# numpy Vulnerability Disclosure Timeline (OSV/PyPI)

> numpy Vulnerability Disclosure Timeline (OSV/PyPI) is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-13).

Returns the OSV vulnerability disclosure timeline for a specific version of the numpy PyPI package, including known CVEs and security advisories.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-numpy-timeline?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/numpy-vulnerability-disclosure-timeline-osv-pypi-8df4f824
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_tNS1-k6J4uFNfeyRjbs8s

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability numpy-vulnerability-disclosure-timeline-osv-pypi-8df4f824 -d '<json body>'
```

Example prompt: Can you pull up the OSV vulnerability disclosure timeline for numpy version 1.24.0 from PyPI so I can see if there are any known CVEs before we ship?

## When to prefer this

Use this endpoint when you specifically need the OSV-sourced vulnerability disclosure timeline for the numpy PyPI package. It is purpose-built for numpy and ideal for automated CI/CD security gates, dependency auditing pipelines, or pre-release checks targeting this package. Prefer it over a general OSV API when you want a pre-wired, pay-per-call integration without managing OSV query construction yourself.

## Known failure modes

- Unknown or misspelled version returns empty timeline or 404-equivalent error
- 'latest' resolution fails if PyPI registry is temporarily unreachable
- Pagination token (page_token) is invalid or expired, resulting in an error
- No vulnerabilities found for a given version returns an empty result set (not an error)
- Rate limiting or payment failure (x402) if USDC balance is insufficient

## How this service works

numpy Vulnerability disclosure timeline: Vulnerability disclosure timeline for PyPI package numpy, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A chronological vulnerability disclosure timeline for the specified numpy version, drawn from the OSV database for the PyPI ecosystem. Includes CVE identifiers, advisory summaries, affected version ranges, disclosure dates, and severity information for all known security issues associated with the package version queried.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "numpy",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/numpy-vulnerability-disclosure-timeline-osv-pypi-8df4f824/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)
