{"uid":"cap_xNabEfnKKpX1WDbaSK4GX","slug":"llms-generator-agentdiet-dev-real-time-open-source-package-cve-ghsa-8d1f89b3","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://llms-generator.agentdiet.dev/v1/vuln-scanner)","url":"https://llms-generator.agentdiet.dev/v1/vuln-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.010000/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.010000","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.010000","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QO6YDFg9nKipG_oT6d3cV","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.010000","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":"llms-generator.agentdiet.dev","brandSlug":"llms-generator-agentdiet-dev-mpp","brandBaseUrl":"https://llms-generator.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions are patched?","exampleUseCases":[{"title":"Pre-deploy dependency security check","prompt":"Before I deploy my app, can you scan 'PyPI:requests' for any known CVEs or GHSA advisories and tell me if there are patched versions I should upgrade to?"},{"title":"Audit npm package before adding to project","prompt":"I'm about to add lodash to my project — can you check 'npm:lodash' for any active security vulnerabilities or advisories and let me know what the safe version is?"},{"title":"Rust crate vulnerability scan for CI pipeline","prompt":"Check 'crates.io:hyper' for any known CVEs or GitHub Security Advisories so I can decide whether it's safe to use in production."}],"resultDescription":"Returns a structured object listing active CVEs and GHSA advisory IDs affecting the queried package, the affected version ranges, severity information, and the versions in which vulnerabilities are patched, sourced from live Google OSV.dev data.","failureModes":["Unknown or misspelled package name returns empty or error response","Unsupported ecosystem results in a validation error","OSV.dev upstream unavailability causes timeout or 502","Malformed 'Ecosystem:name' format triggers input validation failure","Package with no known vulnerabilities returns an empty advisories list (not an error)"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative vulnerability data for open source packages across PyPI, npm, Go, or Rust (crates.io) ecosystems backed by Google OSV.dev intelligence. Prefer it over static advisory databases or bundled SAST tools when you need live CVE and GHSA advisory lookups with patched-version guidance for a specific named package, especially in agentic CI/CD, dependency auditing, or security review workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:50.052Z","isFirstParty":false,"canonicalSlug":"llms-generator-agentdiet-dev-real-time-open-source-package-cve-ghsa-99e375d4"}