Package Trust

Last 30 days

Uptime

100%

Response time

200 ms typical, 264 ms slowest 5%

Last check

40 min ago

Next check

any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://x402-api-24223879872.us-east1.run.app/v1/package-trust?ecosystem=npm&name=left-pad"

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fx402-api-24223879872.us-east1.run.app%2Fv1%2Fpackage-trust
const res = await pay("https://x402-api-24223879872.us-east1.run.app/v1/package-trust?ecosystem=npm&name=left-pad");
console.log(await res.json());

Example input

{
  "ecosystem": "npm",
  "name": "left-pad"
}

Example output

{
  "advisories": {
    "count": 0,
    "ids": [],
    "maxSeverity": null
  },
  "ecosystem": "npm",
  "flags": [],
  "installScripts": {
    "install": false,
    "postinstall": false,
    "preinstall": false
  },
  "name": "left-pad",
  "registry": {
    "ageDays": 4200,
    "deprecated": false,
    "exists": true,
    "firstPublishedAt": "2014-08-15T00:00:00.000Z",
    "latestPublishedAt": "2016-05-14T00:00:00.000Z",
    "latestVersion": "1.3.0",
    "license": "WTFPL",
    "maintainerCount": 2
  },
  "score": 90,
  "typosquat": {
    "matches": []
  }
}

Security scan

• No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks