{"api":"v1","generated_at":"2026-09-16T03:57:43.946Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/toolcall-click-t-package-check-f94b1b","pinned_page":"https://tollindex.com/e/toolcall-click-t-package-check-f94b1b/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"toolcall-click-t-package-check-f94b1b","canonical_url":"https://toolcall.click/t/package/check","resource":"https://toolcall.click/t/package/check","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. $0.01 USDC per call, pay via x402, no API key.","service_name":"Toolsmith","declared_category":null,"declared_tags":["dependency security","npm","pypi","cve","vulnerabilities"],"route_template":null,"registry_updated":"2026-09-12T09:50:00.288Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"package check","category":"other","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":2,"unique_payers_30d":1,"last_called_at":"2026-09-12T09:49:59.965Z"},"validation":{"latest":{"observed_at":"2026-09-15T07:05:46.945Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T07:05:46.945Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T06:32:00.049Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T06:21:18.670Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T10:33:45.392Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T14:50:50.433Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5","page":"https://tollindex.com/seller/0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5","endpoints":25,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["dependency security","npm","pypi","cve","vulnerabilities"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x84FA7Ea8303d4f503267e2e998A3F7D980e814a5","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784209498/bazaar-icons/45d84cc06bc45a4f.png","quality":{"lastCalledAt":"2026-09-12T09:49:59.965Z","l30DaysTotalCalls":2,"l30DaysUniquePayers":1},"resource":"https://toolcall.click/t/package/check","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"eco":"npm","name":"express","version":"4.16.0"}},"output":{"type":"json","example":{"package":"express","project":{"stars":65000,"scorecard":6.8},"verdict":"caution","version":"4.16.0","latestVersion":"5.2.1","vulnerabilities":[{"id":"GHSA-...","cve":"CVE-2024-...","cvss":6.1,"fixedIn":"4.19.2"}]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["name"],"properties":{"eco":{"enum":["npm","pypi","go","maven","cargo","rubygems","nuget"],"type":"string","description":"Ecosystem, default npm"},"name":{"type":"string","description":"Package name, e.g. express or @scope/pkg"},"version":{"type":"string","description":"Version to check, default latest"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}}},"description":"Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. $0.01 USDC per call, pay via x402, no API key.","lastUpdated":"2026-09-12T09:50:00.288Z","serviceName":"Toolsmith","x402Version":2}]}}