61trust / 100

Package Check

by Aayat AI in Security & trust

x402 APIFailing, checked 2 h ago

Should a coding agent install this package? Checks one npm, PyPI, crates or Go package version for known vulnerabilities and malware (OSV.dev), deprecation, typosquat look-alike names, install scripts, licence, downloads, release activity and OpenSSF Scorecard, then gives a verdict (ok/caution/avoid), a 0-100 score and every reason. Pass ?ecosystem=npm&name=express.

GET https://aayatai.com/package/check

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
33.3%
Response time
42 ms typical, 42 ms slowest 5%
Last check
2 h ago: Expected HTTP 402, got 410
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://aayatai.com/package/check?ecosystem=npm&name=express&version=4.21.2"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Faayatai.com%2Fpackage%2Fcheck
const res = await pay("https://aayatai.com/package/check?ecosystem=npm&name=express&version=4.21.2");
console.log(await res.json());

Example input

{
  "ecosystem": "npm",
  "name": "express",
  "version": "4.21.2"
}

Example output

{
  "checkedAt": "2026-09-28T12:00:00.000Z",
  "deprecated": null,
  "description": "Fast, unopinionated, minimalist web framework",
  "ecosystem": "npm",
  "flags": [
    {
      "code": "not-latest",
      "level": "info",
      "message": "A newer version exists: 5.1.0."
    }
  ],
  "installScripts": [],
  "isLatest": false,
  "latestVersion": "5.1.0",
  "licenceKind": "permissive",
  "licences": [
    "MIT"
  ],
  "lookalikeOf": [],
  "maintainers": 5,
  "name": "express",
  "releases": {
    "firstPublishedAt": "2010-12-29T19:38:25Z",
    "latest": "5.1.0",
    "latestPublishedAt": "2026-03-31T14:00:00Z",
    "releasesLast365Days": 6,
    "versions": 280
  },
  "repo": {
    "forks": 16000,
    "openIssues": 180,
    "scorecard": 8.1,
    "stars": 66000
  },
  "repository": "https://github.com/expressjs/express",
  "score": 100,
  "sources": [
    "deps.dev",
    "OSV.dev",
    "npm registry"
  ],
  "verdict": "ok",
  "version": "4.21.2",
  "vulnerabilities": [],
  "vulnerabilityCounts": {
    "critical": 0,
    "high": 0,
    "low": 0,
    "moderate": 0,
    "unknown": 0
  },
  "weeklyDownloads": 41000000
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
2 h agoExpected HTTP 402, got 410410123 ms-
5 h agoExpected HTTP 402, got 41041048 ms-
10 h agoPassed40242 ms$0.005