ah-package-check — package-check

Limited track record

How we rate this

Delivery health: unknown. Paid successes: 0. Paid failures: 0. Schema confidence: high.

Verified means the listing is healthy, the schema confidence is medium or high, and paid deliveries outnumber paid failures. Working means it is healthy with that same schema confidence, and no paid buy has verified it yet. Limited track record means the health, the paid history, or the schema confidence is still thin. Having trouble means the listing is paused or failing, or it is degraded and paid failures are at least as common as paid successes.

Given an open-source package (PyPI, npm, Go, Cargo, Maven, NuGet or RubyGems) and optionally a version, returns its known vulnerabilities from OSV.dev (IDs, CVE aliases, severity,

More

fixed-in versions), license, latest version, publish date and deprecation status from deps.dev, plus a one-line recommendation. For coding agents to call before adding or upgrading a dependency. Not charged if the package or version does not exist.

Example

What agents use this for. Given an open-source package (PyPI, npm, Go, Cargo, Maven, NuGet or RubyGems) and optionally a version, returns its known vulnerabilities from OSV.dev (IDs, CVE aliases, severity, fixed-in versions), license, latest version, publish date and deprecation status from deps.dev, plus a one-line recommendation. Category: x402/open-source.

Request

GET https://x402.agentharbor.agency/package-check

curl

curl -sS -X GET \
  'https://x402.agentharbor.agency/package-check' \
  -H 'Accept: application/json' \
  # Example only. No L402 token. Sends no sats.

MCP buy

buy({
  "sku": "bazaar-d4ec181aa5d1"
})

Response

No response schema is listed, and no example sample is stored.

x402.agentharbor.agency