Is an npm or PyPI package version safe and maintained?
Is an npm or PyPI package version safe and maintained? Known vulnerabilities from OSV.dev (ids, CVEs, the advisory's own severity, fixed versions), deprecation or yank, licence, repository, publish dates, latest version, weekly downloads, dependency and maintainer counts, stated risk flags. No code scanning; unknowns are null. An unknown package or an outage is not charged. Pay-per-call via x402.
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://fiatdock.com/v1/dev/package
| Category | Code and developer |
|---|---|
| Provider host | fiatdock.com |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 3 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
We never call tools that send, buy, move money or file anything, not even without paying.
Example input (from the provider)
{
"body": {
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.20"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"ecosystem": {
"description": "Which registry the name is on: npm (default) or pypi",
"enum": [
"npm",
"pypi"
],
"example": "npm",
"type": "string"
},
"name": {
"description": "The package name: an npm package (lodash, @types/node) or a PyPI project (requests, Django)",
"example": "lodash",
"maxLength": 214,
"type": "string"
},
"version": {
"description": "An exact published version to analyse (4.17.20, 2.31.0). Omit for the latest release; ranges like ^4 are refused",
"example": "4.17.20",
"maxLength": 65,
"type": "string"
}
},
"required": []
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}