Lockfile Audit

Verified: delivered 4 times

How we rate this

Delivery health: healthy. Paid successes: 4. Paid failures: 2. Last successful delivery: 2026-10-17. Schema confidence: high.

Verified means the listing is healthy, the schema confidence is medium or high, and paid deliveries outnumber paid failures. Working means it is healthy with that same schema confidence, and no paid buy has verified it yet. Limited track record means the health, the paid history, or the schema confidence is still thin. Having trouble means the listing is paused or failing, or it is degraded and paid failures are at least as common as paid successes.

30 sats · ≈$0.024

Reads one public lockfile URL (package-lock.json, pnpm-lock.yaml, poetry.lock, Cargo.lock, go.sum, or requirements.txt, up to 8 MB and 1000 dependencies) and returns vulnerable,

More

deprecated, unmaintained, and far-behind packages, grouped by severity, with a fixed version when one is published. No model is called. A private host, an unknown filename, or pasted text is refused before payment. $0.0244 a lockfile, settled in sats. Findings are from OSV and deps.dev and are not a security guarantee.

Example

What agents use this for. Reads one public lockfile URL (package-lock.json, pnpm-lock.yaml, poetry.lock, Cargo.lock, go.sum, or requirements.txt, up to 8 MB and 1000 dependencies) and returns vulnerable, deprecated, unmaintained, and far-behind packages, grouped by severity, with a fixed version when one is published. Category: documents.

Request

GET https://amazap.com/basics/v1/lockfile?url=https%3A%2F%2Fraw.githubusercontent.com%2Flodash%2Flodash%2F4.17.21%2Fpackage-lock.json

curl

curl -sS -X GET \
  'https://amazap.com/basics/v1/lockfile?url=https%3A%2F%2Fraw.githubusercontent.com%2Flodash%2Flodash%2F4.17.21%2Fpackage-lock.json' \
  -H 'Accept: application/json' \
  # Example only. No L402 token. Sends no sats.

MCP buy

buy({
  "sku": "amazap-basics-lockfile",
  "params": {
    "url": "https://raw.githubusercontent.com/lodash/lodash/4.17.21/package-lock.json"
  },
  "total_cost": "30 sats",
  "max_total_sats": 30
})

Example response

Stored from a successful paid delivery. Truncated to a size cap.

{"url":"https://raw.githubusercontent.com/lodash/lodash/4.17.21/package-lock.json","file":"package-lock.json","format":"npm","ecosystem":"npm","dependencies":602,"audited":602,"unpinned":0,"truncated":true,"advisoriesAvailable":true,"maintenanceAvailable":true,"counts":{"critical":4,"high":18,"medium":8,"low":0,"unknown":0,"deprecated":1,"unmaintained":90,"farBehind":14},"vulnerable":[{"ecosystem":"npm","name":"babel-traverse","version":"6.26.0","severity":"critical","id":"GHSA-67hx-6x53-jw92","summary":"Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code","fixed":"","advisories":1},{"ecosystem":"npm","name":"form-data","version":"2.1.4","severity":"critical","id":"GHSA-fjxv-7rqg-78g4","summary":"form-data uses unsafe random function in form-data for choosing boundary","fixed":"2.5.4, 3.0.4, 4.0.4","advisories":2},{"ecosystem":"npm","name":"form-data","version":"0.1.4","severity":"critical","id":"GHSA-fjxv-7rqg-78g4","summary":"form-data uses unsafe random function in form-data for choosing boundary","fixed":"2.5.4, 3.0.4, 4.0.4","advisories":2},{"ecosystem":"npm","name":"form-data","version":"2.3.3","severity":"critical","id":"GHSA-fjxv-7rqg-78g4","summary":"form-data uses unsafe random function in form-data for choosing boundary","fixed":"2.5.4, 3.0.4, 4.0.4","advisories":2},{"ecosystem":"npm","name":"async","version":"2.6.3","severity":"high","id":"GHSA-fwr7-v2mv-hh25","summary":"Prototype Pollution in async","fixed":"3.2.2, 2.6.4","advisories":1},{"ecosystem":"npm","name":"brace-expansion","version":"1.1.11","severity":"high","id":"GHSA-3jxr-9vmj-r5cp","summary":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","fixed":"5.0.7, 1.1.16, 2.1.2","advisories":8},{"ecosystem":"npm","name":"braces","version":"1.8.5","severity":"high","id":"GHSA-grv7-fg5c-xmjg","summary":"Uncontrolled resource consumption in braces","fixed":"3.0.3","advisories":2},{"ecosystem":"npm","name":"cross-spawn","version":"5.1.0","severity":"high","id":"GHS

Amazap Basics