Toolsmith · Package Check

by Toolsmith

GETBase

$0.01

per call · USD Coin on Base

Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. $0.01 USDC per call, pay via x402, no API key.

Endpoint

GET https://toolcall.click/t/package/check

1

Calls / 30d

1

Unique payers / 30d

Aug 17

Last called

exact

Payment scheme

Call this service

TypeScript · @x402/fetch
import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://toolcall.click/t/package/check", {
  method: "GET",
});
const data = await res.json();
cURL
curl -X GET \
  "https://toolcall.click/t/package/check?eco=npm&name=express&version=4.16.0" \
  -H "X-PAYMENT: <signed x402 payment>"

Example response

{
  "latestVersion": "5.2.1",
  "package": "express",
  "project": {
    "scorecard": 6.8,
    "stars": 65000
  },
  "verdict": "caution",
  "version": "4.16.0",
  "vulnerabilities": [
    {
      "cve": "CVE-2024-...",
      "cvss": 6.1,
      "fixedIn": "4.19.2",
      "id": "GHSA-..."
    }
  ]
}

Payment details

Pay to0x84fa7ea8303d4f503267e2e998a3f7d980e814a5
AssetUSD Coin · 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913
NetworksBase
Schemesexact

Is this your API?

Pin it to the top of Other and the homepage with a featured placement.

Get featured →

More from Toolsmith & similar services