Package Safety Gate
npm package safety gate: vulnerabilities, malware advisories, typosquatting, install-script risk.
Offering
- Provider
- mcp.dropenginehq.com
- Method
- POST
- Offering type
- Api Endpoint
- Transport type
- http
- Category
- Security
- Delivery
- Not provided
- Pricing model
- Not provided
- x402 version
- 2
Endpoint context
- URL
https://mcp.dropenginehq.com/api/check-package- MIME type
- application/json
- First seen
- 2026-10-16T01:50:24.663Z
- Last seen
- Tags
- package, npm, Security
Payment pricing
x402 payment terms are the authoritative price for calling this endpoint.
- Payment option 1
- 0.005 USDC
Atomic price: 5000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Raw x402 terms
[
{
"scheme": "exact",
"network": "eip155:8453",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"payTo": "0xc7693f1ba43E6D1F1885292E1194dc1FDc6e7585"
}
]Observed health
- Status
- Healthy
- Latest latency
- 102 ms
- Average latency
- 340 ms
- HTTP status
- 204
- Last checked
- Reachability
- 100% over 15 checks
Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.
Input schema
{
"type": "object",
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"type": "string",
"enum": [
"POST",
"PUT",
"PATCH"
]
},
"bodyType": {
"type": "string",
"enum": [
"json",
"form-data",
"text"
]
},
"body": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {
"ecosystem": {
"type": "string",
"const": "npm"
},
"package": {
"type": "string",
"minLength": 1,
"maxLength": 214
},
"version": {
"type": "string",
"maxLength": 128
}
},
"required": [
"ecosystem",
"package"
],
"additionalProperties": false
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"additionalProperties": false
}Output schema
{
"type": "object",
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"success": {
"type": "boolean",
"const": true
},
"ecosystem": {
"type": "string",
"const": "npm"
},
"package": {
"type": "string"
},
"requested_version": {
"type": [
"string",
"null"
]
},
"resolved_version": {
"type": "string"
},
"risk_score": {
"type": "integer",
"minimum": 0,
"maximum": 100
},
"risk_level": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"critical"
]
},
"risk_confidence": {
"type": "string",
"enum": [
"low",
"medium",
"high"
]
},
"recommendation": {
"type": "string",
"enum": [
"allow",
"caution",
"block"
]
},
"known_malicious": {
"type": [
"boolean",
"null"
]
},
"malicious_confidence": {
"anyOf": [
{
"type": "string",
"enum": [
"low",
"medium",
"high"
]
},
{
"type": "null"
}
]
},
"known_vulnerabilities": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"summary": {
"type": [
"string",
"null"
]
},
"severity": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"critical",
"unknown"
]
},
"affected": {
"type": "boolean",
"const": true
},
"fixed_version": {
"type": [
"string",
"null"
]
}
},
"required": [
"id",
"summary",
"severity",
"affected",
"fixed_version"
],
"additionalProperties": false
}
},
"typosquat_risk": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"critical",
"unknown"
]
},
"similar_to": {
"type": [
"string",
"null"
]
},
"similarity_score": {
"anyOf": [
{
"type": "number",
"minimum": 0,
"maximum": 1
},
{
"type": "null"
}
]
},
"install_script_risk": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"critical",
"unknown"
]
},
"suspicious_scripts": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"signals": {
"type": "array",
"items": {
"type": "string"
}
}
},
"required": [
"name",
"signals"
],
"additionalProperties": false
}
},
"dependency_risk": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"unknown"
]
},
"dependency_count": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
"dependencies_analyzed": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
"dependency_findings": {
"type": "array",
"items": {
"type": "object",
"properties": {
"package": {
"type": "string"
},
"version": {
"type": "string"
},
"known_malicious": {
"type": [
"boolean",
"null"
]
},
"vulnerabilities": {
"type": "array",
"items": {
"type": "string"
}
},
"risk": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"critical",
"unknown"
]
}
},
"required": [
"package",
"version",
"known_malicious",
"vulnerabilities",
"risk"
],
"additionalProperties": false
}
},
"maintainer_risk": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"unknown"
]
},
"maintainer_count": {
"anyOf": [
{
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
{
"type": "null"
}
]
},
"reputation": {
"type": "string",
"enum": [
"good",
"neutral",
"suspicious",
"malicious",
"unknown"
]
},
"package_age_days": {
"anyOf": [
{
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
{
"type": "null"
}
]
},
"new_package": {
"type": [
"boolean",
"null"
]
},
"deprecated": {
"type": "boolean"
},
"warnings": {
"type": "array",
"items": {
"type": "string"
}
},
"sources": {
"type": "array",
"items": {
"type": "string"
}
},
"degraded": {
"type": "boolean"
},
"cached": {
"type": "boolean"
},
"checked_at": {
"type": "string",
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z))$"
},
"data_freshness_seconds": {
"type": "number",
"minimum": 0
},
"recommended_next": {
"type": "object",
"properties": {
"tool": {
"type": "string"
},
"reason": {
"type": "string"
},
"price": {
"type": [
"string",
"null"
]
}
},
"required": [
"tool",
"reason",
"price"
],
"additionalProperties": false
}
},
"required": [
"success",
"ecosystem",
"package",
"requested_version",
"resolved_version",
"risk_score",
"risk_level",
"risk_confidence",
"recommendation",
"known_malicious",
"malicious_confidence",
"known_vulnerabilities",
"typosquat_risk",
"similar_to",
"similarity_score",
"install_script_risk",
"suspicious_scripts",
"dependency_risk",
"dependency_count",
"dependencies_analyzed",
"dependency_findings",
"maintainer_risk",
"maintainer_count",
"reputation",
"package_age_days",
"new_package",
"deprecated",
"warnings",
"sources",
"degraded",
"cached",
"checked_at",
"data_freshness_seconds"
],
"additionalProperties": false
}
},
"required": [
"type"
]
}