61trust / 100
Package Check
by Aayat AI in Security & trust
x402 APIFailing, checked 2 h ago
Should a coding agent install this package? Checks one npm, PyPI, crates or Go package version for known vulnerabilities and malware (OSV.dev), deprecation, typosquat look-alike names, install scripts, licence, downloads, release activity and OpenSSF Scorecard, then gives a verdict (ok/caution/avoid), a 0-100 score and every reason. Pass ?ecosystem=npm&name=express.
GET https://aayatai.com/package/check
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 33.3%
- Response time
- 42 ms typical, 42 ms slowest 5%
- Last check
- 2 h ago: Expected HTTP 402, got 410
- Next check
- any minute now
How to call it
# See the payment challenge (nothing is charged)
curl -i -X GET "https://aayatai.com/package/check?ecosystem=npm&name=express&version=4.21.2"import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Faayatai.com%2Fpackage%2Fcheck
const res = await pay("https://aayatai.com/package/check?ecosystem=npm&name=express&version=4.21.2");
console.log(await res.json());Example input
{
"ecosystem": "npm",
"name": "express",
"version": "4.21.2"
}Example output
{
"checkedAt": "2026-09-28T12:00:00.000Z",
"deprecated": null,
"description": "Fast, unopinionated, minimalist web framework",
"ecosystem": "npm",
"flags": [
{
"code": "not-latest",
"level": "info",
"message": "A newer version exists: 5.1.0."
}
],
"installScripts": [],
"isLatest": false,
"latestVersion": "5.1.0",
"licenceKind": "permissive",
"licences": [
"MIT"
],
"lookalikeOf": [],
"maintainers": 5,
"name": "express",
"releases": {
"firstPublishedAt": "2010-12-29T19:38:25Z",
"latest": "5.1.0",
"latestPublishedAt": "2026-03-31T14:00:00Z",
"releasesLast365Days": 6,
"versions": 280
},
"repo": {
"forks": 16000,
"openIssues": 180,
"scorecard": 8.1,
"stars": 66000
},
"repository": "https://github.com/expressjs/express",
"score": 100,
"sources": [
"deps.dev",
"OSV.dev",
"npm registry"
],
"verdict": "ok",
"version": "4.21.2",
"vulnerabilities": [],
"vulnerabilityCounts": {
"critical": 0,
"high": 0,
"low": 0,
"moderate": 0,
"unknown": 0
},
"weeklyDownloads": 41000000
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 2 h ago | Expected HTTP 402, got 410 | 410 | 123 ms | - |
| 5 h ago | Expected HTTP 402, got 410 | 410 | 48 ms | - |
| 10 h ago | Passed | 402 | 42 ms | $0.005 |