Api Endpoint

supplyguard.marvin-odigo.workers.dev

Pre-install risk verdict for ONE package. Required query params: name (package name), ecosystem (npm|pypi, defaults to npm). Optional: version (pins the check to that exact release). Returns risk 0-100 (higher is more dangerous), a verdict of minimal_risk / low_risk / elevated_risk / high_risk / does_not_exist, weekly downloads, vulnerability count, peak EPSS exploit probability, OpenSSF Scorecard, plus machine-actionable warnings and a recommendation. Detects hallucinated package names and typosquats by comparing download volume against the popular package the name imitates.

Open interactive test console

Offering

Provider: supplyguard.marvin-odigo.workers.dev
Method: GET
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://supplyguard.marvin-odigo.workers.dev/assess
MIME type: application/json
First seen: 2026-10-16T03:02:07.735Z
Last seen: 2026-11-02T09:26:45.744Z
Tags: Security

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.03 USDC
Atomic price: 30000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Payment option 2: 0.03 USDC
Atomic price: 30000 · Network: eip155:137 · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "30000",
    "payTo": "0x9238A9fFf08b90cCb723Ba70B20910871a6F28Da"
  },
  {
    "scheme": "exact",
    "network": "eip155:137",
    "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
    "amount": "30000",
    "payTo": "0x9238A9fFf08b90cCb723Ba70B20910871a6F28Da"
  }
]

Observed health

Status: Healthy
Latest latency: 48 ms
Average latency: 428 ms
HTTP status: 402
Last checked: 2026-11-02T09:26:45.739Z
Reachability: 100% over 14 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET"
      ]
    },
    "queryParams": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "description": "Package name to assess"
        },
        "ecosystem": {
          "type": "string",
          "enum": [
            "npm",
            "pypi"
          ],
          "description": "Registry (default npm)"
        },
        "version": {
          "type": "string",
          "description": "Optional exact version to pin the check to"
        }
      },
      "required": [
        "name"
      ]
    }
  },
  "required": [
    "type",
    "method",
    "queryParams"
  ],
  "additionalProperties": false
}

Output schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string"
    },
    "example": {
      "type": "object"
    }
  },
  "required": [
    "type"
  ]
}