2s · Security Package

by 2s

GETBaseSolana

$0.0054

per call · USD Coin on Base

Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers "is this dependency safe to add, what license does it carry, and how well-maintained is it."

Endpoint

GET https://2s.io/api/security/package

1

Calls / 30d

1

Unique payers / 30d

Sep 2

Last called

exact

Payment scheme

Call this service

TypeScript · @x402/fetch
import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://2s.io/api/security/package", {
  method: "GET",
});
const data = await res.json();
cURL
curl -X GET \
  "https://2s.io/api/security/package?ecosystem=npm&name=lodash&version=4.17.20" \
  -H "X-PAYMENT: <signed x402 payment>"

Payment details

Pay to0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5
AssetUSD Coin · 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913
NetworksBase, Solana
Schemesexact

Is this your API?

Pin it to the top of AI & Inference and the homepage with a featured placement.

Get featured →

More from 2s & similar services