developer · developer · research · dependency-audit · dependencies · python · pypi · npm · packages · osv · vulnerability · security · supply-chain

Audit Python and npm dependencies for vulnerabilities

Audit exact Python/PyPI, npm, Go, Maven, NuGet, crates.io, or RubyGems dependencies against OSV and return affected packages and vulnerabilities.

$0.05 USDCBase + Solanax402 v2POST

Pay $0.05 USDC and run in your browser View free result sample

Endpoint

https://apiacre.com/v1/developer/dependency-audit

Send the JSON body below. An unpaid request returns HTTP 402 with a PAYMENT-REQUIRED header; an x402-compatible buyer signs the requirement and retries with PAYMENT-SIGNATURE.

Pay $0.05 USDC and run in your browser

Official Coinbase agent path

Coinbase Agentic Wallet can satisfy this x402 request in one command. Running it may pay automatically, so --max-amount is fixed to $0.05 USDC in atomic units. Copying the command does not install, authenticate, sign, or pay; review the request and use a separate low-value wallet before running it.

npx --yes awal@latest x402 pay https://apiacre.com/v1/developer/dependency-audit \
  -X POST \
  -d '{"ecosystem":"PyPI","dependencies":[{"name":"requests","version":"2.32.3"}]}' \
  --max-amount 50000 \
  --json

Coinbase pay-for-service documentation · Buyer setup and wallet safety

Alternative third-party AgentCash commands

Run check first without payment. Its fetch command may automatically pay up to the exact listed price.

npx --yes agentcash@latest check https://apiacre.com/v1/developer/dependency-audit
npx --yes agentcash@latest fetch https://apiacre.com/v1/developer/dependency-audit \
  --method POST \
  --header 'content-type: application/json' \
  --body '{"ecosystem":"PyPI","dependencies":[{"name":"requests","version":"2.32.3"}]}' \
  --payment-protocol x402 \
  --payment-network base \
  --max-amount 0.050

AgentCash CLI documentation

Input example

{
  "ecosystem": "PyPI",
  "dependencies": [
    {
      "name": "requests",
      "version": "2.32.3"
    }
  ]
}

Response shape

View free static sample JSON

{
  "request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
  "service": "developer.dependency-audit",
  "version": "1",
  "data": {
    "ecosystem": "PyPI",
    "dependencies": 1,
    "vulnerabilityCount": 4,
    "clean": false,
    "findings": [
      {
        "name": "requests",
        "version": "2.32.3",
        "vulnerabilities": [
          {
            "id": "GHSA-9hjg-9r4m-mvj7",
            "summary": null,
            "aliases": [],
            "modified": "2026-07-07T17:56:56.234172Z"
          },
          {
            "id": "GHSA-gc5v-m9x4-r6x2",
            "summary": null,
            "aliases": [],
            "modified": "2026-07-13T07:26:34.091663Z"
          },
          {
            "id": "PYSEC-2026-1872",
            "summary": null,
            "aliases": [],
            "modified": "2026-07-07T17:47:00.332079Z"
          },
          {
            "id": "PYSEC-2026-2275",
            "summary": null,
            "aliases": [],
            "modified": "2026-07-13T07:15:43.964902Z"
          }
        ]
      }
    ],
    "source": "https://osv.dev"
  },
  "meta": {
    "duration_ms": 42,
    "cached": false,
    "sources": [],
    "warnings": [],
    "next_actions": []
  }
}

Try the payment challenge

curl -i -X POST 'https://apiacre.com/v1/developer/dependency-audit' \
  -H 'content-type: application/json' \
  --data '{"ecosystem":"PyPI","dependencies":[{"name":"requests","version":"2.32.3"}]}'