# deps.dev Package Intelligence Lookup

> deps.dev Package Intelligence Lookup is a paid API for AI agents from x402-datashop-production.up.railway.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Fetches resolved license, security advisories, source project, GitHub stars, and OpenSSF Scorecard for an open-source package from deps.dev (Google Open Source Insights)

## Facts

- Endpoint: GET https://x402-datashop-production.up.railway.app/v1/dev/deps
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/deps-dev-package-intelligence-lookup-6dbb543e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9QLVi9P0473yZ9Lwdr6t4

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability deps-dev-package-intelligence-lookup-6dbb543e
```

Example prompt: Can you look up the license, known security advisories, and OpenSSF Scorecard score for the npm package 'lodash' at its latest version?

## When to prefer this

Use this endpoint when you need quick, structured package intelligence (license, advisories, scorecard, stars) for packages across npm, pypi, go, maven, cargo, or nuget ecosystems without setting up a Google deps.dev API integration yourself. Ideal for automated dependency audits, license compliance checks, or security screening in CI/CD pipelines. The 6-hour cache makes it cost-effective for repeated lookups of the same package.

## Known failure modes

- Package not found in the specified ecosystem — returns 404 or empty result
- Invalid ecosystem name — schema enforces enum so invalid systems are rejected before call
- Version not found — if a specific version is requested that doesn't exist, may return error or fall back
- Payment not included or insufficient — x402 payment required at $0.01 USDC per call
- Upstream deps.dev unavailable — service may return 503 or stale cached data

## How this service works

Package intelligence from deps.dev (Google Open Source Insights, data CC-BY 4.0): resolved license list, known advisory ids, source project, GitHub stars and OpenSSF Scorecard overall score. Query: ?system=npm&pkg=react&version=latest (systems: npm, pypi, go, maven, cargo, nuget; version defaults to the registry default release). Refreshed upstream continuously; served with a 6h cache.

## Output

Returns a JSON object with the resolved license list, known advisory IDs, source project URL, GitHub star count, and OpenSSF Scorecard overall score for the queried package. Data is sourced from deps.dev (Google Open Source Insights, CC-BY 4.0) and served with a 6-hour cache.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "pkg"
     ],
     "properties": {
      "pkg": {
       "type": "string",
       "description": "Package name, e.g. react or @types/node"
      },
      "system": {
       "enum": [
        "npm",
        "pypi",
        "go",
        "maven",
        "cargo",
        "nuget"
       ],
       "type": "string",
       "default": "npm",
       "description": "Package ecosystem"
      },
      "version": {
       "type": "string",
       "default": "latest",
       "description": "Exact version, or 'latest' for the registry default"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/deps-dev-package-intelligence-lookup-6dbb543e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-datashop-production.up.railway.app](https://www.zero.xyz/host/x402-datashop-production.up.railway.app/llms.txt)