cve-scan x402 REST usage
Vulnerability scan for a software package by ecosystem, name and version, or by package-URL (purl). Queries OSV.dev for known advisories, collects their CVE ids and enriches them with NVD CVSS, CISA KEV and EPSS, then re...
17 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Vulnerability scan for a software package by ecosystem, name and version, or by package-URL (purl). Queries OSV.dev for known advisories, collects their CVE ids and enriches them with NVD CVSS, CISA KEV and EPSS, then re...
Package intelligence across npm / PyPI / crates: latest version, age, release cadence, deprecation/yank, license, and download stats (last day/week/month) with a rising/falling trend. Aggregates the official registry + d...
Verify a package: does it exist, is it deprecated or yanked, and does it have known vulnerabilities? Checked against the npm/PyPI/crates.io registry plus OSV.dev advisories.
The published facts about an npm package that ships an MCP server, read before running it: resolved version and publish date, package and version age, maintainer count, provenance attestation, install scripts (preinstall...
Audit up to 10 dependencies. Check up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates. Scoped npm names supported. Detail and...
npm package safety gate: vulnerabilities, malware advisories, typosquatting, install-script risk.
Check an x402 endpoint BEFORE paying it. Makes one unpaid request (never sends money), decodes the 402 terms, and verifies: the asset is a real USD stablecoin on that network, the price in USD vs your max_price_usd cap (...
Latest-release metadata from the official PyPI JSON API (live): version, license, requires_python compatibility, requires_dist dependency specs (max 100), yanked flag, last upload time and project URLs. Query: ?pkg=reque...
Use before spending tokens, money or crawler capacity fetching an unfamiliar web resource. Resolves redirects (manually, bounded, re-validated per hop) and returns deterministic HTTP/resource facts — final URL, status, c...
npm package puppeteer: latest version, description, license, homepage and repository, weekly downloads, dependency count, publish dates and dist-tags from the npm registry. Pin, audit or compare puppeteer in one call, no...
NuGet package iTextSharp: latest version, description, license, repository and download/publish data from the nuget registry API. Pin, audit or compare iTextSharp in one call, no token. $0.01 per call.
npm package vite: latest version, description, license, homepage and repository, weekly downloads, dependency count, publish dates and dist-tags from the npm registry. Pin, audit or compare vite in one call, no token. $0...
Resolve a public GitHub release into the most plausible downloadable asset for a normalized OS/architecture target, excluding source/signature/checksum files and linking checksum companions when present. Returns ambiguit...
Package risk check. Reports package existence, latest version and release, age, version count, npm weekly downloads, licenses, deprecation and known advisory severity. ok means no listed flags, not a safety guarantee. Su...
NPM package info API: package registry lookup for npm, PyPI and Cargo with latest version, age, license, deprecation, weekly downloads and OSV vulnerabilities. Dependency check before install.
NPM package info API: package registry lookup for npm, PyPI and Cargo with latest version, age, license, deprecation, weekly downloads and OSV vulnerabilities. Dependency check before install.
Check whether an isolated cart can reach checkout and expose blockers without payment. It never logs in, creates an order or finalizes checkout.