Package Dependency Risk Scanner

Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable. One search per call (result caps in the input schema); failed lookups are not charged.

Open endpoint ↗

Price per call: $0.01
Chain: Base
Method: POST
Paid calls · 30 days: 3

Call it from code

This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";

const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });

const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://agent-data.centorprat.workers.dev/tools/package-dependency-risk-scanner", { method: "POST" });
console.log(await res.json());

https://agent-data.centorprat.workers.dev/tools/package-dependency-risk-scanner