Npm Vuln

Description

Query Open Source Vulnerabilities (OSV) database for known CVEs in an NPM package. Returns vulnerability list with severity, summary, affected version ranges, fix versions, references. Use?package=react and version=18.2.0. Backed by Google-maintained OSV (industry standard).

This is a ready-to-deploy endpoint for npm package intelligence, delivered as ready-to-run Node.js source.

Accepts 1 query parameter as documented in the included endpoint.json. It has no external API dependencies — it works standalone once deployed.

Package includes: handler.js (the request handler), endpoint.json (metadata and pricing schema), and a README with setup notes. Drop it into an Express (or similar) server and you have a working API endpoint in minutes.