PayPerByte · Feeds PKG Verdict

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://x402.payperbyte.io/feeds/pkg-verdict", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "ecosystem": "npm",
    "package": "left-pad"
  }),
});
const data = await res.json();

curl -X POST \
  "https://x402.payperbyte.io/feeds/pkg-verdict" \
  -H "Content-Type: application/json" \
  -d '{"ecosystem":"npm","package":"left-pad"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "_note": "Illustrative response shape — not a live answer. ALLOW/WARN/BLOCK is a screening signal. The embedded EIP-712 receipt (domain chainId 421614 = Arbitrum Sepolia, a frozen signing namespace, not a settlement rail) proves who signed the exact answer bytes — not that the verdict is correct.",
  "answer": {
    "methodology": "pv-v1",
    "query": {
      "ecosystem": "npm",
      "package": "left-pad",
      "version": null,
      "version_requested": null
    },
    "reasons": [
      "illustrative — real answers cite the pv-v1 OSV.dev / typosquat / registry / known-bad signals judged"
    ],
    "score": 96,
    "v": "pkg-verdict/v1",
    "verdict": "ALLOW"
  },
  "attestation": {
    "domain": {
      "chainId": 421614,
      "name": "BYTE Library",
      "version": "1"
    },
    "payloadHash": "0x…",
    "signature": "0x…",
    "signer": "0x…"
  }
}