerability + existence check in a single call before running pip install or updating a requirements.txt file. Prefer it over generic OSV scanners when you need the hallucination/existence check bundled with security scanning.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T19:04:25.558Z","isFirstParty":false,"canonicalSlug":"pkgpulse-pypi-preflight-audit-0ba64b6e"}