{"slug":"agent-data-centorprat-workers-dev-tools-package-dependency-r-9536a9","title":"Give it npm or PyPI package names","host":"agent-data.centorprat.workers.dev","method":"POST","resource":"https://agent-data.centorprat.workers.dev/tools/package-dependency-risk-scanner","category":"company","description":"Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable. One search per c","price_listed":0.01,"price_asked":0.01,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":392,"reported_calls_30d":2,"reported_payers_30d":2,"networks":["eip155:137","eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"ecosystem":"npm","packages":["lodash"]},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"ecosystem":{"description":"Used for package names without an npm:/pypi: prefix.","enum":["npm","pypi"],"type":"string"},"packages":{"description":"e.g. [\"lodash\", \"express@4.18.0\", \"pypi:requests\", \"npm:@babel/core\"]. Prefix with npm: or pypi: to pick the ecosystem (else the default below); add @version (npm) or ==version (PyPI) to check a specific version. One brief per package.","items":{"type":"string"},"maxItems":5,"type":"array"}},"required":[]},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.01,"price_match":true,"latency_ms":392,"error":null}],"description_full":"Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable. One search per call (result caps in the input schema); failed lookups are not charged.","last_updated":"2026-10-23T23:35:28.544Z","schemes":["exact"]}