ToolAssay

Give it npm or PyPI package names

Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable. One search per call (result caps in the input schema); failed lookups are not charged.

Answeringour last check, 2026-10-24
1 of 1checks answered this week
392 msmedian answer time
$0.01listed price per call
$0.01price it asked us

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://agent-data.centorprat.workers.dev/tools/package-dependency-risk-scanner

CategoryCompany and compliance
Provider hostagent-data.centorprat.workers.dev
Networkseip155:137, eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
Payment schemesexact
Self-reported calls, 30 days2 from 2 payers (the provider's figure, not ours)

Our checks, last 30 days

DayResultHTTPAskedTime
2026-10-24 valid payment request 402$0.01 392 ms

Example input (from the provider)

{
  "body": {
    "ecosystem": "npm",
    "packages": [
      "lodash"
    ]
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "properties": {
            "ecosystem": {
              "description": "Used for package names without an npm:/pypi: prefix.",
              "enum": [
                "npm",
                "pypi"
              ],
              "type": "string"
            },
            "packages": {
              "description": "e.g. [\"lodash\", \"express@4.18.0\", \"pypi:requests\", \"npm:@babel/core\"]. Prefix with npm: or pypi: to pick the ecosystem (else the default below); add @version (npm) or ==version (PyPI) to check a specific version. One brief per package.",
              "items": {
                "type": "string"
              },
              "maxItems": 5,
              "type": "array"
            }
          },
          "required": []
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST",
            "PUT",
            "PATCH"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON