Dependency Verdict

Last 30 days

Uptime

6.7%

Response time

926 ms typical, 926 ms slowest 5%

Last check

3 h ago: Expected HTTP 402, got 410

Next check

any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://aayatai.com/dependency/verdict?ecosystem=npm&name=express"

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Faayatai.com%2Fdependency%2Fverdict
const res = await pay("https://aayatai.com/dependency/verdict?ecosystem=npm&name=express");
console.log(await res.json());

Example input

{
  "ecosystem": "npm",
  "name": "express"
}

Example output

{
  "advice": "Express is safe to use: no known vulnerabilities in 5.1.0, active maintenance and an MIT licence.",
  "checkedAt": "2026-09-28T12:00:00.000Z",
  "decision": "use",
  "ecosystem": "npm",
  "name": "express",
  "package": {
    "checkedAt": "2026-09-28T12:00:00.000Z",
    "deprecated": null,
    "description": "Fast, unopinionated, minimalist web framework",
    "ecosystem": "npm",
    "flags": [
      {
        "code": "not-latest",
        "level": "info",
        "message": "A newer version exists: 5.1.0."
      }
    ],
    "installScripts": [],
    "isLatest": false,
    "latestVersion": "5.1.0",
    "licenceKind": "permissive",
    "licences": [
      "MIT"
    ],
    "lookalikeOf": [],
    "maintainers": 5,
    "name": "express",
    "releases": {
      "firstPublishedAt": "2010-12-29T19:38:25Z",
      "latest": "5.1.0",
      "latestPublishedAt": "2026-03-31T14:00:00Z",
      "releasesLast365Days": 6,
      "versions": 280
    },
    "repo": {
      "forks": 16000,
      "openIssues": 180,
      "scorecard": 8.1,
      "stars": 66000
    },
    "repository": "https://github.com/expressjs/express",
    "score": 100,
    "sources": [
      "deps.dev",
      "OSV.dev",
      "npm registry"
    ],
    "verdict": "ok",
    "version": "4.21.2",
    "vulnerabilities": [],
    "vulnerabilityCounts": {
      "critical": 0,
      "high": 0,
      "low": 0,
      "moderate": 0,
      "unknown": 0
    },
    "weeklyDownloads": 41000000
  },
  "reasons": [
    "No known vulnerabilities, maintained, permissive licence."
  ],
  "repository": {
    "activeCommittersLast90Days": 24,
    "archived": false,
    "checkedAt": "2026-09-28T12:00:00.000Z",
    "commitsLast90Days": 100,
    "communityHealthPercent": 87,
    "createdAt": "2021-12-14T20:05:30Z",
    "defaultBranch": "main",
    "description": "Web framework built on Web Standards",
    "flags": [],
    "forks": 1346,
    "isFork": false,
    "lastPushAt": "2026-09-27T03:11:53Z",
    "latestRelease": {
      "publishedAt": "2026-09-24T01:32:14Z",
      "tag": "v4.13.9"
    },
    "licence": "MIT",
    "openIssues": 391,
    "partial": false,
    "releasesLastYear": 30,
    "repo": "honojs/hono",
    "score": 100,
    "scorecard": {
      "checks": [
        {
          "name": "Maintained",
          "score": 10
        }
      ],
      "date": "2026-09-22",
      "score": 7.4
    },
    "sources": [
      "GitHub REST API",
      "deps.dev (OpenSSF Scorecard)"
    ],
    "stars": 32361,
    "url": "https://github.com/honojs/hono",
    "verdict": "healthy"
  },
  "version": "5.1.0"
}

Security scan

• No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks