x402 census · agent-data.centorprat.workers.dev · a13843e5c7ef · JSON
POST /tools/package-dependency-risk-scanner
blocked
Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable. One search per call (result caps in the input schema); failed lookups are not charged.
Verdict: not verified by an unpaid GET. 401/403/429: auth or bot protection. This says nothing about whether the route works when called as declared.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://agent-data.centorprat.workers.dev/tools/package-dependency-risk-scanner |
| Method | POST |
| Price | $0.01 USDC = 10000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Network | eip155:8453 (base); also accepts eip155:137, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp |
| payTo | 0x8d38D6026cf3A9805DE9c5F0611ceE95B532B120 |
| Seller | agent-data.centorprat.workers.dev |
| Catalogs | cdp (row updated 2026-10-25) |
| Listed since (lower bound) | 2026-10-25 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-10-25 |
| CDP quality counters | 3 calls and 2 unique payers in 30 days, last call 2026-10-25 (catalog-reported, not verified on chain) |
| Category (keyword rule) | trading-signals |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | Package Dependency Risk Scanner · security, npm, supply-chain, data |
Unpaid probe (census of 2026-10-25)
| Field | Value |
|---|---|
| Probed at | 2026-10-25T21:14:47.165Z |
| HEAD | 429 |
| GET | 429 |
| Verdict | blocked 401/403/429: auth or bot protection |
| 402 carried in | n/a |
| x402Version in the 402 | n/a |
| accepts[0] | none |
| Live amount equals catalog price | not comparable |
| Live payTo equals catalog payTo | not comparable |
| extensions.bazaar in the 402 | no |
| PAYMENT-REQUIRED header | no |
| WWW-Authenticate offer | none |
| Content type / server / CORS | application/json / cloudflare / * |
| Latency | 667 ms |
| Error | none |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Settlement history | unresolved: payTo not seen in the payer forensics (180 wallets' outbound history) or the Blockscout sample |
Declared input and output (extensions.bazaar)
{
"input": {
"body": {
"ecosystem": "npm",
"packages": [
"lodash"
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"type": "json",
"example": {
"items": [
{
"checkedVersion": "4.18.1",
"created": "2012-04-23T16:37:11.912Z",
"deprecated": false,
"deprecatedReason": null,
"ecosystem": "npm",
"found": true,
"homepage": "https://lodash.com/",
"lastPublish": "2026-04-01T21:01:20.458Z",
"latestVersion": "4.18.1",
"license": "MIT",
"maintainers": 1,
"name": "lodash",
"query": "lodash",
"weeklyDownloads": 94515109
}
]
}
}
}
Try it (unpaid: shows the 402)
curl -si -X POST 'https://agent-data.centorprat.workers.dev/tools/package-dependency-risk-scanner' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'
The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/a13843e5c7ef/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"a13843e5c7ef"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on agent-data.centorprat.workers.dev.