# koa npm Package Advisory Severity Breakdown

> koa npm Package Advisory Severity Breakdown is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-17).

Returns a breakdown of OSV security advisory severities (critical, high, medium, low) for a given version of the npm package 'koa'.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-koa-severity?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/koa-npm-package-advisory-severity-breakdown-9f262ee8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qgciidE3Bbql00yKdf_a-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability koa-npm-package-advisory-severity-breakdown-9f262ee8 -d '<json body>'
```

Example prompt: What's the advisory severity breakdown for koa version 2.14.2 from OSV — how many critical, high, medium, and low vulnerabilities does it have?

## When to prefer this

Choose this endpoint when you specifically need a severity-bucketed summary of OSV advisories for the koa npm package, rather than a full list of CVE details or a multi-package audit. It is ideal for quick risk-triage of a single koa version in a CI/CD pipeline or dependency review workflow.

## Known failure modes

- Invalid or non-existent version string returns an error or empty result
- Network timeout from OSV upstream data source
- Package name mismatch if accidentally passed a different package name
- Rate limiting or payment failure via x402 protocol

## How this service works

koa Advisory severity breakdown: Advisory severity breakdown for npm package koa, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

Returns a structured breakdown of OSV security advisories affecting the specified version of the koa npm package, categorized by severity level (critical, high, medium, low), along with relevant advisory metadata such as counts per severity tier.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "koa",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/koa-npm-package-advisory-severity-breakdown-9f262ee8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)