{"slug":"pkgpulse-004ba34a","name":"pkgpulse","summary":"Vulnerability scan for a list of packages in one call via OSV.dev: GET ?packages=lodash@4.17.15,pypi:requests==2.19.0,go:github.com/gin-gonic/gin@v1.9.0 (or POST a lockfile). Up to 200 across npm, PyPI, Go, crates.io, Maven and more: per-package advisories, severity, fix versions and upgrade targets; hallucinated and malicious packages flagged. JSON.","status":"live","indexable":true,"listed_since":"2026-10-26T14:35:25.390749Z","sources":[{"source":"x402_bazaar","external_id":"https://pkgpulse.letom1176.workers.dev/api/vuln-audit","owner_address":"0xc863b1c6658971ca427e90665dccce90a41a2bc2","seen_at":"2026-10-28T18:13:52.370438Z","removed_at":null}],"endpoints":[{"url":"https://pkgpulse.letom1176.workers.dev/api/vuln-audit","host":"pkgpulse.letom1176.workers.dev","protocol":"x402","state":"live","last_probe_at":"2026-10-28T12:06:50.617531Z","last_ok_at":"2026-10-28T12:06:50.617531Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"pkgpulse-letom1176-workers-dev-454c98c1","name":"pkgpulse.letom1176.workers.dev"}],"payment_options":[{"endpoint_url":"https://pkgpulse.letom1176.workers.dev/api/vuln-audit","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"10000","pay_to":"0xc863b1c6658971ca427e90665dccce90a41a2bc2","observed_at":"2026-10-28T12:06:50.617531Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":2,"paid_calls_30d":2,"last_paid_at":"2026-10-27T04:48:35.575Z","reported_at":"2026-10-28T18:13:52.370438Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check 1 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 1 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"2 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-10-28T00:44:04.124912Z"},"identity":{"endpoint_domains":["letom1176.workers.dev"],"proven_domains":[],"proven_wallets":[],"namesakes":[{"slug":"pkgpulse-0be4d5d3","name":"pkgpulse","proven_domain":null}],"namesake_count":1,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}