{"slug":"osv-dependency-batch-scan-3feb3b30","name":"OSV Dependency Batch Scan","summary":"Use when an agent must scan a project's dependencies before install, upgrade or merge. Input: packages, up to 20 ecosystem:name@version, comma-separated (npm, pypi, go, cargo/crates.io, maven, nuget...). Output: JSON summary (vulnerable count, critical/high/moderate/low), per package vulnerable yes/no, counts, top advisories with CVE, severity, fixed versions, osv.dev links. Data: OSV.dev, CC BY 4.0. Example: ?packages=npm:lodash@4.17.15,pypi:django@3.2.0","status":"live","headings":[{"slug":"code","title":"Code & developer tools"},{"slug":"security","title":"Security & risk checks"}],"indexable":true,"listed_since":"2026-11-06T20:25:03.999920Z","sources":[{"source":"x402_bazaar","external_id":"https://1gateway.dev/v1/dev/vulnerabilities/batch","owner_address":"0x6246eee0355dd7a93c888fe59e1151388a0cc5a1","seen_at":"2026-11-10T10:14:37.779239Z","removed_at":null}],"endpoints":[{"url":"https://1gateway.dev/v1/dev/vulnerabilities/batch","host":"1gateway.dev","protocol":"x402","state":"live","last_probe_at":"2026-11-10T14:57:58.621475Z","last_ok_at":"2026-11-10T14:57:58.621475Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"1gateway-dev-35460eca","name":"1gateway.dev"}],"payment_options":[{"endpoint_url":"https://1gateway.dev/v1/dev/vulnerabilities/batch","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"4500","pay_to":"0x6246eee0355dd7a93c888fe59e1151388a0cc5a1","observed_at":"2026-11-10T14:57:58.621475Z"},{"endpoint_url":"https://1gateway.dev/v1/dev/vulnerabilities/batch","network":"eip155:143","scheme":"exact","rail":"exact","asset":"0x754704bc059f8c67012fed69bc8a327a5aafb603","coin":null,"asset_label":"USDC","amount":"4500","pay_to":"0x6246eee0355dd7a93c888fe59e1151388a0cc5a1","observed_at":"2026-11-10T14:57:58.621475Z"},{"endpoint_url":"https://1gateway.dev/v1/dev/vulnerabilities/batch","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","rail":"exact","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","coin":"USDC","asset_label":null,"amount":"4500","pay_to":"AwV6UZobYPyTdsuNa2NknZZrnmmUoH5ckEv3wNgL26WT","observed_at":"2026-11-10T14:57:58.621475Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":2,"last_paid_at":"2026-11-07T03:34:22.783Z","reported_at":"2026-11-10T10:14:37.779239Z"},"assessment":{"method":"2026.11.3","checks":[{"id":"answers","state":"pass","reason":"Answered a check 9 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 4 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"1 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-11T00:32:47.859146Z"},"identity":{"endpoint_domains":["1gateway.dev"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}