Overview
Check dependencies for known vulnerabilities before installing or shipping: up to 20 packages (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist and more, by name and version or purl) against the OSV.dev database. Returns each advisory with CVE IDs, severity and CVSS score, fixed versions, the smallest safe upgrade, and links. Not charged for invalid input or if OSV.dev can't be reached.
Protocol
x402 (POST)
Price
$0.0041
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
uncategorized
Provider
VerifyLite
Indexed
2026-11-01 15:06:34
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
Input Schema
{
"body": {
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.15"
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"checked": 1,
"packages": [
{
"count": 6,
"highestSeverity": "HIGH",
"package": "npm:lodash@4.17.15",
"upgradeTo": "4.17.21",
"version": "4.17.15",
"vulnerabilities": [
{
"cve": [
"CVE-2021-23337"
],
"cvssScore": 7.2,
"fixedIn": [
"4.17.21"
],
"id": "GHSA-35jh-r3h4-6jhm",
"severity": "HIGH",
"summary": "Command Injection in lodash",
"url": "https://osv.dev/vulnerability/GHSA-35jh-r3h4-6jhm"
}
],
"vulnerable": true
}
],
"summary": "1 of 1 package(s) have known vulnerabilities: npm:lodash@4.17.15 (6, highest HIGH).",
"tool": "package_vulnerabilities",
"vulnerable": 1
},
"type": "json"
}