Check an exact PyPI or npm package version against OSV advisories, group aliases
Check an exact PyPI or npm package version against OSV advisories, group aliases and report affected/fixed version evidence and CISA known exploitation. Preserve source disagreements, withdrawn records, unsupported ranges and dated coverage. No dependency traversal, malware scan, registry existence check or safety guarantee. 0.01 USDC per completed diagnostic; source failures and incomplete pagination are uncharged.
Answeringour last check, 2026-10-24
1 of 1checks answered this week
825 msmedian answer time
$0.01listed price per call
$0.01price it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://api.mekler.ai/v1/data/packages/check-version-vulnerabilities
| Category | Company and compliance |
|---|---|
| Provider host | api.mekler.ai |
| Networks | eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp |
| Payment schemes | exact |
| Self-reported calls, 30 days | 2 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-10-24 | valid payment request | 402 | $0.01 | 825 ms |
Example input (from the provider)
{
"body": {
"ecosystem": "pypi",
"name": "requests",
"request_id": "package-vulnerability-example-001",
"version": "2.19.0"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"ecosystem": {
"enum": [
"pypi",
"npm"
],
"type": "string"
},
"name": {
"maxLength": 128,
"type": "string"
},
"request_id": {
"pattern": "^[A-Za-z0-9_-]{16,64}$",
"type": "string"
},
"version": {
"maxLength": 80,
"minLength": 1,
"type": "string"
}
},
"required": [
"ecosystem",
"name",
"version",
"request_id"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"advisories": {
"items": {
"required": [
"id",
"version_status",
"fixed_versions_reported",
"known_exploitation"
],
"type": "object"
},
"maxItems": 100,
"type": "array"
},
"coverage": {
"required": [
"query_complete",
"kev_released_at"
],
"type": "object"
},
"ecosystem": {
"enum": [
"pypi",
"npm"
],
"type": "string"
},
"limitations": {
"items": {
"maxLength": 512,
"type": "string"
},
"maxItems": 5,
"type": "array"
},
"name": {
"maxLength": 128,
"type": "string"
},
"observed_at": {
"maxLength": 80,
"type": "string"
},
"status": {
"const": "ok",
"type": "string"
},
"verdict": {
"enum": [
"affected",
"review_required",
"no_known_matches"
],
"type": "string"
},
"version": {
"maxLength": 80,
"type": "string"
},
"vulnerability_groups": {
"items": {
"required": [
"identifiers",
"version_status",
"source_disagreement"
],
"type": "object"
},
"maxItems": 100,
"type": "array"
},
"withdrawn_advisory_ids": {
"items": {
"maxLength": 160,
"type": "string"
},
"maxItems": 100,
"type": "array"
}
},
"required": [
"status",
"ecosystem",
"name",
"version",
"verdict",
"advisories",
"vulnerability_groups",
"withdrawn_advisory_ids",
"observed_at",
"coverage",
"limitations"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}