{"name":"x402-package-advisories","version":"0.1.0","description":"Package security advisories for agents: is this dependency version vulnerable? CVEs/GHSA with severity and CVSS, fixed versions and a recommended upgrade for npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems and more; audit up to 50 deps (package.json / requirements.txt) per call; full OSV records. Pay per call in USDC on Base via x402, over MCP or plain HTTP. No API key.","mcp":{"transport":"streamable-http","url":"https://x402-package-advisories.microtools-x402.workers.dev/mcp","tools":["package_advisories ($0.003, x402)","manifest_audit ($0.01, x402)","vuln_details ($0.001, x402)","ping ($0.001, x402)","health (free)"]},"http":[{"tool":"package_advisories","method":"GET","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/packages/advisories?ecosystem={npm|PyPI|Go|Maven|crates.io|NuGet|RubyGems|...}&name={package}&version={x.y.z}","alt":{"method":"POST","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/packages/advisories","body":{"ecosystem":"npm","name":"lodash","version":"4.17.15"}},"price_usd":0.003,"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"USDC","request_header":"PAYMENT-SIGNATURE (legacy X-PAYMENT accepted)","challenge_header":"PAYMENT-REQUIRED","receipt_header":"PAYMENT-RESPONSE"}},{"tool":"manifest_audit","method":"GET","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/packages/audit?packages={npm:lodash@4.17.15,PyPI:django@3.2.0}","alt":{"method":"POST","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/packages/audit","body":{"items":[{"ecosystem":"npm","name":"lodash","version":"4.17.15"},{"ecosystem":"PyPI","name":"django","version":"3.2.0"},{"ecosystem":"npm","name":"left-pad","version":"1.3.0"}]},"raw_body":"or POST a raw package.json / requirements.txt"},"price_usd":0.01,"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"USDC","request_header":"PAYMENT-SIGNATURE (legacy X-PAYMENT accepted)","challenge_header":"PAYMENT-REQUIRED","receipt_header":"PAYMENT-RESPONSE"}},{"tool":"vuln_details","method":"GET","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/vulns/get?id={GHSA-...|CVE-...|PYSEC-...|GO-...}","alt":{"method":"POST","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/vulns/get","body":{"id":"CVE-2021-44228"}},"price_usd":0.001,"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"USDC","request_header":"PAYMENT-SIGNATURE (legacy X-PAYMENT accepted)","challenge_header":"PAYMENT-REQUIRED","receipt_header":"PAYMENT-RESPONSE"}},{"tool":"ping","method":"GET","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/ping","alt":{"method":"POST","url":"https://x402-package-advisories.microtools-x402.workers.dev/v1/ping","body":{}},"price_usd":0.001,"x402":{"version":2,"scheme":"exact","network":"eip155:8453","asset":"USDC","request_header":"PAYMENT-SIGNATURE (legacy X-PAYMENT accepted)","challenge_header":"PAYMENT-REQUIRED","receipt_header":"PAYMENT-RESPONSE"}}],"docs":"Unpaid request -> HTTP 402 with PaymentRequired JSON body + base64 PAYMENT-REQUIRED header. Retry with PAYMENT-SIGNATURE. Bad input (400), unknown packages/ids (404) and upstream failures are not charged.","server_card":"https://x402-package-advisories.microtools-x402.workers.dev/.well-known/mcp.json","openapi":"https://x402-package-advisories.microtools-x402.workers.dev/openapi.json","data":"Vulnerability data from OSV.dev (CC-BY 4.0). Package versions, licenses and dependency counts from deps.dev (Open Source Insights, Google). Not affiliated with OSV.dev or deps.dev."}