# got CVE and Advisory Reference Mapping (npm)

> got CVE and Advisory Reference Mapping (npm) is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-17).

Returns CVE identifiers and security advisory references for a specific version of the npm package 'got', sourced from the OSV (Open Source Vulnerabilities) database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-got-cve-map?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/got-cve-and-advisory-reference-mapping-npm-0bd2869d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9vp2JLQIzROvcw_y706MC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability got-cve-and-advisory-reference-mapping-npm-0bd2869d -d '<json body>'
```

Example prompt: Can you look up any CVEs or security advisories for the npm package 'got' at version 12.6.1 using the OSV database?

## When to prefer this

Choose this endpoint when you specifically need CVE and advisory data for the npm package 'got' from the OSV database, especially when you need a quick, paid, per-call lookup without standing up your own OSV API integration. Prefer this over generic vulnerability scanners when you need structured, per-version advisory mappings for got specifically.

## Known failure modes

- Unknown or misspelled package version returns empty or error response
- 'latest' version resolution may fail if registry is unreachable
- Pagination token mismatch returns invalid page error
- Non-'got' package names are not supported by this endpoint
- OSV database may have a lag before newly disclosed CVEs appear

## How this service works

got CVE and advisory reference mapping: CVE and advisory reference mapping for npm package got, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A structured response containing CVE identifiers and advisory references associated with the specified version of the npm package 'got', as recorded in the OSV database. May include advisory IDs, severity information, affected version ranges, and links to advisory sources. Supports pagination via page_token for large result sets.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "got",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/got-cve-and-advisory-reference-mapping-npm-0bd2869d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)