SpellzCode — Audit up to 10 dependencies, with exact-version advisories and fixes
https://agent-data-tools.revmesh2074.workers.dev/package-auditOverview
Check up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates. Scoped npm names supported. Detail and subrequest caps apply; omitted details and incomplete coverage are explicit. Missing evidence is unknown, not zero risk. Automated signals, not a safety guarantee. See the buying guide for limits. Use before installing or upgrading dependencies. Details: Audit up to 10 ecosystem:name ite
Protocol
x402
Price
$0.01
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
tools/security
Provider
SpellzCode
Source
self-registered
Indexed
2026-10-15 10:37:47
Health
Status
healthy
Latency (p50)
390ms
Uptime (30d)
95.5%
Reliability Score
92.7/100
Last Checked
2026-10-31 07:03:07
Last Healthy
2026-10-31 07:03:07
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
Valid
Asset Verified
Known USDC
Facilitator
—
Input Schema
{
"method": "GET",
"queryParams": {
"packages": "npm:lodash@4.17.20,pypi:requests@2.31.0,npm:@types/node@22.0.0"
},
"type": "http"
}
Output Schema
{
"example": {
"checked": 1,
"epssLookup": {
"malformedRows": 0,
"note": "FIRST EPSS estimates 30-day exploitation probability, not package safety.",
"omittedCves": 0,
"queriedCves": 1,
"requestedCves": 1,
"retrievedAt": "2026-10-14T12:00:00.000Z",
"returnedScores": 1,
"source": "FIRST EPSS",
"sourceStatus": "available",
"status": "complete",
"uninspectedAdvisoryDetails": 0
},
"lookupFailed": 0,
"notFound": 0,
"results": [
{
"advisories": [],
"advisoryDetailsOmitted": 1,
"advisoryDetailsStatus": "not-fetched-subrequest-budget",
"advisoryDetailsUnavailable": 0,
"advisoryIds": [
"GHSA-xvch-5gv4-984h"
],
"ecosystem": "npm",
"exists": true,
"flags": [
"known-vulnerabilities"
],
"knownVulnerabilities": 1,
"knownVulnerabilityCountSources": [
"deps.dev",
"OSV"
],
"name": "minimist",
"retrievedAt": "2026-10-14T12:00:00.000Z",
"source": "deps.dev",
"verdict": "caution",
"version": "1.2.5",
"versionAdvisories": {
"advisoryCount": 1,
"note": "OSV advisories are matched to this exact package version.",
"retrievedAt": "2026-10-14T12:00:00.000Z",
"source": "OSV",
"status": "complete",
"vulnerabilities": [
{
"aliases": [
"CVE-2021-44906"
],
"detailStatus": "available",
"epss": {
"note": "EPSS estimates 30-day exploitation probability for CVE aliases; it is not a package-safety guarantee. Null scores are unknown, not zero.",
"retrievedAt": "2026-10-14T12:00:00.000Z",
"scores": [
{
"cve": "CVE-2021-44906",
"date": "2026-10-14",
"percentile": 0.91484,
"score": 0.04581,
"status": "available"
}
],
"source": "FIRST EPSS",
"sourceStatus": "available",
"status": "complete"
},
"fixedVersionRanges": [
{
"events": [
{
"introduced": "1.0.0"
},
{
"fixed": "1.2.6"
}
],
"fixedVersions": [
"1.2.6"
],
"type": "SEMVER"
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.4"
}
],
"fixedVersions": [
"0.2.4"
],
"type": "SEMVER"
}
],
"id": "GHSA-xvch-5gv4-984h",
"modified": "2026-03-13T22:11:59.523514Z",
"published": "2022-03-18T00:01:09Z",
"rangeStatus": "reported",
"retrievedAt": "2026-10-14T12:00:00.000Z",
"source": "OSV",
"sourceUrl": "https://osv.dev/vulnerability/GHSA-xvch-5gv4-984h",
"summary": "Prototype Pollution in minimist"
}
]
},
"versionExists": true,
"weeklyDownloads": null,
"weeklyDownloadsStatus": "not-fetched-subrequest-budget"
}
],
"source": "deps.dev",
"summary": "All 1 package(s) exist. Review each verdict and flags before installing.",
"versionAdvisoryLookupIncomplete": 0,
"versionNotFound": 0
},
"type": "json"
}