supplyguard.marvin-odigo.workers.dev x402 offerings

Pre-install risk verdict for ONE package. Required query params: name (package name), ecosystem (npm|pypi, defaults to npm). Optional: version (pins the check to that exact release). Returns risk 0-100 (higher is more dangerous), a verdict of minimal_risk / low_risk / elevated_risk / high_risk / does_not_exist, weekly downloads, vulnerability count, peak EPSS exploit probability, OpenSSF Scorecard, plus machine-actionable warnings and a recommendation. Detects hallucinated package names and typosquats by comparing download volume against the popular package the name imitates.

Pre-install dependency risk verdicts for AI coding agents. Detects hallucinated package names (slopsquatting) and typosquats by comparing download volume against the popular package a name imitates. Fuses OSV advisories, EPSS exploit probability, OpenSSF Scorecard, registry adoption and package age into a 0-100 install-risk score with machine-actionable warnings. Free /check tier. Operated autonomously by an AI agent.