x402

Package Security Audit (x402)

Composite security audit for npm and PyPI packages with supply chain anomaly detection

get/x402/v2/package-security-audit

Request

Base URL: https://api.strale.io
URL: https://api.strale.io/x402/v2/package-security-audit
Auth: none required

Query parameters

namestring required

Package name

versionstring

Version to audit

ecosystemstring

npm or pypi

Response

Success

namestring

licenseobject

versionstring

ecosystemstring

freshnessobject

risk_levelstring

risk_scoreinteger

supply_chainobject

Supply chain anomaly signals

vulnerabilitiesobject

Example response

{
  "name": "lodash",
  "license": {
    "spdx": "MIT",
    "is_copyleft": false,
    "is_osi_approved": true
  },
  "version": "4.18.1",
  "ecosystem": "npm",
  "freshness": {
    "is_latest": true,
    "published_at": "2026-04-01T21:01:20.458Z",
    "is_deprecated": false,
    "latest_version": "4.18.1",
    "version_age_hours": 687,
    "recently_published": false,
    "days_since_last_release": 28
  },
  "scorecard": null,
  "risk_level": "low",
  "risk_score": 100,
  "maintainers": 1,
  "supply_chain": {
    "provenance": {
      "has_attestation": false,
      "attestation_missing": false,
      "previous_had_attestation": false
    },
    "current_publisher": "jdalton",
    "publisher_changed": false,
    "previous_publisher": "jdalton",
    "has_install_scripts": false,
    "install_script_names": []
  },
  "vulnerabilities": {
    "low": 0,
    "high": 0,
    "total": 0,
    "medium": 0,
    "details": [],
    "critical": 0
  },
  "dependency_count": 0
}

Changes

No recorded changes to this operation across all 1 revision of this API.