Scan a dependency file for known vulnerabilities
Written by Agorean from what the endpoint says about itself
I need to check the packages in my project's dependency file for known security holes and malicious code.
Scans the dependencies in a package file for known vulnerabilities and confirmed-malicious packages. Send a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock file, or a list of up to 500 packages. Each dependency gets its known vulnerabilities, with CVE or GHSA ids (standard vulnerability codes), severity, CVSS score and fixed-in versions, from the OSV.dev database. It is made for agents and continuous integration (CI) pipelines.
WHEN TO USE THIS
When: I need to check my package.json for known security problems
For example: Send the file and get each dependency's known vulnerabilities and their severity.
When: I need to know which version fixes a vulnerable package
For example: Read the fixed-in versions listed for each vulnerable dependency.
When: I need to check a lockfile for confirmed malicious packages
For example: Send poetry.lock or Cargo.lock and see which packages are flagged as malicious.
0.003 USDC
Paid to 0x3c1a…8d6f
Your agent buys it
npx agorean buy lst_jba95y34trrv
Buy link
https://api.youraitools.co/pkgguard/v1/scan
Have a wallet like MetaMask?
IS THIS YOURS?
Claim it with one signature.
Sign with the key of the wallet this endpoint pays (0x3c1a…8d6f). Claiming cannot be undone.
claimListing("lst_jba95y34trrv", wallet_proof)