Supply-chain due diligence for a package: licenses, advisories, OpenSSF Scorecard

Package intelligence from deps.dev (Google Open Source Insights, data CC-BY 4.0): resolved license list, known advisory ids, source project, GitHub stars and OpenSSF Scorecard overall score. Query: ?system=npm&pkg=react&version=latest (systems: npm, pypi, go, maven, cargo, nuget; version defaults to the registry default release). Refreshed upstream continuously; served with a 6h cache.

get/v1/dev/deps

Request

  • Base URL: https://data.greeneris.io (the document declares no server; this is the origin it was published from)
  • URL: https://data.greeneris.io/v1/dev/deps
  • Auth: none declared

Query parameters

system'npm' | 'pypi' | 'go' | 'maven' | 'cargo' | 'nuget'

Package ecosystem

pkgstring required

Package name, e.g. react or @types/node

versionstring

Exact version, or 'latest' for the registry default

Response

Successful response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.