manifest-audit · audit.152-53-82-29.sslip.io
Audit a whole dependency manifest in one call before installing or…
Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requirements.txt, or npm and PyPI package lists (up to 50 packages). Per dependency: latest version and publish date, whether your pin is behind, license, deprecation or yanked status, weekly npm downloads, and known vulnerabilities from OSV with severity and first fixed version. Deterministic, no LLM. Use before adding or bumping deps or when reviewing a lockfile change.
Sample input
input4 keys
body2 keys
npm[…]3 items
pypi[…]2 items
bodyType"json"
method"POST"
type"http"
inputobject, 4 keysSample response
response6 keys
elapsed_ms1800
generated_at"2026-09-22T23:00:00Z"
max_packages50
rows2 items
0{ behind, deprecated, ecosystem, … }14 keys
1{ behind, deprecated, ecosystem, … }14 keys
sources5 items
0"api.deps.dev"
1"api.osv.dev"
2"registry.npmjs.org"
3"api.npmjs.org"
4"pypi.org"
summary6 keys
behind_latest1
deprecated0
lookup_errors0
packages2
unpinned1
with_vulnerabilities1
responseobject, 6 keysTrack record
- Paid calls, last 30 days
- 4
- Buyers, last 30 days
- 4
- Last paid call
Reported by the x402 directory.