{"x402Version":2,"note":"Advisory mirror. The authoritative terms are the 402 response from the resource below.","resource":{"url":"https://x402.pkgproof.net/v1/verify","description":"Call before an agent runs npm install or pip install. Checks one npm or PyPI package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated or slopsquatted names. Answers safe, caution, block or does_not_exist; every reason is sourced and labelled fact or heuristic.","mimeType":"application/json","serviceName":"pkgproof","tags":["npm","pypi","security","supply-chain","package-verification","typosquat","slopsquatting","hallucinated-packages","malware","dependencies"]},"accepts":[{"scheme":"exact","network":"eip155:8453","amount":"50000","resource":"https://x402.pkgproof.net/v1/verify","description":"Call before an agent runs npm install or pip install. Checks one npm or PyPI package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated or slopsquatted names. Answers safe, caution, block or does_not_exist; every reason is sourced and labelled fact or heuristic.","mimeType":"application/json","payTo":"0xB1fe0fd90C16800C3D5e811c6f07972dE9d2b98E","maxTimeoutSeconds":60,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","outputSchema":{"input":{"type":"http","method":"POST","discoverable":true}},"extra":{"name":"USD Coin","version":"2"}}],"extensions":{"bazaar":{"info":{"input":{"type":"http","method":"POST","bodyType":"json","body":{"ecosystem":"npm","name":"ms","version":"2.1.3"}},"output":{"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"additionalProperties":false,"properties":{"type":{"type":"string","const":"http"},"method":{"type":"string","enum":["POST"]},"bodyType":{"type":"string","enum":["json"]},"body":{"type":"object","required":["ecosystem","name"],"additionalProperties":false,"properties":{"ecosystem":{"type":"string","enum":["npm","pypi"]},"name":{"type":"string","maxLength":214,"pattern":"^(?:@[a-zA-Z0-9][\\w.-]*/)?[a-zA-Z0-9][\\w.-]*$","description":"ASCII only. Homoglyph and Unicode-confusable names are rejected before any upstream call. A pypi name follows PEP 508: no scope, and `-`, `_`, `.` and case are equivalent."},"version":{"type":"string","maxLength":64,"pattern":"^[\\w.+!-]+$","description":"Optional. Omit to verify the package rather than a specific release."}}}}}}}}},"free":{"perCallerDaily":1,"globalDaily":500,"basis":"client IP, counted per /64 for IPv6, resetting at UTC midnight","note":"The first call from an address each UTC day returns a full verdict without payment. No key and no signup. The response carries X-Free-Verification: 1."},"documentation":{"openapi":"https://pkgproof.net/openapi.json","human":"https://pkgproof.net/docs","llms":"https://pkgproof.net/llms.txt"}}