Audit a whole dependency manifest in one call before installing or upgrading
Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requirements.txt, or npm and PyPI package lists (up to 50 packages). Per dependency: latest version and publish date, whether your pin is behind, license, deprecation or yanked status, weekly npm downloads, and known vulnerabilities from OSV with severity and first fixed version. Deterministic, no LLM. Use before adding or bumping deps or when reviewing a lockfile change.
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://audit.152-53-82-29.sslip.io/v1/audit
| Category | Code and developer |
|---|---|
| Provider host | audit.152-53-82-29.sslip.io |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 1 from 1 payers (the provider's figure, not ours) |
Our checks, last 30 days
We never call tools that send, buy, move money or file anything, not even without paying.
Example input (from the provider)
{
"body": {
"npm": [
"lodash@4.17.20",
"express@^4.18.0",
"left-pad"
],
"pypi": [
"requests==2.25.0",
"flask>=2.0"
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"description": "Send any one of: a package.json object, a requirements.txt string in `manifest`, or explicit `npm` and `pypi` lists.",
"properties": {
"dependencies": {
"description": "package.json dependencies map",
"type": "object"
},
"devDependencies": {
"description": "package.json devDependencies map",
"type": "object"
},
"ecosystem": {
"description": "Required with `manifest` when it is a requirements.txt",
"enum": [
"npm",
"pypi"
],
"type": "string"
},
"manifest": {
"description": "Raw package.json or requirements.txt text",
"type": "string"
},
"npm": {
"description": "npm packages as name or name@version",
"items": {
"type": "string"
},
"type": "array"
},
"pypi": {
"description": "PyPI requirement lines, for example requests==2.25.0",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"elapsed_ms": {
"type": "integer"
},
"rows": {
"items": {
"properties": {
"behind": {
"type": [
"boolean",
"null"
]
},
"deprecated": {
"type": [
"boolean",
"string",
"null"
]
},
"ecosystem": {
"type": "string"
},
"latest": {
"type": [
"string",
"null"
]
},
"latest_published": {
"type": [
"string",
"null"
]
},
"license": {
"type": [
"string",
"null"
]
},
"max_severity": {
"type": [
"string",
"null"
]
},
"name": {
"type": "string"
},
"notes": {
"items": {
"type": "string"
},
"type": "array"
},
"pinned": {
"type": [
"string",
"null"
]
},
"requested": {
"type": [
"string",
"null"
]
},
"vulnerabilities": {
"items": {
"properties": {
"aliases": {
"items": {
"type": "string"
},
"type": "array"
},
"fixed_in": {
"type": [
"string",
"null"
]
},
"id": {
"type": "string"
},
"severity": {
"type": "string"
},
"summary": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"vulnerability_count": {
"type": "integer"
},
"weekly_downloads": {
"type": [
"integer",
"null"
]
}
},
"type": "object"
},
"type": "array"
},
"sources": {
"items": {
"type": "string"
},
"type": "array"
},
"summary": {
"properties": {
"behind_latest": {
"type": "integer"
},
"deprecated": {
"type": "integer"
},
"lookup_errors": {
"type": "integer"
},
"packages": {
"type": "integer"
},
"unpinned": {
"type": "integer"
},
"with_vulnera