80trust / 100
Package Changed
by Forest Packages in Security & trust
x402 APIPassing, checked 2 h ago
Detect whether normalized public npm or PyPI package registry state changed since a saved fingerprint. Returns a deterministic SHA-256 fingerprint for package/version existence, latest/resolved version, deprecation or yank state, license and runtime requirement. No dependency graph, vulnerability scan or registry mutation. Base mainnet USDC
POST https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/changed
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 100%
- Response time
- 67 ms typical, 154 ms slowest 5%
- Last check
- 2 h ago
- Next check
- any minute now
How to call it
# See the payment challenge (nothing is charged)
curl -i -X POST "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/changed" \
-H "content-type: application/json" \
-d '{"ecosystem":"npm","package":"express","version":"4.21.2"}'import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fhttp--forest-gas-station-mainnet--lcjl27p8lmjs.code.run%2Fpackage%2Fchanged
const res = await pay("https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/changed", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({"ecosystem":"npm","package":"express","version":"4.21.2"}),
});
console.log(await res.json());Example input
{
"ecosystem": "npm",
"package": "express",
"version": "4.21.2"
}Example output
{
"capability": "package.changed",
"data": {
"changed": false,
"ecosystem": "npm",
"fingerprint_fields": [
"ecosystem",
"package",
"exists",
"requested_version",
"requested_version_exists",
"resolved_version",
"latest_version",
"outdated",
"deprecated",
"yanked",
"license",
"requires_runtime"
],
"new_hash": "0000000000000000000000000000000000000000000000000000000000000000",
"package": "example",
"previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
"scope": "package_registry_metadata_only_no_dependency_graph",
"state": {
"deprecated": false,
"ecosystem": "npm",
"exists": false,
"latest_version": "example",
"license": "example",
"outdated": false,
"package": "example",
"requested_version": "example",
"requested_version_exists": false,
"requires_runtime": "example",
"resolved_version": "example",
"yanked": false
}
},
"meta": {
"cache": "miss",
"checked_at": "2026-01-01T00:00:00.000Z",
"duration_ms": 0,
"provider": "npm"
},
"ok": true,
"version": "1"
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 2 h ago | Passed | 402 | 41 ms | $0.002 |
| 6 h ago | Passed | 402 | 42 ms | $0.002 |
| 9 h ago | Passed | 402 | 40 ms | $0.002 |
| 13 h ago | Passed | 402 | 154 ms | $0.002 |
| 16 h ago | Passed | 402 | 302 ms | $0.002 |
| 20 h ago | Passed | 402 | 67 ms | $0.002 |
| 25 h ago | Passed | 402 | 90 ms | $0.002 |