Lockfile Audit
Limited track record
How we rate this
Delivery health: healthy. Paid successes: 1. Paid failures: 2. Last successful delivery: 2026-10-16. Schema confidence: high.
Verified means the listing is healthy, the schema confidence is medium or high, and paid deliveries outnumber paid failures. Working means it is healthy with that same schema confidence, and no paid buy has verified it yet. Limited track record means the health, the paid history, or the schema confidence is still thin. Having trouble means the listing is paused or failing, or it is degraded and paid failures are at least as common as paid successes.
31 sats · ~$0.0244 USD
Reads one public lockfile URL (package-lock.json, pnpm-lock.yaml, poetry.lock, Cargo.lock, go.sum, or requirements.txt, up to 8 MB and 1000 dependencies) and returns vulnerable,
More
deprecated, unmaintained, and far-behind packages, grouped by severity, with a fixed version when one is published. No model is called. A private host, an unknown filename, or pasted text is refused before payment. $0.0244 a lockfile, settled in sats. Findings are from OSV and deps.dev and are not a security guarantee.
Example
What agents use this for. Reads one public lockfile URL (package-lock.json, pnpm-lock.yaml, poetry.lock, Cargo.lock, go.sum, or requirements.txt, up to 8 MB and 1000 dependencies) and returns vulnerable, deprecated, unmaintained, and far-behind packages, grouped by severity, with a fixed version when one is published. Category: documents.
Request
GET https://amazap.com/basics/v1/lockfile?url=https%3A%2F%2Fexample.com%2Fpackage-lock.json
curl
curl -sS -X GET \ 'https://amazap.com/basics/v1/lockfile?url=https%3A%2F%2Fexample.com%2Fpackage-lock.json' \ -H 'Accept: application/json' \ # Example only. No L402 token. Sends no sats.
MCP buy
buy({
"sku": "amazap-basics-lockfile",
"params": {
"url": "https://example.com/package-lock.json"
},
"total_cost": "31 sats",
"max_total_sats": 31
})
Example response
Stored from a successful paid delivery.
{"url":"https://raw.githubusercontent.com/BurntSushi/ripgrep/master/Cargo.lock","file":"Cargo.lock","format":"cargo","ecosystem":"cargo","dependencies":52,"audited":52,"unpinned":0,"truncated":false,"advisoriesAvailable":true,"maintenanceAvailable":true,"counts":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0,"deprecated":0,"unmaintained":4,"farBehind":0},"vulnerable":[],"deprecated":[],"unmaintained":[{"ecosystem":"cargo","name":"fst","version":"0.4.7","latest":"0.4.7","latestReleasedAt":"2021-06-06T11:00:31Z"},{"ecosystem":"cargo","name":"same-file","version":"1.0.6","latest":"1.0.6","latestReleasedAt":"2020-01-11T17:02:30Z"},{"ecosystem":"cargo","name":"termcolor","version":"1.4.1","latest":"1.4.1","latestReleasedAt":"2024-01-10T12:40:32Z"},{"ecosystem":"cargo","name":"walkdir","version":"2.5.0","latest":"2.5.0","latestReleasedAt":"2024-03-01T17:55:09Z"}],"farBehind":[],"note":"Findings are from OSV and deps.dev and are not a security guarantee.","sources":["osv","deps.dev"],"elapsed_ms":804,"cached":false,"markdown":"# Lockfile audit\n\nFile: Cargo.lock\nDependencies: 52\n\n| Severity | Package | Locked | Fixed |\n| --- | --- | --- | --- |\n| none | | | |\n\n## Unmaintained\n\n- cargo:fst@0.4.7, latest 0.4.7\n- cargo:same-file@1.0.6, latest 1.0.6\n- cargo:termcolor@1.4.1, latest 1.4.1\n- cargo:walkdir@2.5.0, latest 2.5.0\n\nFindings are from OSV and deps.dev and are not a security guarantee."}
Amazap Basics