{"api":"v1","generated_at":"2026-09-15T22:48:25.761Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/2s-io-api-security-package-8ce5ba","pinned_page":"https://tollindex.com/e/2s-io-api-security-package-8ce5ba/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"2s-io-api-security-package-8ce5ba","canonical_url":"https://2s.io/api/security/package","resource":"https://2s.io/api/security/package","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\"","service_name":"2s","declared_category":null,"declared_tags":["public-records","identifiers","ai-agents","us-gov-data","x402"],"route_template":null,"registry_updated":"2026-09-11T10:42:10.943Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"security package","category":"inference","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.0054 USDC","amount_units":0.0054,"decimals_known":true,"pay_to":"0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":"USDC","symbol":"USDC","decimals":6,"amount_display":"0.0054 USDC","amount_units":0.0054,"decimals_known":true,"pay_to":"TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":2,"unique_payers_30d":1,"last_called_at":"2026-09-11T10:42:10.760Z"},"validation":{"latest":{"observed_at":"2026-09-15T05:48:43.482Z","state":"pass","failed_checks":["bazaar.info.output"],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T05:48:43.482Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:21:12.039Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:16:44.115Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:33:05.902Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T11:19:58.908Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5","page":"https://tollindex.com/seller/0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5","endpoints":61,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["public-records","identifiers","ai-agents","us-gov-data","x402"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5","amount":"5400","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":60},{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"name":"USDC","version":"1","feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"},"payTo":"TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn","amount":"5400","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":60}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1781454341/bazaar-icons/58f7ba8f2b3b8047.png","quality":{"lastCalledAt":"2026-09-11T10:42:10.76Z","l30DaysTotalCalls":2,"l30DaysUniquePayers":1},"resource":"https://2s.io/api/security/package","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"name":"lodash","version":"4.17.20","ecosystem":"npm"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"required":["ecosystem","name"],"properties":{"name":{"type":"string","description":"Package name (e.g. lodash, requests)."},"version":{"type":"string","description":"Version (defaults to latest)."},"ecosystem":{"type":"string","description":"Package ecosystem: npm, pypi, go, maven, cargo, or nuget."}}}}}}}}},"description":"Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\"","lastUpdated":"2026-09-11T10:42:10.943Z","serviceName":"2s","x402Version":2}]}}