Open Source Vulnerability Check
Batch dependency vulnerability check — check ordered exact package versions in OSV with deduplicated CVE enrichment, explicit completeness, and CISA KEV known-exploited signals.
Offering
- Provider
- dependency-risk.use.x402atlas.com
- Method
- POST
- Offering type
- Api Endpoint
- Transport type
- http
- Category
- Security
- Delivery
- Not provided
- Pricing model
- Not provided
- x402 version
- 2
Endpoint context
- URL
https://dependency-risk.use.x402atlas.com/batch- MIME type
- Not provided
- First seen
- 2026-10-16T01:50:14.534Z
- Last seen
- Tags
- batch-vulnerability-check, osv, cve, cisa-kev, software-supply-chain
Payment pricing
x402 payment terms are the authoritative price for calling this endpoint.
- Payment option 1
- 0.01 USDC
Atomic price: 10000 · Network: eip155:8453 · Asset: USDC · Scheme: exact - Payment option 2
- 0.01 USDC
Atomic price: 10000 · Network: eip155:137 · Asset: USDC · Scheme: exact - Payment option 3
- 0.01 USDC
Atomic price: 10000 · Network: eip155:42161 · Asset: USDC · Scheme: exact - Payment option 4
- 0.01 USDC
Atomic price: 10000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact
Raw x402 terms
[
{
"scheme": "exact",
"network": "eip155:8453",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "10000",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2"
},
{
"scheme": "exact",
"network": "eip155:137",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "10000",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2"
},
{
"scheme": "exact",
"network": "eip155:42161",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "10000",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2"
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "10000",
"payTo": "ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ"
}
]Observed health
- Status
- Reachable
- Latest latency
- 10 ms
- Average latency
- 420 ms
- HTTP status
- 405
- Last checked
- Reachability
- 100% over 10 checks
Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.
Input schema
{
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"packages": {
"description": "Ordered exact package versions; duplicates keep their positions. The OSV result must fit eight distinct IDs with no page token",
"items": {
"additionalProperties": false,
"description": "One exact package version; purl or package+version",
"oneOf": [
{
"not": {
"anyOf": [
{
"required": [
"package"
]
},
{
"required": [
"version"
]
}
]
},
"required": [
"purl"
]
},
{
"not": {
"required": [
"purl"
]
},
"required": [
"package",
"version"
]
}
],
"properties": {
"package": {
"additionalProperties": false,
"description": "Use with version",
"properties": {
"ecosystem": {
"description": "OSV ecosystem",
"maxLength": 64,
"minLength": 1,
"type": "string"
},
"name": {
"description": "Package-manager name",
"maxLength": 512,
"minLength": 1,
"type": "string"
}
},
"required": [
"ecosystem",
"name"
],
"type": "object"
},
"purl": {
"description": "Canonical purl with an exact version; excludes package and version",
"maxLength": 2048,
"minLength": 1,
"type": "string"
},
"version": {
"description": "Exact version; use with package",
"maxLength": 256,
"minLength": 1,
"type": "string"
}
},
"type": "object"
},
"maxItems": 50,
"minItems": 1,
"type": "array"
}
},
"required": [
"packages"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
}Output schema
{
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"_atlas": {
"description": "Atlas docs and related routes, added after deployment",
"type": "object"
},
"operation": {
"const": "batch-check",
"description": "Route operation id",
"type": "string"
},
"partial": {
"description": "True when one item succeeded and another detail lookup failed transiently",
"type": "boolean"
},
"results": {
"description": "Per-input results in caller order, duplicates included; at most eight distinct OSV IDs in total",
"items": {
"additionalProperties": false,
"description": "One per-input result; query_failed carries error_code and no summary",
"properties": {
"error_code": {
"const": "upstream_error",
"description": "Present only when status is query_failed",
"type": "string"
},
"findings": {
"description": "Findings in the /package finding shape; [] for no_known_vulnerabilities or query_failed",
"items": {
"type": "object"
},
"maxItems": 8,
"type": "array"
},
"input": {
"additionalProperties": false,
"description": "Exact package identity",
"properties": {
"ecosystem": {
"description": "purl type, lowercase",
"type": "string"
},
"name": {
"description": "Package name",
"type": "string"
},
"purl": {
"description": "Canonical purl when the caller used purl form",
"type": "string"
},
"version": {
"description": "Queried version",
"type": "string"
}
},
"required": [
"ecosystem",
"name",
"version"
],
"type": "object"
},
"status": {
"description": "query_failed is explicit incompleteness, never a clean result",
"enum": [
"no_known_vulnerabilities",
"vulnerabilities_found",
"query_failed"
],
"type": "string"
},
"summary": {
"additionalProperties": false,
"description": "Active non-withdrawn findings",
"properties": {
"finding_count": {
"description": "Active findings",
"maximum": 8,
"minimum": 0,
"type": "integer"
},
"kev_count": {
"description": "Active findings with an exact KEV match",
"maximum": 8,
"minimum": 0,
"type": "integer"
},
"max_severity": {
"description": "Among active findings",
"enum": [
"unknown",
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
},
"required": [
"finding_count",
"kev_count",
"max_severity"
],
"type": "object"
}
},
"required": [
"input",
"status",
"findings"
],
"type": "object"
},
"maxItems": 50,
"type": "array"
},
"retrieved_at": {
"description": "UTC completion time of this response, not an OSV time",
"format": "date-time",
"type": "string"
},
"schema_version": {
"const": "dependency-risk-v1",
"description": "Response contract version",
"type": "string"
},
"source": {
"additionalProperties": false,
"description": "Sources and the exact CISA KEV snapshot used",
"properties": {
"cisa_kev": {
"description": "{name, catalog_version, date_released, retrieved_at} of the KEV snapshot",
"type": "object"
},
"osv": {
"description": "{name: OSV.dev}",
"type": "object"
}
},
"required": [
"osv",
"cisa_kev"
],
"type": "object"
},
"stale": {
"description": "True only when a prior CISA KEV snapshot is served after a refresh failure",
"type": "boolean"
},
"warnings": {
"description": "Freshness and interpretation warnings; [] when none",
"items": {
"description": "Warning text",
"type": "string"
},
"type": "array"
}
},
"required": [
"operation",
"schema_version",
"source",
"retrieved_at",
"stale",
"warnings",
"results",
"partial"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}