npm-guardian � npm supply-chain security audit (CVE, malware, slopsquatting)GET /pro/audit · x402 API by npm-guardian.vercel.app
Audit any npm package for CVEs (OSV.dev), malware, install-script abuse and tarball tampering BEFORE npm install. For AI coding agents.
What does this x402 API do?
npm-guardian � npm supply-chain security audit (CVE, malware, slopsquatting). This is an x402-gated GET API resource from npm-guardian.vercel.app. The latest safe exact-route check returned HTTP 404 on 2026-08-24. The listing records $0.02 USD-denominated per request on Base. No settled paid call has been verified.
- Published price
- $0.02 USD-denominated per request
- Networks
- Base
- Latest evidence
- The latest safe exact-route check returned HTTP 404 on 2026-08-24
- Resource ID
- 83fa239b26e837554025be63
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://npm-guardian.vercel.app/pro/audit?name=lodash&version=4.17.20", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Observed in 402-index
Discovered through self-registered.
- Exact route checked
non 402
- Origin reachable
HEAD https://npm-guardian.vercel.app/ returned 404.
- Registry record checked
Registry health: degraded.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is $0.02 USD-denominated per request. Raw protocol requirements remain visible below for implementation and audit use.