Check npm packages before you install or upgrade
Check npm packages before you install or upgrade. Send {"packages":["lodash@4.17.20","express"]} or a package.json (dependencies and devDependencies), up to 50 packages. Per package: latest version and publish date, whether a pinned version is behind, license, deprecation notice, weekly downloads, and known vulnerabilities from OSV with severity and first fixed version. Deterministic registry data, no LLM.
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://audit.152-53-82-29.sslip.io/v1/npm
| Category | Code and developer |
|---|---|
| Provider host | audit.152-53-82-29.sslip.io |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 1 from 1 payers (the provider's figure, not ours) |
Our checks, last 30 days
We never call tools that send, buy, move money or file anything, not even without paying.
Example input (from the provider)
{
"body": {
"packages": [
"lodash@4.17.20",
"express",
"left-pad"
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"dependencies": {
"type": "object"
},
"devDependencies": {
"type": "object"
},
"packages": {
"description": "npm packages as name or name@version",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"elapsed_ms": {
"type": "integer"
},
"rows": {
"items": {
"properties": {
"behind": {
"type": [
"boolean",
"null"
]
},
"deprecated": {
"type": [
"boolean",
"string",
"null"
]
},
"ecosystem": {
"type": "string"
},
"latest": {
"type": [
"string",
"null"
]
},
"latest_published": {
"type": [
"string",
"null"
]
},
"license": {
"type": [
"string",
"null"
]
},
"max_severity": {
"type": [
"string",
"null"
]
},
"name": {
"type": "string"
},
"notes": {
"items": {
"type": "string"
},
"type": "array"
},
"pinned": {
"type": [
"string",
"null"
]
},
"requested": {
"type": [
"string",
"null"
]
},
"vulnerabilities": {
"items": {
"properties": {
"aliases": {
"items": {
"type": "string"
},
"type": "array"
},
"fixed_in": {
"type": [
"string",
"null"
]
},
"id": {
"type": "string"
},
"severity": {
"type": "string"
},
"summary": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"vulnerability_count": {
"type": "integer"
},
"weekly_downloads": {
"type": [
"integer",
"null"
]
}
},
"type": "object"
},
"type": "array"
},
"sources": {
"items": {
"type": "string"
},
"type": "array"
},
"summary": {
"properties": {
"behind_latest": {
"type": "integer"
},
"deprecated": {
"type": "integer"
},
"lookup_errors": {
"type": "integer"
},
"packages": {
"type": "integer"
},
"unpinned": {
"type": "integer"
},
"with_vulnerabilities": {
"type": "integer"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}