---
title: "List soft-deleted packages in recycle bin"
method: GET
path: "/recycle-bin/{owner}/"
tags: ["recycle-bin"]
---

# List soft-deleted packages in recycle bin

`GET /recycle-bin/{owner}/`

Retrieve all soft-deleted packages in the workspace. Optionally filter by repository using the 'repository' query parameter.

## Query parameters

- `page` integer
- `page_size` integer
- `repository` string

## Response `200`

OK

- RecycleBinPackage[]
  - `action_by` string, nullable — The name of the user who deleted the package.
  - `downloads` integer
  - `filename` string
  - `format` string
  - `fully_qualified_name` string, nullable — The fully qualified name of the package.
  - `identifiers` object
  - `invoked_retention_rule` object, nullable — Information about the retention rule that triggered deletion (if any).
  - `is_deleteable` boolean
  - `is_malware_detected` boolean — Whether the package has been detected as containing malware. Requires Ultra plan.
  - `is_quarantined` boolean
  - `is_restorable` boolean
  - `name` string, nullable — The name of this package.
  - `policy_violated` boolean — Whether or not the package has violated any policy.
  - `repository` string
  - `security_scan_completed_at` string, date-time, nullable — The datetime the security scanning was completed.
  - `security_scan_status` 'Awaiting Security Scan' | 'Security Scanning in Progress' | 'Scan Detected Vulnerabilities' | 'Scan Detected No Vulnerabilities' | 'Security Scanning Disabled' | 'Security Scanning Failed' | 'Security Scanning Skipped' | 'Security Scanning Not Supported', nullable
  - `size` integer — The calculated size of the package.
  - `slug_perm` string, slug
  - `status` 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 — The synchronisation status of the package.
  - `status_updated_at` string, date-time — The datetime the package status was updated at.
  - `tags` Tags — All tags on the package, grouped by tag type. This includes immutable tags, but doesn't distinguish them from mutable. To see which tags are immutable specifically, see the tags_immutable field.
  - `type_display` string
  - `uploaded_at` string, date-time — The date this package was uploaded.
  - `uploader` string
  - `version` string, nullable — The raw version for this package.
  - `vulnerability_counts` WebOSVSeverityCounts, nullable — Per-severity OSV vulnerability counts for non-hidden matches. Requires Ultra plan.
    - `critical` integer
    - `high` integer
    - `low` integer
    - `malware` integer
    - `medium` integer
    - `total` integer
    - `unknown` integer

## Other responses

- `400` — Request could not be processed (see detail).
- `422` — Missing or invalid parameters (see detail).

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api-v1/revisions/4d7879df9b2f/schema)