All projects matching “package”

Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent installs it.

DeAI artifact gateway: reuse (package_check). Deterministic JSON with byte-exact quotes for $0.0100; no crawl, no bot walls.

Buy package:Basic

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Multi-carrier package tracking. Live: FedEx, USPS, DHL. In rollout: UPS. Roadmap (returns 'coming soon' to log demand): Canada Post, La Poste, Royal Mail, Australia Post, Evri, Deutsche Post, PostNL, China Post, Japan Post, India Post, Correos, Poste Italiane, Aramex, Yodel, Swiss Post, Correios BR, EMS, OnTrac, Amazon Shipping. Pass tracking_number (and optional carrier='royal_mail' style slug).

Use when you have a likely PyPI project name (or a few tokens) and need to resolve it to live projects: tries the query as-is, PEP 503 normalization (lowercase, [-_.] → -), and hyphen/underscore/dot variants, then returns up to "limit" matching projects with summary, version, requires_python and license. This is name resolution, not full-text discovery — prefer exact package names when known. Auth

Use this before adding or upgrading an npm dependency (OpenZeppelin, solmate, hardhat…), or to triage a lockfile: GitHub/OSV advisories affecting a whole package-lock.json or yarn.lock (or up to 100 listed packages) at their exact pinned versions. Instant, per request.

Verify the current stable npm or PyPI package release and check a version/date claim against canonical registry metadata.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (https://cve-intel.agentdiet.dev/v1/cve-intel)

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Verify an SEC filing: given a filer's CIK and a claimed accession number, does that filing actually exist, and does its form type/filing date match what's claimed? Checked against SEC EDGAR's submissions API. Catches a fabricated or misattributed filing citation, including a real-looking accession number paired with an invented form type or date.

Use before spending tokens, money or crawler capacity fetching an unfamiliar web resource. Resolves redirects (manually, bounded, re-validated per hop) and returns deterministic HTTP/resource facts — final URL, status, content type and length, response time, a bounded HTML title/canonical peek, and a lightweight generic-bot robots.txt indication — so an agent can decide whether a normal web fetch

MIME type for .bin files: application/octet-stream. Returns the Content-Type to send, the category, whether browsers render it inline, whether it is compressible, common magic bytes and related extensions. Set headers and validate uploads for .bin correctly. $0.01 per call.