# ManyLives Package Info & Vulnerability Check

> ManyLives Package Info & Vulnerability Check is a paid API for AI agents from api.manylives.me, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-10).

Looks up metadata and known security vulnerabilities for npm or PyPI packages by name and optional version

## Facts

- Endpoint: GET https://api.manylives.me/paid/dev/package?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/manylives-package-info-vulnerability-check-4d36a790
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Awri8SBRJBEXySXi1OmJw

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability manylives-package-info-vulnerability-check-4d36a790
```

Example prompt: Can you check if the npm package lodash version 4.17.15 has any known vulnerabilities, and also tell me its current license and latest version?

## When to prefer this

Use this endpoint when you need a quick, pay-per-call lookup of package metadata and security vulnerability data for npm or PyPI packages without setting up an account or API key. Prefer it over full SAST tools or local audits when you need lightweight, on-demand checks within an agent workflow. It is especially useful for automated dependency review pipelines or agent-driven security triage where per-call cost ($0.005 USDC) is acceptable and no persistent subscription is wanted.

## Known failure modes

- Package name not found in the specified ecosystem — returns error or empty result
- Invalid ecosystem value (anything other than 'npm' or 'pypi') — validation error
- Requested version does not exist — may return null or error for version-specific fields
- Network or upstream registry unavailability — timeout or 5xx error
- Payment not processed — 402 response requiring x402 payment before data is returned

## How this service works

Pay-per-call tools for people building AI agents: live web search and page contents, point-in-time crypto market data and news for backtests (no lookahead), verifiable track records of 1,000 crypto strategies locked on the Base network, company profiles, quick AI and batch prices. Ask us to turn a public website into a JSON endpoint. Pay per call, no account, free trial.

## Output

A JSON object containing the package name, latest version string, SPDX license identifier, release date of the queried version, ecosystem, weekly download count, and an array of known vulnerabilities each with a GHSA/CVE ID, summary text, and severity rating (e.g. HIGH, MEDIUM, LOW).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "type": "string",
     "const": "GET"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ecosystem",
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "examples": [
        "lodash"
       ],
       "description": "package name (required)"
      },
      "version": {
       "type": "string",
       "examples": [
        "4.17.15"
       ],
       "description": "optional version to check for vulnerabilities (default latest)"
      },
      "ecosystem": {
       "type": "string",
       "examples": [
        "npm"
       ],
       "description": "npm or pypi (required)"
      }
     }
    }
   }
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "json"
    },
    "example": {
     "type": "object",
     "properties": {
      "name": {
       "type": "string"
      },
      "latest": {
       "type": "string"
      },
      "license": {
       "type": "string"
      },
      "released": {
       "type": "string"
      },
      "ecosystem": {
       "type": "string"
      },
      "vulnerabilities": {
       "type": "array",
       "items": {
        "type": "object",
        "properties": {
         "id": {
          "type": "string"
         },
         "summary": {
          "type": "string"
         },
         "severity": {
          "type": "string"
         }
        }
       }
      },
      "weekly_downloads": {
       "type": "number"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "lodash",
  "latest": "4.17.21",
  "license": "MIT",
  "released": "2021-02-20",
  "ecosystem": "npm",
  "vulnerabilities": [
   {
    "id": "GHSA-…",
    "summary": "…",
    "severity": "HIGH"
   }
  ],
  "weekly_downloads": 50000000
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/manylives-package-info-vulnerability-check-4d36a790/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.manylives.me](https://www.zero.xyz/host/api.manylives.me/llms.txt)