# Aayat AI Dependency Safety Report

> Aayat AI Dependency Safety Report is a paid API for AI agents from aayatai.com, paid per call via x402, $0.08/call, status unknown (last checked 2026-10-02).

Returns a comprehensive safety, licence compatibility, and recommendation report for an npm, PyPI, Rust (crates), or Go package dependency

## Facts

- Endpoint: GET https://aayatai.com/dependency/report?utm_source=zero.xyz
- Price: $0.08/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-02
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/aayat-ai-dependency-safety-report-0875db21
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_adTbny0p1D554LbvbKhb-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability aayat-ai-dependency-safety-report-0875db21
```

Example prompt: Can you check if it's safe to use the `lodash` npm package in my MIT-licensed project that I distribute publicly — I need a recommendation, licence compatibility check, and any alternatives?

## When to prefer this

Choose this endpoint when you need a single, comprehensive dependency decision that combines vulnerability data, licence compatibility analysis, and repository health into one structured report with actionable alternatives — especially useful for coding agents that need to vet packages before adding them to a project. Prefer this over separate vulnerability or package check endpoints when you need the full picture in one call.

## Known failure modes

- Unknown package name returns an error or empty result
- Unsupported ecosystem returns a validation error
- Version string not found for the package returns an error
- Network timeout or upstream registry unavailability
- Payment not received or insufficient USDC balance causes 402 rejection

## How this service works

Pay-per-use data and tools for AI agents: crypto token safety, prices and wallets, an LLM gateway, web search and documents to Markdown, library docs, package safety and AI model prices for coding agents, company research, news, UK/EU open data and an x402 market guide. Pay per call in USDC on Base or Solana with x402. No account or API key.

## Output

Returns a JSON object containing: a decision enum (use / use-with-care / avoid), a list of reasons, a markdown report with recommendation, risks, licence analysis, and alternatives compared, a licence compatibility object (status, family, reason), the full package safety check result, repository health data, and a list of alternative packages with their own safety scores and download counts.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "maxLength": 214,
       "minLength": 1,
       "description": "Package name, e.g. express, requests, serde or github.com/gin-gonic/gin."
      },
      "usage": {
       "enum": [
        "distributed",
        "saas",
        "internal"
       ],
       "type": "string",
       "default": "distributed",
       "description": "How your project is used: distributed, saas or internal."
      },
      "project": {
       "type": "string",
       "default": "proprietary",
       "maxLength": 60,
       "description": "Your project's licence (SPDX id, e.g. MIT) or proprietary."
      },
      "version": {
       "type": "string",
       "maxLength": 64,
       "description": "Exact version to check (default: the latest release)."
      },
      "ecosystem": {
       "enum": [
        "npm",
        "pypi",
        "crates",
        "go"
       ],
       "type": "string",
       "default": "npm",
       "description": "Package ecosystem: npm, pypi, crates (Rust) or go (Go modules)."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "required": [
      "name",
      "version",
      "decision",
      "reasons",
      "licence",
      "report",
      "package",
      "alternatives"
     ],
     "properties": {
      "name": {
       "type": "string"
      },
      "report": {
       "type": "string",
       "description": "Markdown: recommendation, risks, licence, alternatives compared."
      },
      "licence": {
       "type": "object",
       "description": "Compatibility of the package's licence with your project and usage."
      },
      "package": {
       "type": "object",
       "description": "Full /package/check report."
      },
      "reasons": {
       "type": "array",
       "items": {
        "type": "string"
       }
      },
      "version":
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "express",
  "report": "## Recommendation\nUse express 5.1.0 ...\n\n## Alternatives\n- fastify: faster, also MIT ...",
  "licence": {
   "family": "permissive",
   "reason": "Permissive: keep its copyright and licence notice.",
   "status": "ok",
   "licence": "MIT"
  },
  "package": {
   "name": "express",
   "score": 100,
   "verdict": "ok"
  },
  "reasons": [
   "No known vulnerabilities, maintained, permissive licence."
  ],
  "version": "5.1.0",
  "decision": "use",
  "checkedAt": "2026-09-28T12:00:00.000Z",
  "ecosystem": "npm",
  "disclaimer": "Automated guidance from licence texts and common compatibility rules, not legal advice.",
  "repository": {
   "repo": "expressjs/express",
   "verdict": "healthy"
  },
  "alternatives": {
   "note": null,
   "checked": [
    {
     "name": "fastify",
     "score": 100,
     "licence": "MIT",
     "verdict": "ok",
     "licenceStatus": "ok",
     "weeklyDownloads": 5000000
    }
   ],
   "keywords": [
    "framework",
    "router"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/aayat-ai-dependency-safety-report-0875db21/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from aayatai.com](https://www.zero.xyz/host/aayatai.com/llms.txt)