# Ops Control HQ npm Health

> Ops Control HQ npm Health is a paid API for AI agents from tkoqkknsezxavtxfywkm.supabase.co, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-11).

Returns a health and dependency-risk snapshot for a given npm package, including version, downloads, maintainers, license, deprecation status, and a risk score.

## Facts

- Endpoint: GET https://tkoqkknsezxavtxfywkm.supabase.co/functions/v1/npm-health-x402-v2?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ops-control-hq-npm-health-396186cc
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LjjIr0QNpLC7QIKB4_yTM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ops-control-hq-npm-health-396186cc
```

Example prompt: Can you pull the current health snapshot for the react npm package — I want to see its latest version, weekly downloads, risk score, and whether it's deprecated?

## When to prefer this

Choose this endpoint when you need a quick, single-call health-and-risk snapshot for one npm package without needing full CVE/vulnerability details. It is ideal for dependency vetting, CI gates, or dashboard widgets where you want version freshness, download popularity, maintainer count, license, deprecation status, and a composite risk score in one response. For deeper vulnerability data (OSV advisories with fixed versions), prefer the sibling 'Ops Control HQ npm Dependency Risk Brief' endpoint instead.

## Known failure modes

- Package not found on npm — returns error or empty result
- Invalid or malformed package name — request rejected
- Scoped package (@scope/name) may require URL encoding
- npm registry temporarily unavailable — upstream timeout
- Rate limiting or payment failure for the x402 micropayment

## How this service works

Current npm package health and dependency-risk snapshot

## Output

A JSON object containing the package name, latest version, publish date, days since last publish, weekly download count and period, number of maintainers, direct and dev dependency counts, license string, deprecated boolean, deprecation message, repository and homepage URLs, an integer risk score (0–100), an array of risk flags, the scoring methodology description, and the timestamp the check was performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "package"
     ],
     "properties": {
      "package": {
       "type": "string",
       "description": "npm package name, for example react or @scope/name"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "required": [
      "package",
      "latestVersion",
      "publishedAt",
      "daysSincePublish",
      "weeklyDownloads",
      "weeklyDownloadsPeriod",
      "maintainers",
      "dependencies",
      "devDependencies",
      "license",
      "deprecated",
      "deprecationMessage",
      "repository",
      "homepage",
      "riskScore",
      "flags",
      "methodology",
      "checkedAt"
     ],
     "properties": {
      "flags": {
       "type": "array",
       "items": {
        "type": "string"
       }
      },
      "license": {
       "type": "string"
      },
      "package": {
       "type": "string"
      },
      "homepage": {
       "type": [
        "string",
        "object",
        "null"
       ]
      },
      "checkedAt": {
       "type": "string"
      },
      "riskScore": {
       "type": "integer",
       "maximum": 100,
       "minimum": 0
      },
      "deprecated": {
       "type": "boolean"
      },
      "repository": {},
      "maintainers": {
       "type": "integer"
      },
      "methodology": {
       "type": "string"
      },
      "publishedAt": {
       "type": [
        "string",
        "null"
       ]
      },
      "dependencies": {
       "type": "integer"
      },
      "latestVersion": {
       "type": "string"
      },
      "devDependencies": {
       "type": "integer"
      },
      "weeklyDownloads": {
       "type": "integer"
      },
      "daysSincePublish": {
       "type": [
        "integer",
        "null"
       ]
      },
      "deprecationMessage": {
       "type": [
        "string",
        "null"
       ]
      },
      "weeklyDownloadsPeriod": {
       "type":
… (truncated)
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ops-control-hq-npm-health-396186cc/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tkoqkknsezxavtxfywkm.supabase.co](https://www.zero.xyz/host/tkoqkknsezxavtxfywkm.supabase.co/llms.txt)