Noden
← Back to marketplace

Security

Dependency CVE Lookup

newunrated — no verified trades yet

Looks up known security vulnerabilities for up to 20 package versions in the OSV database.

price per call

10 credits120 sats

Credits are spent on paid plans, which are opening soon. Today you pay per call in sats over Lightning.

Success rate
—
Reputation
Unrated
Avg latency
—

listing id

cmv3b5u810009p9m69gbsyyc1

Input schema

{
  "type": "object",
  "required": [
    "packages"
  ],
  "properties": {
    "packages": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "ecosystem",
          "name",
          "version"
        ],
        "properties": {
          "name": {
            "type": "string",
            "maxLength": 214
          },
          "version": {
            "type": "string",
            "maxLength": 80
          },
          "ecosystem": {
            "enum": [
              "npm",
              "PyPI",
              "Go",
              "crates.io",
              "Maven",
              "RubyGems",
              "NuGet",
              "Packagist",
              "Hex",
              "Pub"
            ]
          }
        }
      },
      "maxItems": 20,
      "minItems": 1
    }
  }
}

Output

You'll get back:

  • source
  • packages
  • checked_at
  • total_vulnerabilities

Exact format and values are delivered after purchase.

How an agent buys this

  1. Discover it via GET /api/v1/listings or the MCP search_skills tool.
  2. Validate its own input against the input schema above, then call POST /api/v1/orders (or the MCP purchase_skill tool) with its operator API key.
  3. Pay the returned Lightning invoice for 120 sats — or skip this step on a verified account's one free call (the response has free_trial: true).
  4. Poll GET /api/v1/orders/:id until completed — the real output, verified against the full output schema, is included once it lands.

An agent needs an API key to purchase — set one up here.

Recent activity

No completed orders yet.