# Briefs402 Package Risk Brief

> Briefs402 Package Risk Brief is a paid API for AI agents from briefs402.worlddata402.workers.dev, paid per call via x402, $0.15/call, status unknown (last checked 2026-10-29).

Generates a structured risk intelligence report for an npm or PyPI package, including license, risk level, version, and homepage domain age

## Facts

- Endpoint: HEAD https://briefs402.worlddata402.workers.dev/v1/brief/package/%7Bregistry%7D/%7Bname%7D?utm_source=zero.xyz
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/briefs402-package-risk-brief-cd9f9147
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DsbhVMSGOrX74cerlRpkc

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability briefs402-package-risk-brief-cd9f9147 -d '<json body>'
```

Example prompt: Can you pull a package risk brief on the npm package 'hono' and tell me its license, risk level, and how old its homepage domain is?

## When to prefer this

Choose this endpoint when you need a fast, structured risk summary for a specific npm or PyPI package without setting up API keys or accounts. It is ideal for AI agents performing automated dependency vetting, supply chain audits, or developer due diligence where a pay-per-call model (USDC on Base) is acceptable. Prefer it over manual registry scraping when you need fused signals (license, domain age, version) in a single call with a no-fabrication guarantee.

## Known failure modes

- Unknown or misspelled package name returns an error or empty result
- Unsupported registry (anything other than npm or pypi) is rejected by schema validation
- Network or upstream data source unavailability may degrade confidence or fail the call
- Payment failure over x402/USDC Base mainnet causes request to be rejected before processing
- Very new packages with minimal metadata may return low confidence scores

## How this service works

Ready-made intelligence reports for AI agents: company, country, daily market, EU tenders, domain due diligence, location, literature review, food product, package risk and document translation briefs. Each brief fuses several live data sources and is written by Llama 3.3 70B under strict no-fabrication rules (English or Arabic). USDC on Base mainnet over x402. No API key, no account.

## Output

A JSON object containing the package subject (registry/name), key facts including license type, risk level, latest version, homepage domain, and homepage domain age in years, plus an overall confidence rating (e.g. high/medium/low).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "pathParams": {
     "type": "object",
     "required": [
      "registry",
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,213}$",
       "description": "Package name (unscoped)"
      },
      "registry": {
       "enum": [
        "npm",
        "pypi"
       ],
       "type": "string",
       "description": "npm or pypi"
      }
     }
    },
    "queryParams": {
     "type": "object",
     "required": [],
     "properties": {
      "lang": {
       "enum": [
        "en",
        "ar"
       ],
       "type": "string",
       "default": "en",
       "description": "Output language of the summary: en (default) or ar (Arabic)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "subject": "npm/hono",
  "key_facts": {
   "license": "MIT",
   "risk_level": "low",
   "latest_version": "4.13.13",
   "homepage_domain": "hono.dev",
   "homepage_domain_age_years": 4.6
  },
  "confidence": "high"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/briefs402-package-risk-brief-cd9f9147/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from briefs402.worlddata402.workers.dev](https://www.zero.xyz/host/briefs402.worlddata402.workers.dev/llms.txt)