Data
Provenance

Resolve which known vulnerabilities affect a specific version of a package

Defined for the cybersecurity databank. Answers the question a maintainer actually asks -- I am running this version, what affects me -- rather than returning affected ranges to interpret. Findings are ordered worst first, with exploited-in-the-wild ahead of a higher score. Advisories whose affected range could not be read are returned under undetermined and are never counted as unaffected.

get/api/v1/databanks/{slug}/exposure

Request

  • Base URL: https://api.daystruct.ai
  • URL: https://api.daystruct.ai/api/v1/databanks/{slug}/exposure
  • Auth: one of:
    • none
    • HTTP bearer

Path parameters

slugstring required

Query parameters

packagestring required

Package name as the advisory names it.

versionstring required

The version you are running.

ecosystemstring

Narrows to one registry when a package name is reused across them.

Headers

X-Daystruct-Client-Idstring

Declared client identifier recorded in aggregate request telemetry.

X-Daystruct-Agentstring

Optional declared agent name.

X-Daystruct-Use-Casestring

Optional declared use case.

X-Daystruct-Agent-Idstring uuid

Optional durable registered-agent identity. It is accepted only with an active API key linked to that active agent; verified use updates lastSeenAt and request attribution. When accepted, Daystruct returns the exact ID in X-Daystruct-Verified-Agent-Id. It is not a routing instruction.

Response

A bounded JSON envelope with pagination metadata.

Changes

No recorded changes to this operation across all 2 revisions of this API.