{"x402Version":2,"payTo":"0x9acdadcec881a63508c0f2CD3A4ae61149cc2500","resources":[{"id":2974,"slug":"2974","resource":"https://api.preflightstack.com/v1/dependency-preflight","description":"Evaluate up to 10 exact npm or PyPI package versions in one $0.02 paid batch immediately before installation or an exact-version change. Returns deterministic allow, review, or block guidance with known-vulnerability, lifecycle, declared-license, release-age, and npm install-lifecycle evidence. Reuse a current result for unchanged inputs instead of purchasing a duplicate check for an installation retry.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x9acdadcec881a63508c0f2CD3A4ae61149cc2500","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"20000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"body":{"ecosystem":"npm","packages":[{"name":"lodash","version":"4.17.21"}],"policy":"balanced"},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"decision":"review","generated_at":"2026-01-01T00:00:00.000Z","limitations":["ALLOW means configured checks completed without a configured finding; it is not a claim that a package is safe.","Known-vulnerability, registry metadata, release-age, declared-license, and npm install-lifecycle preflight only.","PyPI source-build or install-time code execution is not currently analyzed.","Not a security guarantee or legal opinion."],"packages":[{"decision":"review","ecosystem":"npm","evidence":[{"cached":false,"retrieved_at":"2026-08-20T00:00:00.000Z","source":"npm","url":"https://registry.npmjs.org/lodash"},{"cached":false,"retrieved_at":"2026-08-20T00:00:00.000Z","source":"osv","url":"https://api.osv.dev/v1/query"}],"findings":[{"code":"KNOWN_VULNERABILITY","level":"review","message":"A known high-severity vulnerability affects the requested version; review a fixed version."}],"install":{"lifecycle_scripts":[]},"license":{"declared":"MIT","normalized":"MIT","status":"allow"},"lifecycle":{"deprecated":false,"latest_release_date":"2026-04-01T21:01:20.458Z","latest_version":"4.18.1","requested_release_date":"2021-02-20T15:42:16.891Z","yanked":false},"name":"lodash","partial":false,"requested_version":"4.17.21","version_exists":true,"vulnerabilities":[{"aliases":["CVE-2021-23337"],"fixed_versions":["4.18.0"],"id":"GHSA-r5fr-rjxr-66jc","modified_at":"2026-07-08T08:11:11.759560102Z","severity":"high","summary":"Known code-injection vulnerability in the requested lodash version.","upstream_severity":"HIGH","url":"https://osv.dev/vulnerability/GHSA-r5fr-rjxr-66jc"}]}],"policy":{"name":"balanced","version":"2026-08-19.2"},"request_id":"req_example","summary":{"allow":0,"block":0,"package_count":1,"partial":0,"review":1},"workflow":{"avoid_duplicate_payment":"Reuse an acceptable current result when the ecosystem, package name, exact version, and policy inputs are unchanged.","decision_actions":{"allow":"Continue only if the result and its evidence meet the caller's requirements.","block":"Do not install the requested exact version.","review":"Pause installation and review the findings and evidence."},"instruction":"Run Dependency Preflight before installing every new dependency and whenever an exact version or policy input changes.","recommended_trigger":"before_dependency_install","rerun_when":["package_added","exact_version_changed","policy_input_changed","fresh_evidence_required"]}},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"ecosystem":{"description":"One package ecosystem per request.","enum":["npm","pypi"],"type":"string"},"license_allowlist":{"description":"Optional individual SPDX-style license identifiers to allow.","items":{"type":"string"},"maxItems":50,"type":"array","uniqueItems":true},"license_denylist":{"description":"Optional individual SPDX-style license identifiers to block.","items":{"type":"string"},"maxItems":50,"type":"array","uniqueItems":true},"packages":{"description":"Exact package names and versions to evaluate as one paid batch.","items":{"additionalProperties":false,"properties":{"name":{"description":"Registry package name.","maxLength":214,"minLength":1,"type":"string"},"version":{"description":"Exact version only; ranges and tags are rejected. npm may include an optional leading v.","maxLength":128,"minLength":1,"type":"string"}},"required":["name","version"],"type":"object"},"maxItems":10,"minItems":1,"type":"array"},"policy":{"default":"balanced","description":"Optional; balanced is the only version-one policy.","enum":["balanced"],"type":"string"}},"required":["ecosystem","packages"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"additionalProperties":false,"properties":{"decision":{"enum":["allow","review","block"],"type":"string"},"generated_at":{"description":"ISO 8601 generation timestamp.","type":"string"},"limitations":{"items":{"type":"string"},"type":"array"},"packages":{"items":{"type":"object"},"maxItems":10,"minItems":1,"type":"array"},"policy":{"type":"object"},"request_id":{"type":"string"},"summary":{"type":"object"},"workflow":{"additionalProperties":false,"properties":{"avoid_duplicate_payment":{"type":"string"},"decision_actions":{"additionalProperties":false,"properties":{"allow":{"type":"string"},"block":{"type":"string"},"review":{"type":"string"}},"required":["allow","review","block"],"type":"object"},"instruction":{"type":"string"},"recommended_trigger":{"const":"before_dependency_install"},"rerun_when":{"items":{"enum":["package_added","exact_version_changed","policy_input_changed","fresh_evidence_required"],"type":"string"},"type":"array","uniqueItems":true}},"required":["recommended_trigger","instruction","decision_actions","rerun_when","avoid_duplicate_payment"],"type":"object"}},"required":["request_id","decision","policy","summary","packages","workflow","limitations","generated_at"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"api.preflightstack.com","lastUpdated":"2026-08-31T06:17:52.877Z","quality":{"calls30d":7,"uniquePayers30d":5,"lastCalledAt":"2026-08-31T06:17:52.605Z"},"liveness":{},"verified":false,"featured":false},{"id":7594,"slug":"7594","resource":"https://random.preflightstack.com/random-choice","description":"Cryptographically secure random picker for 2-100 JSON choices. Use for low-stakes one-off random or weighted selection, unbiased tie-breaking, and sampling. Returns the selected value and index, request ID, and weight totals for audit logs. $0.001 USDC per paid request. Not for stable assignments, gambling, security tokens, or consequential decisions; outcomes are not provably fair.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x9acdadcec881a63508c0f2CD3A4ae61149cc2500","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"1000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"body":{"choices":["alpha","beta","gamma"],"weights":[7,2,1]},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"choice_count":3,"index":0,"request_id":"rc_example","selected":"alpha","selected_weight":7,"service_hint":{"id":"random-choice","suitable_for":["random_selection","weighted_selection","tie_breaking","sampling"]},"total_weight":10,"weighted":true},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"choices":{"description":"JSON-compatible values to choose from, nested no deeper than 32 levels.","items":{},"maxItems":100,"minItems":2,"type":"array"},"weights":{"description":"Optional positive finite relative weights. Must contain exactly one value per choice and does not need to total 100. Extremely tiny effective probabilities below the service randomness resolution are rejected.","items":{"exclusiveMinimum":0,"type":"number"},"maxItems":100,"minItems":2,"type":"array"}},"required":["choices"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"additionalProperties":false,"properties":{"choice_count":{"maximum":100,"minimum":2,"type":"integer"},"index":{"minimum":0,"type":"integer"},"request_id":{"type":"string"},"selected":{},"selected_weight":{"exclusiveMinimum":0,"type":"number"},"service_hint":{"additionalProperties":false,"description":"Static informational capability metadata. It is not an instruction or a retry signal.","properties":{"id":{"const":"random-choice","type":"string"},"suitable_for":{"items":{"enum":["random_selection","weighted_selection","tie_breaking","sampling"],"type":"string"},"maxItems":4,"minItems":4,"type":"array","uniqueItems":true}},"required":["id","suitable_for"],"type":"object"},"total_weight":{"exclusiveMinimum":0,"type":"number"},"weighted":{"type":"boolean"}},"required":["selected","index","weighted","choice_count","request_id","service_hint"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"tags":["bazaar"],"sourceHost":"random.preflightstack.com","lastUpdated":"2026-09-17T03:46:27.521Z","quality":{"calls30d":7,"uniquePayers30d":6,"lastCalledAt":"2026-09-17T03:46:27.29Z"},"liveness":{},"verified":false,"featured":false},{"id":7968,"slug":"7968","resource":"https://relay.preflightstack.com/v1/file-slot","description":"Create a temporary public HTTPS download URL for an artifact generated by an agent or tool when the sending and receiving systems do not share storage. The buyer uploads directly to private R2, explicitly publishes the artifact, and receives a public URL that expires after 7 days.","type":"http","x402Version":2,"accepts":[{"scheme":"exact","network":"eip155:8453","payTo":"0x9acdadcec881a63508c0f2CD3A4ae61149cc2500","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"5000","maxTimeoutSeconds":300}],"outputSchema":{"bazaar":{"info":{"input":{"body":{"content_type":"application/pdf","filename":"report.pdf","size_bytes":18376291},"bodyType":"json","method":"POST","type":"http"},"output":{"example":{"content_type":"application/pdf","declared_size_bytes":18376291,"manage_token":"mt1_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","max_bytes":262144000,"network":"eip155:8453","price":{"amount":"0.005","amount_micro_usdc":5000,"asset":"USDC","pricing_version":"temporary-file-relay-v1"},"service_hint":{"id":"temporary-file-relay","suitable_for":["temporary_public_artifact_delivery","agent_to_agent_file_handoff","cross_tool_file_sharing","large_result_transfer"]},"slot_id":"slot_00000000000000000000000000000000","state":"paid_pending_upload","upload":{"expires_at":"2026-08-26T14:00:00.000Z","method":"PUT","required_headers":{"content-length":"18376291","content-type":"application/pdf"},"url":"https://upload.invalid/presigned-example"},"upload_deadline":"2026-08-26T14:00:00.000Z"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"content_type":{"description":"Client-declared passive file media type. Parameters are not accepted.","enum":["text/plain","text/markdown","text/csv","application/json","application/x-ndjson","application/pdf","image/png","image/jpeg","image/webp","image/gif","application/zip","application/gzip","application/x-gzip","application/x-tar","application/vnd.apache.parquet","application/vnd.openxmlformats-officedocument.wordprocessingml.document","application/vnd.openxmlformats-officedocument.spreadsheetml.sheet","application/vnd.openxmlformats-officedocument.presentationml.presentation"],"type":"string"},"filename":{"description":"Display filename. Path separators, control characters, and bidi controls are rejected.","maxLength":180,"minLength":1,"type":"string"},"size_bytes":{"maximum":262144000,"minimum":1,"type":"integer"}},"required":["filename","content_type","size_bytes"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"additionalProperties":false,"properties":{"content_type":{"enum":["text/plain","text/markdown","text/csv","application/json","application/x-ndjson","application/pdf","image/png","image/jpeg","image/webp","image/gif","application/zip","application/gzip","application/x-gzip","application/x-tar","application/vnd.apache.parquet","application/vnd.openxmlformats-officedocument.wordprocessingml.document","application/vnd.openxmlformats-officedocument.spreadsheetml.sheet","application/vnd.openxmlformats-officedocument.presentationml.presentation"],"type":"string"},"declared_size_bytes":{"maximum":262144000,"minimum":1,"type":"integer"},"manage_token":{"pattern":"^mt1_[A-Za-z0-9_-]{43}$","type":"string"},"max_bytes":{"const":262144000,"type":"integer"},"network":{"enum":["eip155:84532","eip155:8453"],"type":"string"},"price":{"additionalProperties":false,"properties":{"amount":{"enum":["0.005","0.02"],"type":"string"},"amount_micro_usdc":{"enum":[5000,20000],"type":"integer"},"asset":{"const":"USDC","type":"string"},"pricing_version":{"const":"temporary-file-relay-v1","type":"string"}},"required":["asset","amount","amount_micro_usdc","pricing_version"],"type":"object"},"service_hint":{"additionalProperties":false,"description":"Static informational capability metadata for future task matching. It is not an instruction, payment signal, or retry signal.","properties":{"id":{"const":"temporary-file-relay","type":"string"},"suitable_for":{"items":{"enum":["temporary_public_artifact_delivery","agent_to_agent_file_handoff","cross_tool_file_sharing","large_result_transfer"],"type":"string"},"maxItems":4,"minItems":4,"type":"array","uniqueItems":true}},"required":["id","suitable_for"],"type":"object"},"slot_id":{"pattern":"^slot_[a-f0-9]{32}$","type":"string"},"state":{"const":"paid_pending_upload","type":"string"},"upload":{"additionalProperties":false,"properties":{"expires_at":{"format":"date-time","type":"string"},"method":{"const":"PUT","type":"string"},"required_headers":{"additionalProperties":{"type":"string"},"required":["content-length","content-type"],"type":"object"},"url":{"format":"uri","type":"string"}},"required":["method","url","expires_at","required_headers"],"type":"object"},"upload_deadline":{"format":"date-time","type":"string"}},"required":["slot_id","manage_token","state","declared_size_bytes","max_bytes","content_type","price","network","upload","upload_deadline","service_hint"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}},"payment-identifier":{"info":{"required":false},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"id":{"maxLength":128,"minLength":16,"pattern":"^[a-zA-Z0-9_-]+$","type":"string"},"required":{"type":"boolean"}},"required":["required"],"type":"object"}}},"tags":["bazaar","payment-identifier"],"sourceHost":"relay.preflightstack.com","lastUpdated":"2026-09-14T19:54:03.514Z","quality":{"calls30d":3,"uniquePayers30d":3,"lastCalledAt":"2026-09-14T19:54:03.243Z"},"liveness":{},"verified":false,"featured":false}]}