manifest-audit · audit.152-53-82-29.sslip.io
Check npm packages before you install or upgrade. Send…
Check npm packages before you install or upgrade. Send {"packages":["lodash@4.17.20","express"]} or a package.json (dependencies and devDependencies), up to 50 packages. Per package: latest version and publish date, whether a pinned version is behind, license, deprecation notice, weekly downloads, and known vulnerabilities from OSV with severity and first fixed version. Deterministic registry data, no LLM.
Sample input
input4 keys
body1 key
packages[…]3 items
bodyType"json"
method"POST"
type"http"
inputobject, 4 keysSample response
response6 keys
elapsed_ms1800
generated_at"2026-09-22T23:00:00Z"
max_packages50
rows2 items
0{ behind, deprecated, ecosystem, … }14 keys
1{ behind, deprecated, ecosystem, … }14 keys
sources5 items
0"api.deps.dev"
1"api.osv.dev"
2"registry.npmjs.org"
3"api.npmjs.org"
4"pypi.org"
summary6 keys
behind_latest1
deprecated0
lookup_errors0
packages2
unpinned1
with_vulnerabilities1
responseobject, 6 keysTrack record
- Paid calls, last 30 days
- 3
- Buyers, last 30 days
- 3
- Last paid call
Reported by the x402 directory.