---
title: "GET /v1/packages/{distro}/{name}"
method: GET
path: "/v1/packages/{distro}/{name}"
tags: ["packages"]
---

# GET /v1/packages/{distro}/{name}

`GET /v1/packages/{distro}/{name}`

## Request

- Base URL: `https://api.pkgseek.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pkgseek.com/v1/packages/{distro}/{name}`
- Auth: none declared

## Path parameters

- `distro` string, required
- `name` string, required

## Query parameters

- `release` string
- `source` string
- `repo` string
- `files` string
- `arch` string
- `catalog_revision` string

## Response `200`

Package detail

- PackageDetail
  - `across_distros` DistroVersion[], required
    - `arch` string, nullable
    - `id` string, required
    - `release` string, nullable: Release the newest build came from (e.g. `42`, `trixie`). Only populated when the caller needs canonical package links.
    - `repo` string, nullable: Repository/component name for the selected build, when known.
    - `resolution` PackageResolution
      - `catalog_revision` string, required
      - `coverage` ScopeCoverage, required
        - `generation` string, nullable
        - `observed_at` string, nullable
        - `reason` string, required
        - `state` string, required: Legacy index timestamps cannot prove a complete import generation.
      - `match_type` string, required
      - `policy` string, required
      - `requested` PackageScope, required: An explicit ordinary-repository request uses one exact release snapshot.
        - `arch` string, required
        - `distro` string, required
        - `release` string, required
        - `repo` string, nullable
        - `source` string, required
      - `resolved` PackageScope, required: An explicit ordinary-repository request uses one exact release snapshot.
        - `arch` string, required
        - `distro` string, required
        - `release` string, required
        - `repo` string, nullable
        - `source` string, required
      - `selection` string, required
      - `warnings` string[], required
    - `source` string, required: Repository source (`official` for distro-owned repos, otherwise a third-party channel such as `epel` or `remi`).
    - `version` string, required
  - `arch` string, required
  - `arches` string[], required: Architectures this package is built for in this distro+release (e.g. `x86_64`, `aarch64`), newest build's arch shown in `arch`.
  - `binary_artifacts` BinaryArtifact[]: Direct binary package objects proven by the indexed repository's native artifact metadata (for example APT Filename or RPM-MD location). Empty means the record has not been backfilled or the source did not publish a safe direct path.
    - `arch` string, required: Exact binary architecture from the repository record.
    - `checksum` string, nullable
    - `checksum_algorithm` string, nullable
    - `filename` string, required: Repository-provided payload filename (not a synthesized package name).
    - `priority` string, nullable
    - `section` string, nullable
    - `size` integer, nullable
    - `url` string, required: Safe direct URL built from the configured repository base and exact path.
  - `cve_scanned` boolean, required: Whether this package's (distro, release) is covered by CVE ingestion. When false, an empty `cves` means "not scanned", not "no vulnerabilities".
  - `cves` Cve[], required
    - `evidence` CveVendorEvidence[], required
      - `advisory_id` string, required
      - `fixed_in` string, nullable
      - `priority` integer, required
      - `provider` string, required
      - `reason` string, nullable
      - `source_url` string, required
      - `status` string, required
      - `verified_at` string, required
    - `fixed_in` string, nullable
    - `id` string, required
    - `score` number, double, nullable
    - `severity` string, nullable
    - `summary` string, nullable
  - `dependencies` Dependency[], required
    - `constraint` string, nullable
    - `kind` string, required
    - `name` string, required
  - `distro` string, required
  - `distro_name` string, required
  - `download_size` integer, nullable
  - `files` string[], required: Indexed file paths (capped at 2000). Empty when the detail was fetched with `files=0`; use `GET /v1/packages/{distro}/{name}/files` then.
  - `files_count` integer: Total indexed file paths for the resolved build (un-truncated), always populated even when `files` is omitted.
  - `format` string, required
  - `homepage` string, nullable
  - `installed_size` integer, nullable
  - `license` string, nullable
  - `maintainer` string, nullable
  - `name` string, required
  - `origin` string, nullable
  - `release` string, required
  - `repo` string, required
  - `repository_indexed_at` string, required: Timestamp of the repository index that supplied this exact coordinate. Direct artifact links remain absent until their native metadata supplies a safe exact path.
  - `required_by` ReverseDep[], required: Packages in the same distro that depend on this one (capped list).
    - `name` string, required
    - `summary` string, nullable
  - `required_by_total` integer, required: Total number of reverse dependents (may exceed `required_by.len()`).
  - `resolution` PackageResolution
    - `catalog_revision` string, required
    - `coverage` ScopeCoverage, required
      - `generation` string, nullable
      - `observed_at` string, nullable
      - `reason` string, required
      - `state` string, required: Legacy index timestamps cannot prove a complete import generation.
    - `match_type` string, required
    - `policy` string, required
    - `requested` PackageScope, required: An explicit ordinary-repository request uses one exact release snapshot.
      - `arch` string, required
      - `distro` string, required
      - `release` string, required
      - `repo` string, nullable
      - `source` string, required
    - `resolved` PackageScope, required: An explicit ordinary-repository request uses one exact release snapshot.
      - `arch` string, required
      - `distro` string, required
      - `release` string, required
      - `repo` string, nullable
      - `source` string, required
    - `selection` string, required
    - `warnings` string[], required
  - `source` string, required
  - `source_package` SourcePackage
    - `artifacts` SourcePackageArtifact[], required
      - `checksum` string, nullable
      - `checksum_algorithm` string, nullable
      - `filename` string, required
      - `kind` string, required: descriptor, source-rpm, upstream-source, packaging, signature, or other.
      - `size` integer, nullable
      - `url` string, required
    - `format` string, nullable
    - `homepage` string, nullable
    - `name` string, required
    - `vcs_browser` string, nullable
    - `vcs_git` string, nullable
    - `version` string, required
  - `summary` string, required
  - `version` string, required

## Other responses

- `404`: No such package

---

[API](https://skmtc.dev/pkgseek/apis/pkgseek-api.md) · [All operations](https://skmtc.dev/pkgseek/apis/pkgseek-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pkgseek/apis/pkgseek-api/revisions/277f0f960210?raw)