{
  "x402Version": 2,
  "id": 51514,
  "slug": "51514",
  "resource": "https://apexfaucet.xyz/api/x402/software-risk",
  "description": "Known vulnerabilities for one package version from OSV.dev, with CISA exploited-in-the-wild flag and the fixed version. Should I install this? Pass ?package=lodash&ecosystem=npm&version=4.17.15 (npm, PyPI, Go, crates.io, Maven, NuGet, RubyGems, Packagist, Hex, Pub) and get every known advisory for that exact version from OSV.dev (GitHub, PyPA, Go and RustSec databases), whether any of them is on CISA's Known Exploited Vulnerabilities list, severity, and the version that fixes each.",
  "type": "http",
  "serviceName": "npm package vulnerability check",
  "resourceType": "Security",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:5042",
      "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "asset": "0x3600000000000000000000000000000000000000",
      "amount": "3000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:5042",
      "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "asset": "0x3600000000000000000000000000000000000000",
      "amount": "3000",
      "maxTimeoutSeconds": 604900
    },
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 604900
    },
    {
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "payTo": "HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ",
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "amount": "3000",
      "amountUsd": 0.003,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:56",
      "payTo": "0xd334AB5151C624cAdA654854E2879903Dc4217eD",
      "asset": "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d",
      "amount": "10000000000000000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:56",
      "payTo": "0xd334AB5151C624cAdA654854E2879903Dc4217eD",
      "asset": "0xcE24439F2D9C6a2289F741120FE202248B666666",
      "amount": "10000000000000000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "discoverable": true,
          "method": "GET",
          "queryParams": {
            "ecosystem": "npm",
            "package": "lodash",
            "version": "4.17.15"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "data": {
              "advisories": 6,
              "ecosystem": "npm",
              "exploited": 0,
              "licenseVerified": true,
              "licenseVerifiedOn": "2026-09-30",
              "note": "Records copied only from databases licen…",
              "ok": true,
              "package": "lodash",
              "sources": [
                {}
              ],
              "verdict": "VULNERABLE: 6 known advisories for this …",
              "version": "4.17.15",
              "vulnerabilities": [
                {}
              ]
            },
            "ok": true,
            "paid": 0.003
          },
          "schema": {
            "properties": {
              "data": {
                "type": "object"
              },
              "ok": {
                "type": "boolean"
              },
              "paid": {
                "type": "number"
              }
            },
            "type": "object"
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "properties": {
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "properties": {
                  "ecosystem": {
                    "description": "Package ecosystem.",
                    "enum": [
                      "npm",
                      "PyPI",
                      "Go",
                      "crates.io",
                      "Maven",
                      "NuGet",
                      "RubyGems",
                      "Packagist",
                      "Hex",
                      "Pub"
                    ],
                    "type": "string"
                  },
                  "package": {
                    "description": "Package name exactly as the registry has it (Maven: group:artifact).",
                    "maxLength": 214,
                    "minLength": 1,
                    "type": "string"
                  },
                  "version": {
                    "description": "The exact version to check.",
                    "maxLength": 64,
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "package",
                  "ecosystem",
                  "version"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "queryParams"
            ],
            "type": "object"
          },
          "output": {
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "vulnerability",
    "security",
    "npm",
    "cve",
    "dependencies",
    "bazaar"
  ],
  "sourceHost": "apexfaucet.xyz",
  "lastUpdated": "2026-10-08T06:10:13.132Z",
  "quality": {
    "calls30d": 4,
    "uniquePayers30d": 3,
    "lastCalledAt": "2026-10-08T06:10:12.919Z"
  },
  "metadata": {
    "serviceName": "npm package vulnerability check",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "discoverable": true,
            "method": "GET",
            "queryParams": {
              "ecosystem": "npm",
              "package": "lodash",
              "version": "4.17.15"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "data": {
                "advisories": 6,
                "ecosystem": "npm",
                "exploited": 0,
                "licenseVerified": true,
                "licenseVerifiedOn": "2026-09-30",
                "note": "Records copied only from databases licen…",
                "ok": true,
                "package": "lodash",
                "sources": [
                  {}
                ],
                "verdict": "VULNERABLE: 6 known advisories for this …",
                "version": "4.17.15",
                "vulnerabilities": [
                  {}
                ]
              },
              "ok": true,
              "paid": 0.003
            },
            "schema": {
              "properties": {
                "data": {
                  "type": "object"
                },
                "ok": {
                  "type": "boolean"
                },
                "paid": {
                  "type": "number"
                }
              },
              "type": "object"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ecosystem": {
                      "description": "Package ecosystem.",
                      "enum": [
                        "npm",
                        "PyPI",
                        "Go",
                        "crates.io",
                        "Maven",
                        "NuGet",
                        "RubyGems",
                        "Packagist",
                        "Hex",
                        "Pub"
                      ],
                      "type": "string"
                    },
                    "package": {
                      "description": "Package name exactly as the registry has it (Maven: group:artifact).",
                      "maxLength": 214,
                      "minLength": 1,
                      "type": "string"
                    },
                    "version": {
                      "description": "The exact version to check.",
                      "maxLength": 64,
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "package",
                    "ecosystem",
                    "version"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "queryParams"
              ],
              "type": "object"
            },
            "output": {
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "apexfaucet.xyz",
    "manifest_name": "apexfaucet.xyz",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {}
}