{"slug":"2s-e2d41d98","name":"2s","summary":"Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers \"is this dependency safe to add, what license does it carry, and how well-maintained is it.\"","status":"live","indexable":true,"listed_since":"2026-10-25T17:53:37.864367Z","sources":[{"source":"x402_bazaar","external_id":"https://2s.io/api/security/package","owner_address":"0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5","seen_at":"2026-10-27T07:32:06.332116Z","removed_at":null}],"endpoints":[{"url":"https://2s.io/api/security/package","host":"2s.io","protocol":"x402","state":"live","last_probe_at":"2026-10-26T09:39:48.483850Z","last_ok_at":"2026-10-26T09:39:48.483850Z","tools_count":null,"tools_changed_at":null,"uptime_24h":null,"uptime_30d":1.0}],"also_listed_as":[{"slug":"2s-io-49c1cd49","name":"2s.io"}],"payment_options":[{"endpoint_url":"https://2s.io/api/security/package","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"5400","pay_to":"0x2b6d4988db4723e6908db86ab2b8dfbc51fc32c5","observed_at":"2026-10-26T09:39:48.483850Z"},{"endpoint_url":"https://2s.io/api/security/package","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","rail":"exact","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","coin":"USDC","asset_label":"USDC","amount":"5400","pay_to":"TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn","observed_at":"2026-10-26T09:39:48.483850Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":3,"paid_calls_30d":3,"last_paid_at":"2026-10-19T06:27:27.958Z","reported_at":"2026-10-27T07:32:06.332116Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check 20 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 1 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"3 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-10-27T06:02:24.754744Z"},"identity":{"endpoint_domains":["2s.io"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}