Queries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven
Queries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and summary, and the single figure that decides what to do next: the lowest version that fixes all of them, derived from the fixed-version events in the affected ranges.
Answeringour last check, 2026-10-18
1 of 1checks answered this week
905 msmedian answer time
$0.005listed price per call
$0.005price it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://sicher.halowerk.com/v1/cve-check
| Category | Everything else |
|---|---|
| Provider host | sicher.halowerk.com |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 2 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-10-18 | valid payment request | 402 | $0.005 | 905 ms |
Example input (from the provider)
{
"body": {
"include_details": false,
"packages": [
{
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.21"
}
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"ecosystem": {
"default": "npm",
"description": "Default ecosystem for entries that do not name one.",
"maxLength": 30,
"type": "string"
},
"include_details": {
"default": true,
"description": "Fetch summary and severity per finding. Off is faster but returns ids only.",
"type": "boolean"
},
"min_severity": {
"description": "Only report findings at or above this severity.",
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"packages": {
"description": "The packages to check.",
"items": {
"additionalProperties": false,
"properties": {
"ecosystem": {
"description": "Ecosystem, e.g. npm, PyPI, Go. Defaults to the top-level value.",
"maxLength": 30,
"type": "string"
},
"name": {
"description": "Package name as the ecosystem spells it.",
"maxLength": 200,
"minLength": 1,
"type": "string"
},
"version": {
"description": "Exact installed version.",
"maxLength": 60,
"minLength": 1,
"type": "string"
}
},
"required": [
"name",
"version"
],
"type": "object"
},
"maxItems": 100,
"minItems": 1,
"type": "array"
}
},
"required": [
"packages"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}