Packages

Get full package detail

Returns data for the drawer's Overview, Security, and Provenance tabs. Pass the canonical purl as a query parameter — no URL-encoding needed. Example: ?purl=pkg:npm/lodash@4.17.21.

get/packages/detail

Query parameters

purlstring required

Response

Package found.

purlstring required

namestring required

ecosystemstring required

assessmentobject required

Stewardship assessment data. Empty in v1 — assessment flow deferred to v2.

historyobject required

Package history data. Empty in v1.

signalCoverageHealthobject nullable

Signal coverage health data enriched by Tinybird. Null until enriched.

Example response

{
  "purl": "pkg:npm/lodash",
  "name": "lodash",
  "ecosystem": "npm",
  "general": {
    "healthScore": 18,
    "healthScoreDetails": {
      "total": 18,
      "label": "Good",
      "maintainerHealth": 4,
      "securitySupplyChain": 8,
      "developmentActivity": 6
    },
    "healthBand": "concerning",
    "impact": {
      "impactScore": 71,
      "downloadsLastMonth": 52142891,
      "dependentPackages": 142312,
      "dependentRepos": 39104,
      "transitiveReach": "Top 0.4%"
    },
    "riskSignals": {
      "maintainerBusFactor": 1,
      "openSSFScorecard": 5.2
    }
  },
  "security": {
    "advisories": [
      {
        "osvId": "CVE-2021-44906"
      }
    ]
  },
  "provenance": {
    "repositoryMapping": {
      "declaredRepo": "https://github.com/lodash/lodash",
      "mappingConfidence": 0.98
    }
  },
  "stewardship": {
    "id": "42",
    "stewards": [
      {
        "userId": "abc123",
        "username": "jrodriguez",
        "displayName": "Jonathan R."
      }
    ]
  }
}

Changes

Changed in 6 of the 6 revisions of this API.41114

Jul 17, 2026v136d7585ff64c2See the full diff
- ●
  added the new archived enum value to the general/riskSignals/lifecycle response property for the response status 200
  response-property-enum-value-added
- ●
  added the new excellent enum value to the general/healthBand response property for the response status 200
  response-property-enum-value-added
Jun 24, 2026v1b1ac806083ee143See the full diff
- ▲
  the general/healthScore response's property type/format changed from object null/ to integer null/ for status 200
  response-property-type-changed
- ●
  removed the optional property general/healthScore/developmentActivity from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property general/healthScore/maintainerHealth from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property general/healthScore/securitySupplyChain from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property general/healthScore/total from the response with the 200 status
  response-optional-property-removed
- ○
  added the optional property general/healthBand to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property general/healthScoreDetails to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property signalCoverageHealth to the response with the 200 status
  response-optional-property-added
Jun 23, 2026v13272cbfaa72b12See the full diff
- ●
  removed the optional property stewardship/stewards/oneOf[subschema #1]/items/name from the response with the 200 status
  response-optional-property-removed
- ○
  added the optional property stewardship/stewards/oneOf[subschema #1]/items/displayName to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property stewardship/stewards/oneOf[subschema #1]/items/username to the response with the 200 status
  response-optional-property-added
Jun 16, 2026v108763340c7f523See the full diff
- ▲
  the response property stewardship/stewards/oneOf[subschema #1]/items/name became nullable for the status 200
  response-property-became-nullable
- ▲
  the response property stewardship/stewards/oneOf[subschema #1]/items/name became optional for the status 200
  response-property-became-optional
- ○
  added the optional property stewardship/id to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property stewardship/resolutionPath to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property stewardship/statusNote to the response with the 200 status
  response-optional-property-added
Jun 11, 2026v15ade51496c111See the full diff
- ○
  added the optional property stewardship to the response with the 200 status
  response-optional-property-added
Jun 10, 2026v1f6ec2792f131145See the full diff
- ▲
  the general/healthScore response's property type/format changed from integer null/ to object null/ for status 200
  response-property-type-changed
- ●
  removed the optional property general/healthBand from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property general/healthScoreDetails from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property signalCoverageHealth from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property stewardship from the response with the 200 status
  response-optional-property-removed
- ○
  added the optional property general/healthScore/developmentActivity to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property general/healthScore/maintainerHealth to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property general/healthScore/securitySupplyChain to the response with the 200 status
  response-optional-property-added
- ○
  added the optional property general/healthScore/total to the response with the 200 status
  response-optional-property-added
- ○
  removed the archived enum value from the general/riskSignals/lifecycle response property for the response status 200
  response-property-enum-value-removed

Full history