Overview
Given an open-source package (PyPI, npm, Go, Cargo, Maven, NuGet or RubyGems) and optionally a version, returns its known vulnerabilities from OSV.dev (IDs, CVE aliases, severity, fixed-in versions), license, latest version, publish date and deprecation status from deps.dev, plus a one-line recommendation. For coding agents to call before adding or upgrading a dependency. Not charged if the package or version does not exist.
Protocol
x402
Price
$0.0030
Payment Asset
USD Coin
Payment Network
Base
Category
uncategorized
Provider
ah-package-check
Indexed
2026-10-17 19:39:23
Health
Status
healthy
Latency (p50)
735ms
Uptime (30d)
100.0%
Reliability Score
90/100
Last Checked
2026-10-27 23:28:42
Last Healthy
2026-10-27 23:28:42
Consecutive Failures
0
Input Schema
{
"method": "GET",
"queryParams": {
"ecosystem": "pypi",
"name": "requests",
"version": "2.25.0"
},
"type": "http"
}
Output Schema
{
"example": {
"data": {
"attribution": "Vulnerability data from OSV.dev (https://osv.dev, CC-BY 4.0); package metadata from deps.dev (https://deps.dev, CC-BY 4.0).",
"deprecated": false,
"deprecated_reason": null,
"ecosystem": "pypi",
"is_latest": false,
"latest_version": "2.34.2",
"licenses": [
"Apache-2.0"
],
"links": {
"documentation": "https://requests.readthedocs.io",
"source_repo": "https://github.com/psf/requests"
},
"max_severity": "MODERATE",
"name": "requests",
"published_at": "2020-11-11",
"recommendation": "upgrade: known vulnerabilities in this version",
"sources": [
"https://api.deps.dev/v3/systems/PYPI/packages/requests",
"https://api.deps.dev/v3/systems/PYPI/packages/requests/versions/2.25.0"
],
"version": "2.25.0",
"vulnerabilities": [
{
"aliases": [
"CVE-2024-47081",
"PYSEC-2026-1872"
],
"fixed_in": [
"2.32.4"
],
"id": "GHSA-9hjg-9r4m-mvj7",
"published": "2025-06-09",
"severity": "MODERATE",
"summary": "Requests vulnerable to .netrc credentials leak via malicious URLs",
"url": "https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"
},
{
"aliases": [
"CVE-2024-35195",
"PYSEC-2026-1873"
],
"fixed_in": [
"2.32.0"
],
"id": "GHSA-9wx4-h78v-vm56",
"published": "2024-05-20",
"severity": "MODERATE",
"summary": "Requests `Session` object does not verify requests after making first request with verify=False",
"url": "https://osv.dev/vulnerability/GHSA-9wx4-h78v-vm56"
}
],
"vulnerability_count": 8,
"vulnerability_count_is_lower_bound": false
},
"price_paid_usdc": 0.003,
"product": "package_check",
"provider": "Agent Harbor — public-data service",
"tier": "package-check"
},
"type": "json"
}