LIlinuxfoundation
Packages

Get package detail

Changed on

Returns the full detail view for a single package identified by its PURL, including risk signals, security advisories, repository provenance, and current stewardship state.

get/akrites/packages/detail

Request

  • Base URL
    https://cm.lfx.dev/api/v1
  • URL
    https://cm.lfx.dev/api/v1/akrites/packages/detail
  • Auth
    HTTP bearer

Query parameters

purlstring required
Example:pkg:npm/%40angular/core@17.0.0

Package URL (PURL) — must start with pkg:. Version qualifiers are normalised server-side.

Response

Package detail.

purlstring required
namestring required
ecosystemstring required
latestVersionstring nullable
assessmentunknown required
historyunknown required

Example response

{
  "security": {
    "securityContacts": [
      {
        "value": "security@expressjs.com"
      }
    ],
    "advisories": [
      {
        "osvId": "GHSA-xxxx-xxxx-xxxx"
      }
    ]
  }
}

Changes

  • v117bbb3d320c3Revision changes
    • breaking

      the // response's property type changed from string to object for status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the required property /// to the response with the status

    • info

      added the required property /// to the response with the status

    • info

      added the required property /// to the response with the status

    • info

      added the required property /// to the response with the status

    • info

      added the required property /// to the response with the status

  • v1648aefbdca56Revision changes
    • warning

      added the new moderate enum value to the /// response property for the response status

    • warning

      added the new open enum value to the /// response property for the response status

    • warning

      added the new patched enum value to the /// response property for the response status

    • info

      removed the medium enum value from the /// response property for the response status

    • info

      added the required property /// to the response with the status