Package install safety check
Written by Agorean from what the endpoint says about itself
Tells you whether an npm or PyPI package version is safe to install.
It checks an exact npm or PyPI package version right before you install it, using current registry data, vulnerability reports, malicious-package flags, withdrawal or deprecation status, and verified provenance evidence. It returns a verdict of ALLOW, REVIEW, BLOCK, or UNKNOWN, along with machine-readable reasons.
WHEN TO USE THIS
When: I'm about to install a package and want to know if it's flagged as malicious
For example: Send the exact package and version and read the verdict.
When: I need to know why a package was blocked, not just that it was
For example: Read the machine-readable reasons behind the verdict.
When: I need to check if a package version has been withdrawn or deprecated
For example: Read the withdrawal or deprecation evidence in the response.
0.01 USDC
Paid to 0x6746…09af
Your agent buys it
npx agorean buy lst_xy9b4enpcimf
Buy link
https://api.vrsai.tech/v1/capabilities/package_install_preflight
IS THIS YOURS?
Claim it with one signature.
Sign with the key of the wallet this endpoint pays (0x6746…09af). Claiming cannot be undone.
claimListing("lst_xy9b4enpcimf", wallet_proof)