ToolAssay

Batch dependency vulnerability check — check ordered exact package versions in O

Batch dependency vulnerability check — check ordered exact package versions in OSV with deduplicated CVE enrichment, explicit completeness, and CISA KEV known-exploited signals.

Answeringour last check, 2026-09-24
1 of 1checks answered this week
947 msmedian answer time
$0.01listed price per call
$0.01price it asked us

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://dependency-risk.use.x402atlas.com/batch

CategoryCode and developer
Provider hostdependency-risk.use.x402atlas.com
Networkseip155:137, eip155:42161, eip155:8453
Payment schemesexact
Self-reported calls, 30 days3 from 2 payers (the provider's figure, not ours)

Our checks, last 30 days

DayResultHTTPAskedTime
2026-09-24 valid payment request 402$0.01 947 ms

Example input (from the provider)

{
  "body": {
    "packages": [
      {
        "purl": "pkg:golang/golang.org/x/text@v0.3.7"
      },
      {
        "purl": "pkg:golang/golang.org/x/text@v0.3.7"
      }
    ]
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "additionalProperties": false,
          "properties": {
            "packages": {
              "description": "Ordered exact package versions; duplicates preserve positions and share source work. The complete OSV result must contain no page token and at most eight distinct vulnerability IDs for V1 enrichment.",
              "items": {
                "additionalProperties": false,
                "description": "One exact package version using exactly one accepted identifier form",
                "oneOf": [
                  {
                    "not": {
                      "anyOf": [
                        {
                          "required": [
                            "package"
                          ]
                        },
                        {
                          "required": [
                            "version"
                          ]
                        }
                      ]
                    },
                    "required": [
                      "purl"
                    ]
                  },
                  {
                    "not": {
                      "required": [
                        "purl"
                      ]
                    },
                    "required": [
                      "package",
                      "version"
                    ]
                  }
                ],
                "properties": {
                  "package": {
                    "additionalProperties": false,
                    "description": "Exact OSV package identity; use with version",
                    "properties": {
                      "ecosystem": {
                        "description": "Exact OSV ecosystem identifier, up to 64 UTF-8 bytes",
                        "maxLength": 64,
                        "minLength": 1,
                        "type": "string"
                      },
                      "name": {
                        "description": "Exact package-manager name, up to 512 UTF-8 bytes",
                        "maxLength": 512,
                        "minLength": 1,
                        "type": "string"
                      }
                    },
                    "required": [
                      "ecosystem",
                      "name"
                    ],
                    "type": "object"
                  },
                  "purl": {
                    "description": "Canonical package URL with embedded exact version; mutually exclusive with package and version",
                    "maxLength": 2048,
                    "minLength": 1,
                    "type": "string"
                  },
                  "version": {
                    "description": "Exact version used with package, up to 256 UTF-8 bytes",
                    "maxLength": 256,
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "type": "object"
              },
              "maxItems": 50,
              "minItems": 1,
              "type": "array"
            }
          },
          "required": [
            "packages"
          ],
          "type": "object"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "additionalProperties": false,
          "description": "Complete transactional Dependency Risk response, limited to the native budget reserved below the 512 KiB deployed wire ceiling",
          "properties": {
            "_atlas": {
              "additionalProperties": false,
              "description": "Atlas documentation and related-route metadata added after deployment",
              "properties": {
                "docs": {
                  "description": "Documentation URL for this bridge",
                  "format": "uri",
                  "maxLength": 512,
                  "type": "string"
                },
                "related": {
                  "description": "Bounded related Atlas routes",
                  "items": {
                    "additionalProperties": false,
                    "description": "One related Atlas route",
                    "properties": {
                      "bridge": {
                        "description": "Related bridge name",
                        "maxLength": 64,
                        "type": "string"
                      },
                      "docs": {
                        "description": "Related bridge documentation URL",
                        "format": "uri",
                        "maxLength": 512,
                        "type": "string"
                      },
                      "summary": {
                        "description": "Short capability summary",
                        "maxLength": 256,
                        "type": "string"
                      },
                      "url": {
                        "description": "Related route URL",
                        "format": "uri",
                        "maxLength": 512,
                        "type": "string"
                      }
                    },
                    "required": [
                      "bridge",
                      "url",
                      "docs",
                      "summary"
                    ],
                    "type": "object"

This page as JSON