Package metadata and latest or pinned-version dependency-risk signals

$0.002 per call · failed calls are never charged · no account or API key needed

Reports package existence, latest version and release, age, version count, npm weekly downloads, licenses, deprecation and known advisory severity. ok means no listed flags, not a safety guarantee. Supports npm, PyPI, Cargo, Go, Maven and NuGet. Optional exact version adds pinned-version metadata and uses deps.dev advisories; use /package-audit for OSV affected ranges and dated FIRST EPSS CVE estimates. Use before adding a dependency.

Run it free (25 free calls) Buy credits by card (from $5) Example result (JSON)

Inputs

NameTypeDescription
ecosystem (required)stringOne of npm, pypi, cargo, go, maven, nuget
name (required)stringExact package name, e.g. lodash or @scope/name
versionstringOptional exact version to inspect; ranges and tags are not accepted

Request

Over HTTP, with a card key from /credits:

curl -H "Authorization: Bearer adt_…" "https://agent-data-tools.revmesh2074.workers.dev/package?ecosystem=npm&name=lodash"

Or one of your 25 free calls, no key:

curl "https://agent-data-tools.revmesh2074.workers.dev/package?ecosystem=npm&name=lodash&trial=1"

Without a key, the same URL answers 402 Payment Required with x402 and MPP terms, so an agent with a wallet pays per call in USDC (Base, Polygon, Arbitrum, Monad, World Chain or Tempo) and retries.

Example result

{
  "ecosystem": "npm",
  "name": "lodash",
  "exists": true,
  "verdict": "ok",
  "flags": [],
  "latestVersion": "4.18.1",
  "ageDays": 5282,
  "versionCount": 117,
  "weeklyDownloads": 162476177,
  "licenses": [
    "MIT"
  ],
  "deprecated": false,
  "knownVulnerabilities": 0,
  "advisories": [],
  "repository": "git+https://github.com/lodash/lodash.git"
}

From an AI agent (MCP)

Add the MCP server to Claude, Cursor or any MCP client. This tool is package, and the first 25 successful calls are free:

https://agent-data-tools.revmesh2074.workers.dev/mcp

Related tools