{"slug":"1gateway-dev-v1-dev-vulnerabilities-92eb13","title":"Use when an agent must check a dependency before installing or upgrading","host":"1gateway.dev","method":"GET","resource":"https://1gateway.dev/v1/dev/vulnerabilities","category":"code","description":"Use when an agent must check a dependency before installing or upgrading: is this exact package version vulnerable? Input: package, ecosystem (npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist...), version. Output: JSON vulnerable yes/no, counts by severity, advisories (GHSA/CVE id, summar","price_listed":0.003,"price_asked":0.003,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":31,"reported_calls_30d":0,"reported_payers_30d":0,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"ecosystem":"npm","package":"lodash","version":"4.17.15"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"additionalProperties":false,"properties":{"ecosystem":{"description":"Package ecosystem (case-insensitive; pip/python, cargo/rust, composer, gem also accepted)","enum":["npm","PyPI","Go","Maven","crates.io","NuGet","RubyGems","Packagist","Pub","Hex","Hackage","CRAN","SwiftURL"],"examples":["npm"],"type":"string"},"package":{"description":"Package name as in its registry (Go: module path; Maven: group:artifact)","examples":["lodash"],"maxLength":214,"type":"string"},"version":{"description":"Exact released version","examples":["4.17.15"],"maxLength":64,"type":"string"}},"required":["package","ecosystem","version"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"attribution":{"type":"string"},"bySeverity":{"properties":{"critical":{"type":"integer"},"high":{"type":"integer"},"low":{"type":"integer"},"moderate":{"type":"integer"},"unknown":{"type":"integer"}},"type":"object"},"count":{"type":"integer"},"fixedVersionsMentioned":{"items":{"type":"string"},"type":"array"},"note":{"type":"string"},"package":{"properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"version":{"type":"string"}},"type":"object"},"truncated":{"type":"boolean"},"vulnerabilities":{"items":{"properties":{"advisory":{"type":["string","null"]},"aliases":{"items":{"type":"string"},"type":"array"},"cve":{"type":["string","null"]},"cvss":{"properties":{"type":{"type":"string"},"vector":{"type":"string"}},"type":["object","null"]},"cwe":{"items":{"type":"string"},"type":"array"},"fixedIn":{"items":{"type":"string"},"type":"array"},"id":{"type":"string"},"modified":{"type":["string","null"]},"published":{"type":["string","null"]},"severity":{"type":["string","null"]},"summary":{"type":["string","null"]},"url":{"type":"string"}},"type":"object"},"type":"array"},"vulnerable":{"type":"boolean"}},"required":["package","vulnerable","count","bySeverity","fixedVersionsMentioned","vulnerabilities","truncated","attribution","note"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-18","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.003,"price_match":true,"latency_ms":31,"error":null}],"description_full":"Use when an agent must check a dependency before installing or upgrading: is this exact package version vulnerable? Input: package, ecosystem (npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist...), version. Output: JSON vulnerable yes/no, counts by severity, advisories (GHSA/CVE id, summary, severity, CVSS, CWE, fixed versions, links). Data: OSV.dev. Example: ?package=lodash&ecosystem=npm&version=4.17.15","last_updated":"2026-10-18T16:32:17.137Z","schemes":["exact"]}