Api Endpoint

Forest Packages

Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC

Open interactive test console

Offering

Provider
http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run
Method
POST
Offering type
Api Endpoint
Transport type
http
Category
Security
Delivery
Not provided
Pricing model
Not provided
x402 version
2

Endpoint context

URL
https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/security
MIME type
Not provided
First seen
2026-10-16T01:50:24.663Z
Last seen
Tags
package, dependency, Security, vulnerability, cve

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1
0.003 USDC
Atomic price: 3000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Raw x402 terms
[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "3000",
    "payTo": "0xb48D918151311F982d542eF5C84cc1cd54CFf7a9"
  }
]

Observed health

Status
Reachable
Latest latency
1339 ms
Average latency
1063 ms
HTTP status
405
Last checked
Reachability
100% over 14 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "additionalProperties": false,
  "properties": {
    "body": {
      "additionalProperties": false,
      "properties": {
        "ecosystem": {
          "description": "Public ecosystem value used to scope this lookup.",
          "enum": [
            "npm",
            "pypi"
          ]
        },
        "package": {
          "description": "Public package name to inspect.",
          "maxLength": 214,
          "minLength": 1,
          "type": "string"
        },
        "version": {
          "description": "Package version whose public metadata should be checked.",
          "maxLength": 128,
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "ecosystem",
        "package",
        "version"
      ],
      "type": "object"
    },
    "bodyType": {
      "enum": [
        "json",
        "form-data",
        "text"
      ],
      "type": "string"
    },
    "method": {
      "enum": [
        "POST"
      ],
      "type": "string"
    },
    "type": {
      "const": "http",
      "type": "string"
    }
  },
  "required": [
    "type",
    "method",
    "bodyType",
    "body"
  ],
  "type": "object"
}

Output schema

{
  "properties": {
    "example": {
      "additionalProperties": false,
      "properties": {
        "capability": {
          "const": "package.security",
          "description": "Public capability value used to scope this lookup."
        },
        "data": {
          "additionalProperties": false,
          "description": "Public data value used to scope this lookup.",
          "properties": {
            "count": {
              "description": "Public count value used to scope this lookup.",
              "type": "integer"
            },
            "ecosystem": {
              "description": "Public ecosystem value used to scope this lookup.",
              "type": "string"
            },
            "evidence": {
              "description": "Public evidence value used to scope this lookup.",
              "type": "array"
            },
            "package": {
              "description": "Public package name to inspect.",
              "type": "string"
            },
            "version": {
              "description": "Package version whose public metadata should be checked.",
              "type": "string"
            },
            "vulnerabilities": {
              "description": "Public vulnerabilities value used to scope this lookup.",
              "type": "array"
            }
          },
          "required": [
            "ecosystem",
            "package",
            "version",
            "vulnerabilities",
            "count",
            "evidence"
          ],
          "type": "object"
        },
        "meta": {
          "additionalProperties": false,
          "description": "Public meta value used to scope this lookup.",
          "properties": {
            "cache": {
              "description": "Public cache value used to scope this lookup.",
              "enum": [
                "hit",
                "miss",
                "bypass"
              ]
            },
            "checked_at": {
              "description": "Public checked at value used to scope this lookup.",
              "type": "string"
            },
            "duration_ms": {
              "description": "Public duration ms value used to scope this lookup.",
              "minimum": 0,
              "type": "integer"
            },
            "provider": {
              "description": "Public provider value used to scope this lookup.",
              "type": [
                "string",
                "null"
              ]
            }
          },
          "required": [
            "provider",
            "checked_at",
            "cache",
            "duration_ms"
          ],
          "type": "object"
        },
        "ok": {
          "const": true,
          "description": "Public ok value used to scope this lookup."
        },
        "version": {
          "const": "1",
          "description": "Package version whose public metadata should be checked."
        }
      },
      "required": [
        "ok",
        "capability",
        "version",
        "data",
        "meta"
      ],
      "type": "object"
    },
    "type": {
      "type": "string"
    }
  },
  "required": [
    "type"
  ],
  "type": "object"
}