vulnerability

Package Vulnerabilities: Known CVEs for npm and PyPI Versions

Check an npm or PyPI package version against a public vulnerability database: advisory ids, aliases (CVE, GHSA), summary, severity label and first fixed version, plus the latest published version. Informational; not a full security audit.

get/v1/package-vulnerabilities

Request

  • Base URL: https://api.ambolt.dev
  • URL: https://api.ambolt.dev/v1/package-vulnerabilities
  • Auth: none required

Query parameters

ecosystem'npm' | 'PyPI' required

Package ecosystem.

namestring required

Package name, e.g. lodash or requests.

versionstring

Version to check. Default: latest published version.

free'1'

Set to 1 for one free call per tool and IP address per day (no payment).

Response

Result (JSON). Every result names its source and the time it was read.

object required

Changes

No recorded changes to this operation across all 1 revision of this API.