{"slug":"agentsvc-io-api-v1-proxy-package-check-289ba2","title":"Check dependencies before your coding agent installs them","host":"agentsvc.io","method":"POST","resource":"https://agentsvc.io/api/v1/proxy/package-check","category":"company","description":"Check dependencies before your coding agent installs them: up to 20 packages per call (npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems), one decision each: ALLOW, CAUTION or BLOCK with reasons. Catches hallucinated package names that do not exist (slopsquatting), known malware (OSV malicious-packag","price_listed":0.004,"price_asked":0.004,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":915,"reported_calls_30d":2,"reported_payers_30d":2,"networks":["eip155:137","eip155:42161","eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"packages":["express@4.17.1","reqeusts","pypi:requests==2.31.0","lodahs"]},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"ecosystem":{"description":"Default for entries without a prefix: npm, pypi, cargo, go, maven, nuget or rubygems. Default npm","type":"string"},"manifest":{"description":"Contents of a package.json or requirements.txt (alternative to packages)","maxLength":100000,"type":"string"},"packages":{"description":"Strings like \"express@4.17.1\", \"pypi:requests==2.31.0\", \"go:github.com/gin-gonic/gin\", \"maven:org.apache.logging.log4j:log4j-core:2.14.1\", or {name, ecosystem, version}","items":{"anyOf":[{"maxLength":300,"type":"string"},{"properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"version":{"description":"Exact version or npm range; default latest","type":"string"}},"required":["name"],"type":"object"}]},"maxItems":20,"minItems":1,"type":"array"}},"required":[]},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"data":{"properties":{"checked_at":{"type":"string"},"packages":{"type":"array"},"sources":{"type":"string"},"summary":{"type":"object"},"verdict":{"type":"string"}},"type":"object"},"success":{"type":"boolean"}},"required":["success","data"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-18","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.004,"price_match":true,"latency_ms":915,"error":null}],"description_full":"Check dependencies before your coding agent installs them: up to 20 packages per call (npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems), one decision each: ALLOW, CAUTION or BLOCK with reasons. Catches hallucinated package names that do not exist (slopsquatting), known malware (OSV malicious-package feed, including versions already removed from the registry), typosquats one typo away from a popular package, critical and high vulnerabilities in the exact version with a safe upgrade, deprecated…","last_updated":"2026-10-15T18:58:12.492Z","schemes":["exact"]}