pkgproof · Verify

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://x402.pkgproof.net/v1/verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "ecosystem": "npm",
    "name": "left-pad",
    "version": "1.3.0"
  }),
});
const data = await res.json();

curl -X POST \
  "https://x402.pkgproof.net/v1/verify" \
  -H "Content-Type: application/json" \
  -d '{"ecosystem":"npm","name":"left-pad","version":"1.3.0"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "checked_at": "2026-08-26T12:00:00Z",
  "ecosystem": "npm",
  "name": "left-pad",
  "reasons": [
    {
      "code": "package_exists",
      "detail": "left-pad 1.3.0 is published on the npm registry.",
      "kind": "fact",
      "source": "npm registry",
      "verdict": "safe"
    },
    {
      "code": "no_known_advisories",
      "detail": "OSV lists no advisories for this version.",
      "kind": "fact",
      "source": "osv.dev",
      "verdict": "safe"
    }
  ],
  "sources": {
    "npm registry": "https://registry.npmjs.org",
    "osv.dev": "https://api.osv.dev"
  },
  "verdict": "safe",
  "version": "1.3.0"
}