Description
Comprehensive NPM package safety report combining npm registry metadata, OSV vulnerability database, npms.io quality scores, and GitHub repo health. Returns risk_summary (low/medium/high/critical), CVE breakdown by severity, maintainer info, dependency counts, last-commit recency, archival status. Use?package=react or?package=react and version=18.2.0. Built for AI code-review agents and supply-chain auditors.
Requires your own data source. This endpoint fetches from an upstream provider at runtime. You supply and pay for that access — no API key, feed or usage quota is included in this purchase.
This is a ready-to-deploy endpoint for npm package intelligence, delivered as ready-to-run Node.js source.
Accepts 1 query parameter as documented in the included endpoint.json. It relies on 1 external API (GITHUB_TOKEN), configured via environment variables. You must obtain that access yourself; no key, subscription or usage quota is included in this purchase.
Package includes: handler.js (the request handler), endpoint.json (metadata and pricing schema), and a README with setup notes. Drop it into an Express (or similar) server and you have a working API endpoint in minutes.
Independent third-party software. Not affiliated with, endorsed by or sponsored by any platform, exchange or data provider named above; all trademarks are the property of their respective owners.
Reviews
There are no reviews yet.