# Delx Dependency Version Risk

> Delx Dependency Version Risk is a paid API for AI agents from api.delx.ai, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-13).

Analyzes a set of dependency declarations to identify unbounded or risky version specifications before installation

## Facts

- Endpoint: POST https://api.delx.ai/api/v1/x402/dependency-version-risk
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delx-dependency-version-risk-9dc36a02
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_5mUdJx_MXs4nEuWeyoXog

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delx-dependency-version-risk-9dc36a02 -d '<json body>'
```

Example prompt: Before we install these packages, can you scan this dependencies object for any unbounded or risky version declarations and tell me which ones look unsafe?

## When to prefer this

Use this endpoint when you need a fast, stateless, local-only preflight check on dependency version declarations before installation or deployment — especially inside automated agent workflows where deterministic, machine-readable output is required and no upstream data retention is acceptable.

## Known failure modes

- Malformed dependencies object returns a validation error
- Empty dependencies object may return an empty or trivial result
- Non-standard version range syntax may not be recognized
- Payment failure via x402 results in request rejection before analysis

## How this service works

Identify unbounded dependency declarations before an agent installs them. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…

## Output

Returns a deterministic machine-readable JSON object identifying which dependencies have unbounded, wildcard, or otherwise risky version declarations, along with advisory risk signals for each flagged entry.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "dependencies": {
   "type": "object",
   "description": "Input field: dependencies."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "review",
  "schema": "delx/util-dependency-version-risk/v1",
  "advisory": "Version ranges do not replace vulnerability scanning or lockfile review.",
  "unbounded": [
   "example"
  ],
  "unbounded_count": 1,
  "dependency_count": 2
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delx-dependency-version-risk-9dc36a02/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.delx.ai](https://www.zero.xyz/host/api.delx.ai/llms.txt)