Known vulnerabilities for a list of dependencies, npm and PyPI, in one call
Known vulnerabilities for a list of dependencies, npm and PyPI, in one call. Send {"npm":["lodash@4.17.20"],"pypi":["django==3.2.0"]} or a package.json or requirements.txt, up to 50 packages. Returns only packages that have advisories: OSV and GHSA ids, CVE aliases, severity, summary, and the first fixed version, plus counts. Unpinned packages are checked at their latest version. Deterministic OSV data, no LLM.
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://audit.152-53-82-29.sslip.io/v1/vulns
| Category | Code and developer |
|---|---|
| Provider host | audit.152-53-82-29.sslip.io |
| Networks | eip155:137, eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp |
| Payment schemes | exact |
| Self-reported calls, 30 days | 2 from 1 payers (the provider's figure, not ours) |
Our checks, last 30 days
We never call tools that send, buy, move money or file anything, not even without paying.
Example input (from the provider)
{
"body": {
"npm": [
"lodash@4.17.20"
],
"pypi": [
"django==3.2.0"
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"ecosystem": {
"enum": [
"npm",
"pypi"
],
"type": "string"
},
"manifest": {
"type": "string"
},
"npm": {
"items": {
"type": "string"
},
"type": "array"
},
"pypi": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"elapsed_ms": {
"type": "integer"
},
"rows": {
"items": {
"properties": {
"ecosystem": {
"type": "string"
},
"max_severity": {
"type": [
"string",
"null"
]
},
"name": {
"type": "string"
},
"version_checked": {
"type": [
"string",
"null"
]
},
"vulnerabilities": {
"items": {
"properties": {
"aliases": {
"items": {
"type": "string"
},
"type": "array"
},
"fixed_in": {
"type": [
"string",
"null"
]
},
"id": {
"type": "string"
},
"severity": {
"type": "string"
},
"summary": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"vulnerability_count": {
"type": "integer"
}
},
"type": "object"
},
"type": "array"
},
"sources": {
"items": {
"type": "string"
},
"type": "array"
},
"summary": {
"properties": {
"max_severity": {
"type": [
"string",
"null"
]
},
"packages": {
"type": "integer"
},
"total_vulnerabilities": {
"type": "integer"
},
"with_vulnerabilities": {
"type": "integer"
}
},
"type": "object"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}