---
title: "Summarize package intelligence and findings"
method: POST
path: "/v1/orgs/{org_slug}/packages/summaries"
tags: ["packages"]
---

# Summarize package intelligence and findings

`POST /v1/orgs/{org_slug}/packages/summaries`

## Request

- The document declares no server URL.
- Auth: HTTP bearer

Returns organization-default policy decisions, per-artifact scores, findings, and detail links for cached published public npm and PyPI artifacts. This endpoint does not start scans.

## Path parameters

- `org_slug` string, required

## Request body

- object
  - `packages` object[], required
    - `purl` string, required

## Response `200`

Default Response

- object
  - `context` object, required
    - `mode` 'organization', required
    - `organizationSlug` string, required
    - `policyScope` 'organization-default', required
    - `policyRevision` integer, required
  - `results` object[], required
    - `index` integer, required
    - `inputPurl` string, required
    - `resolvedPurls` string[], required
    - `status` 'complete' | 'pending' | 'unknown' | 'unsupported' | 'error', required
    - `action` 'block' | 'warn' | 'monitor' | 'allow' | 'indeterminate', required
    - `reasons` object[], required
      - `code` 'invalid_purl' | 'version_required' | 'unsupported_ecosystem' | 'unsupported_identity' | 'metadata_unavailable' | 'analysis_pending' | 'analysis_stale' | 'artifact_limit' | 'result_limit' | 'deadline_exceeded' | 'lookup_failed' | 'policy_action_unavailable' | 'policy_block' | 'policy_warn' | 'policy_monitor', required
      - `alertKey` string
      - `alertType` string
      - `artifactPurls` string[]
    - `coverage` object, required
      - `scope` 'published-artifacts', required
      - `complete` boolean, required
      - `artifactCount` integer, required
      - `evaluatedArtifactCount` integer, required
      - `reason` 'metadata_unavailable' | 'analysis_incomplete' | 'artifact_limit' | 'result_limit' | 'deadline_exceeded' | 'lookup_failed' | 'null', nullable, required
    - `freshness` object, required
      - `evaluatedAt` string, date-time, required
      - `analysisAt` unknown, required
      - `source` 'artifact-state', required
      - `state` 'current' | 'stale' | 'unknown', required
    - `artifacts` object[], required
      - `reference` string, required
      - `purl` string, required
      - `state` 'complete' | 'pending' | 'revalidate' | 'error' | 'unknown', required
      - `scores` object, nullable, required
        - `supplyChain` number, required
        - `quality` number, required
        - `maintenance` number, required
        - `vulnerability` number, required
        - `license` number, required
        - `overall` number, required
      - `alerts` object[], required
        - `key` string, required
        - `type` string, required
        - `action` 'error' | 'warn' | 'monitor' | 'ignore' | 'null', nullable, required
      - `detailUrl` string, uri, required
    - `alerts` object[], required
      - `key` string, required
      - `type` string, required
      - `action` 'error' | 'warn' | 'monitor' | 'ignore' | 'null', nullable, required
      - `artifactPurls` string[], required

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `413`: Default Response
- `429`: Default Response
- `503`: Default Response

---

[API](https://skmtc.dev/socket-dev/apis/socket-api-v1.md) - [All operations](https://skmtc.dev/socket-dev/apis/socket-api-v1/llms.txt) - [OpenAPI document](https://skmtc.dev/socket-dev/apis/socket-api-v1/revisions/e88284728ffb?raw)