Explorer
Syncing—

Package Security AdvisoriesService

package-advisories

Open-source package health: latest version, licenses and known vulnerabilities, from deps.dev and OSV. POST JSON {"arguments": {"ecosystem": "pypi", "package": "requests", "version": "2.31.0"}} to /v1/tool (version optional; ecosystems include pypi, npm, go, cargo, maven, nuget), or {"arguments": {"requirements": "<requirements.txt text>"}} for a batch of up to 100 packages; also GET /v1/package?ecosystem=pypi&package=requests. The response is a JSON object with package, ecosystem, version, latest_version, licenses, open_source_vulns (id, severity, fixed_in; sorted by id) and vuln_details; a batch request returns results (one entry per package, with a vulnerable flag) and capped. Results follow deps.dev and OSV; package data is cached 1 hour and advisories 24 hours.

Active Suppliers
1
of 1 ever configured
Service Info
Service ID
package-advisories
Compute Units / Relay
100,000
Owner
pokt10…87pn
Active Applications
1
Relay Mining EMA
1 relays
Service Metadata Cardsource: on-chain metadata (LCD)
{10 items
"schema":"pocket-service-card/v1"
"description":"Open-source package health: latest version, licenses and known vulnerabilities, from deps.dev and OSV. POST JSON {"arguments": {"ecosystem": "pypi", "package": ..."
"rpc_types":[1 item
0:{4 items
"type":"REST"
"intent":"expected"
"backend_hint":"package-advisories HTTP server on :8080; POST /v1/tool, GET /v1/package, /v1/health + /v1/version."
"notes":"Every response is a JSON object; errors are JSON 4xx/5xx with an error object (code, message)."
}
]
"apis":[1 item
0:"package-advisories-api"
]
"specs":[1 item
0:{4 items
"kind":"openapi"
"api":"package-advisories-api"
"url":"https://services.supnodes.com/specs/package-advisories/openapi.json"
"notes":"Machine-readable OpenAPI 3.0.3 contract for this service."
}
]
"access":"public"
"results":"variable"
"serving":{7 items
"backend":"Single-process Python 3 HTTP server, standard library only, behind a RelayMiner (rest backend). Queries api.deps.dev and api.osv.dev; caches package data in mem..."
"implementations":[1 item
0:"package-metadata-advisories >= 1.0"
]
"docs":"https://services.supnodes.com/specs/package-advisories/README.md"
"min_disk_gb":1
"min_ram_gb":1
"healthcheck":[3 items
0:{4 items
"rpc_type":"REST"
"request":{2 items
"path":"/v1/version"
"method":"GET"
}
"expect":{2 items
"json_path":"$.service"
"matches":"^package-advisories$"
}
"notes":"Identity probe: pins the backend to this service so a wrong backend cannot be staked under this id."
}
1:{4 items
"rpc_type":"REST"
"request":{2 items
"path":"/v1/health"
"method":"GET"
}
"expect":{2 items
"json_path":"$.status"
"matches":"^ok$"
}
"notes":"Readiness probe."
}
2:{4 items
"rpc_type":"REST"
"request":{3 items
"path":"/v1/tool"
"method":"POST"
"body":{1 item
"arguments":{2 items
"package":"requests"
"ecosystem":"pypi"
}
}
}
"expect":{2 items
"json_path":"$.latest_version"
"matches":"^.+$"
}
"notes":"Functional probe: the requests package on PyPI. Served from cache after the first call."
}
]
"notes":"Upstream: api.deps.dev and api.osv.dev, a few calls per uncached package (a batch makes calls for each package). Gateway operators: configure as type passthroug..."
}
"docs":"https://services.supnodes.com/specs/package-advisories/README.md"
"updated":"2026-09-24"
}