---
title: "Supply-chain due diligence for a package: licenses, advisories, OpenSSF Scorecard"
method: GET
path: "/v1/dev/deps"
---

# Supply-chain due diligence for a package: licenses, advisories, OpenSSF Scorecard

`GET /v1/dev/deps`

## Request

- Base URL: `https://data.greeneris.io` (the document declares no server; this is the origin it was published from)
- URL: `https://data.greeneris.io/v1/dev/deps`
- Auth: none declared

Package intelligence from deps.dev (Google Open Source Insights, data CC-BY 4.0): resolved license list, known advisory ids, source project, GitHub stars and OpenSSF Scorecard overall score. Query: ?system=npm&pkg=react&version=latest (systems: npm, pypi, go, maven, cargo, nuget; version defaults to the registry default release). Refreshed upstream continuously; served with a 6h cache.

## Query parameters

- `system` 'npm' | 'pypi' | 'go' | 'maven' | 'cargo' | 'nuget'
- `pkg` string, required
- `version` string

## Response `200`

Successful response

- unknown

---

[API](https://skmtc.dev/greeneris/apis/eu-verify.md) · [All operations](https://skmtc.dev/greeneris/apis/eu-verify/llms.txt) · [OpenAPI document](https://skmtc.dev/greeneris/apis/eu-verify/revisions/766cf4a67d8f?raw)