{"slug":"npm-package-vulnerability-check-a0289a38","name":"npm package vulnerability check","summary":"Known vulnerabilities for one package version from OSV.dev, with CISA exploited-in-the-wild flag and the fixed version. Should I install this? Pass ?package=lodash&ecosystem=npm&version=4.17.15 (npm, PyPI, Go, crates.io, Maven, NuGet, RubyGems, Packagist, Hex, Pub) and get every known advisory for that exact version from OSV.dev (GitHub, PyPA, Go and RustSec databases), whether any of them is on CISA's Known Exploited Vulnerabilities list, severity, and the version that fixes each.","status":"live","indexable":true,"listed_since":"2026-10-27T11:36:12.661349Z","sources":[{"source":"x402_bazaar","external_id":"https://apexfaucet.xyz/api/x402/software-risk","owner_address":"0xd334ab5151c624cada654854e2879903dc4217ed","seen_at":"2026-10-28T18:15:22.529534Z","removed_at":null}],"endpoints":[{"url":"https://apexfaucet.xyz/api/x402/software-risk","host":"apexfaucet.xyz","protocol":"x402","state":"live","last_probe_at":"2026-10-29T05:15:04.752546Z","last_ok_at":"2026-10-29T05:15:04.752546Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"apexfaucet-xyz-f3cfed4a","name":"apexfaucet.xyz"}],"payment_options":[{"endpoint_url":"https://apexfaucet.xyz/api/x402/software-risk","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","rail":"exact","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","coin":"USDC","asset_label":null,"amount":"3000","pay_to":"HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ","observed_at":"2026-10-29T05:15:04.752546Z"},{"endpoint_url":"https://apexfaucet.xyz/api/x402/software-risk","network":"eip155:5042","scheme":"exact","rail":"exact","asset":"0x3600000000000000000000000000000000000000","coin":"USDC","asset_label":"USDC","amount":"3000","pay_to":"0xd334ab5151c624cada654854e2879903dc4217ed","observed_at":"2026-10-29T05:15:04.752546Z"},{"endpoint_url":"https://apexfaucet.xyz/api/x402/software-risk","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"3000","pay_to":"0xd334ab5151c624cada654854e2879903dc4217ed","observed_at":"2026-10-29T05:15:04.752546Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":3,"paid_calls_30d":5,"last_paid_at":"2026-10-27T09:12:19.755Z","reported_at":"2026-10-28T18:15:22.529534Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check 7 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 1 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"3 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-10-29T00:14:01.301747Z"},"identity":{"endpoint_domains":["apexfaucet.xyz"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}