Evaluate up to 10 exact npm or PyPI package versions in one $0.02 paid batch imm

Evaluate up to 10 exact npm or PyPI package versions in one $0.02 paid batch immediately before installation or an exact-version change. Returns deterministic allow, review, or block guidance with known-vulnerability, lifecycle, declared-license, release-age, and npm install-lifecycle evidence. Reuse a current result for unchanged inputs instead of purchasing a duplicate check for an installation retry.

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://api.preflightstack.com/v1/dependency-preflight

Our checks, last 30 days

Example input (from the provider)

{
  "body": {
    "ecosystem": "npm",
    "packages": [
      {
        "name": "lodash",
        "version": "4.17.21"
      }
    ],
    "policy": "balanced"
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "additionalProperties": false,
          "properties": {
            "ecosystem": {
              "description": "One package ecosystem per request.",
              "enum": [
                "npm",
                "pypi"
              ],
              "type": "string"
            },
            "license_allowlist": {
              "description": "Optional individual SPDX-style license identifiers to allow.",
              "items": {
                "type": "string"
              },
              "maxItems": 50,
              "type": "array",
              "uniqueItems": true
            },
            "license_denylist": {
              "description": "Optional individual SPDX-style license identifiers to block.",
              "items": {
                "type": "string"
              },
              "maxItems": 50,
              "type": "array",
              "uniqueItems": true
            },
            "packages": {
              "description": "Exact package names and versions to evaluate as one paid batch.",
              "items": {
                "additionalProperties": false,
                "properties": {
                  "name": {
                    "description": "Registry package name.",
                    "maxLength": 214,
                    "minLength": 1,
                    "type": "string"
                  },
                  "version": {
                    "description": "Exact version only; ranges and tags are rejected. npm may include an optional leading v.",
                    "maxLength": 128,
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "name",
                  "version"
                ],
                "type": "object"
              },
              "maxItems": 10,
              "minItems": 1,
              "type": "array"
            },
            "policy": {
              "default": "balanced",
              "description": "Optional; balanced is the only version-one policy.",
              "enum": [
                "balanced"
              ],
              "type": "string"
            }
          },
          "required": [
            "ecosystem",
            "packages"
          ],
          "type": "object"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "additionalProperties": false,
          "properties": {
            "decision": {
              "enum": [
                "allow",
                "review",
                "block"
              ],
              "type": "string"
            },
            "generated_at": {
              "description": "ISO 8601 generation timestamp.",
              "type": "string"
            },
            "limitations": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "packages": {
              "items": {
                "type": "object"
              },
              "maxItems": 10,
              "minItems": 1,
              "type": "array"
            },
            "policy": {
              "type": "object"
            },
            "request_id": {
              "type": "string"
            },
            "summary": {
              "type": "object"
            },
            "workflow": {
              "additionalProperties": false,
              "properties": {
                "avoid_duplicate_payment": {
                  "type": "string"
                },
                "decision_actions": {
                  "additionalProperties": false,
                  "properties": {
                    "allow": {
                      "type": "string"
                    },
                    "block": {
                      "type": "string"
                    },
                    "review": {
                      "type": "string"
                    }
                  },
                  "required": [
                    "allow",
                    "review",
                    "block"
                  ],
                  "type": "object"
                },
                "instruction": {
                  "type": "string"
                },
                "recommended_trigger": {
                  "const": "before_dependency_install"
                },
                "rerun_when": {
                  "items": {
                    "enum": [
                      "package_added",
                      "exact_version_changed",
                      "policy_input_changed",
                      "fresh_evidence_required"
                    ],
                    "type": "string"
                  },
                  "type": "array",
                  "uniqueItems": true
                }
              },
              "required": [
                "recommended_trigger",
                "instruction",
                "decision_actions",
                "rerun_when",
                "avoid_duplicate_payment"
              ],
              "type": "object"
            }
          },
          "required": [
            "request_id",
            "decision",
            "policy",
            "summary",
            "packages",
            "workflow",
            "limitations",
            "generated_at"
          ],
   

This page as JSON