Open source package vulnerability check on OSV.dev
Open source package vulnerability check on OSV.dev - advisories, aliases, severity and fixed versions for npm, PyPI, Go, Maven, crates.io and more by version
Answers HTTP 400 without x402 payment termsour last check, 2026-10-18
0 of 1checks answered this week
n/amedian answer time
$0.01listed price per call
n/aprice it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
GET https://saylorinnovations.com/api/security/osv
| Category | Code and developer |
|---|---|
| Provider host | saylorinnovations.com |
| Networks | eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp |
| Payment schemes | exact |
| Self-reported calls, 30 days | 1 from 1 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-10-18 | no x402 terms | 400 | 570 ms |
Example input (from the provider)
{
"method": "GET",
"queryParams": {
"ecosystem": "npm",
"package": "lodash",
"version": "4.17.15"
},
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET",
"POST",
"PUT",
"PATCH",
"DELETE",
"HEAD"
],
"type": "string"
},
"queryParams": {
"properties": {
"ecosystem": {
"description": "npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, Hex or Pub",
"type": "string"
},
"package": {
"description": "Package name, e.g. lodash",
"type": "string"
},
"version": {
"description": "optional exact version to check",
"type": "string"
}
},
"required": [
"ecosystem",
"package"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"ecosystem": {
"description": "Package ecosystem the record belongs to",
"type": "string"
},
"fetched_at": {
"description": "Time the data was fetched from the source (UTC)",
"type": [
"number",
"null"
]
},
"holder_count": {
"description": "Number of holder",
"type": [
"number",
"null"
]
},
"mint": {
"description": "Solana token mint address",
"type": [
"string",
"null"
]
},
"name": {
"description": "Name",
"type": [
"string",
"null"
]
},
"note": {
"description": "Caveat or context for reading the result",
"type": "string"
},
"package": {
"type": "string"
},
"security": {
"description": "Security assessment details"
},
"security_score": {
"description": "Security score from 0 to 100",
"type": [
"number",
"null"
]
},
"source": {
"description": "Data source the values come from",
"type": "string"
},
"sources_failed": {
"description": "Data sources that did not answer; empty when all answered",
"type": [
"array",
"null"
]
},
"sources_ok": {
"description": "Data sources that answered",
"type": [
"array",
"null"
]
},
"summary": {
"description": "Short summary",
"type": [
"string",
"null"
]
},
"symbol": {
"description": "Ticker or asset symbol",
"type": [
"string",
"null"
]
},
"token_age_days": {
"description": "Token age in days",
"type": [
"number",
"null"
]
},
"version": {
"description": "Version identifier",
"type": [
"string",
"null"
]
},
"vulnerabilities": {
"description": "Known vulnerabilities",
"type": "array"
},
"vulnerability_count": {
"description": "Number of vulnerability",
"type": "number"
},
"watchdog_score": {
"description": "Overall score from 0 to 100",
"type": [
"number",
"null"
]
}
},
"required": [
"package",
"ecosystem",
"vulnerabilities"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}