{
  "x402Version": 2,
  "id": 26646,
  "slug": "26646",
  "resource": "https://toolcall.click/t/package/check",
  "description": "Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. $0.01 USDC per call, pay via x402, no API key.",
  "type": "http",
  "serviceName": "Toolsmith",
  "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784209498/bazaar-icons/45d84cc06bc45a4f.png",
  "resourceType": "Monitoring",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "10000",
      "amountUsd": 0.01,
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "method": "GET",
          "queryParams": {
            "eco": "npm",
            "name": "express",
            "version": "4.16.0"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "latestVersion": "5.2.1",
            "package": "express",
            "project": {
              "scorecard": 6.8,
              "stars": 65000
            },
            "verdict": "caution",
            "version": "4.16.0",
            "vulnerabilities": [
              {
                "cve": "CVE-2024-...",
                "cvss": 6.1,
                "fixedIn": "4.19.2",
                "id": "GHSA-..."
              }
            ]
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "properties": {
                  "eco": {
                    "description": "Ecosystem, default npm",
                    "enum": [
                      "npm",
                      "pypi",
                      "go",
                      "maven",
                      "cargo",
                      "rubygems",
                      "nuget"
                    ],
                    "type": "string"
                  },
                  "name": {
                    "description": "Package name, e.g. express or @scope/pkg",
                    "type": "string"
                  },
                  "version": {
                    "description": "Version to check, default latest",
                    "type": "string"
                  }
                },
                "required": [
                  "name"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "dependency security",
    "npm",
    "pypi",
    "cve",
    "vulnerabilities",
    "bazaar"
  ],
  "sourceHost": "toolcall.click",
  "lastUpdated": "2026-10-08T05:32:25.685Z",
  "quality": {
    "calls30d": 2,
    "uniquePayers30d": 2,
    "lastCalledAt": "2026-10-08T05:32:25.23Z"
  },
  "metadata": {
    "serviceName": "Toolsmith",
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784209498/bazaar-icons/45d84cc06bc45a4f.png",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "eco": "npm",
              "name": "express",
              "version": "4.16.0"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "latestVersion": "5.2.1",
              "package": "express",
              "project": {
                "scorecard": 6.8,
                "stars": 65000
              },
              "verdict": "caution",
              "version": "4.16.0",
              "vulnerabilities": [
                {
                  "cve": "CVE-2024-...",
                  "cvss": 6.1,
                  "fixedIn": "4.19.2",
                  "id": "GHSA-..."
                }
              ]
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "eco": {
                      "description": "Ecosystem, default npm",
                      "enum": [
                        "npm",
                        "pypi",
                        "go",
                        "maven",
                        "cargo",
                        "rubygems",
                        "nuget"
                      ],
                      "type": "string"
                    },
                    "name": {
                      "description": "Package name, e.g. express or @scope/pkg",
                      "type": "string"
                    },
                    "version": {
                      "description": "Version to check, default latest",
                      "type": "string"
                    }
                  },
                  "required": [
                    "name"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "toolcall.click",
    "manifest_name": "toolcall.click",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "example": {},
    "type": "string"
  }
}