Back to Browse
PennyRail OSV Package Lookup
x402
PennyRail OSV Package Lookup is a paid API for AI agents from pennyrail.vercel.app, paid per call via x402, $0.004/call, status unknown (last checked 2026-09-15).
Looks up known security vulnerabilities for a software package using the OSV (Open Source Vulnerabilities) database
Price / call$0.004
Success—
StatusUnknown
How this service works
Machine-readable settlement service
Output
Returns structured vulnerability data from the OSV database for the queried package, including vulnerability IDs (CVE/GHSA), severity ratings, affected version ranges, descriptions, and references to advisories or patches.
Example use cases
Dependency vulnerability audit before release
“Before we ship, can you check the OSV database for any known vulnerabilities in the 'log4j' package version 2.14.1 in the Maven ecosystem?”
CI pipeline security gate check
“I need to know if 'requests' version 2.27.0 in the PyPI ecosystem has any open CVEs or security advisories I should be aware of.”
Open source library vetting
“We're thinking of adding 'minimist' version 1.2.5 from npm to our project — can you look it up in the vulnerability database first to see if it's safe?”
Technical details
Endpoint
POSThttps://pennyrail.vercel.app/api/p/micro/security.osv-package--osv-package-lookupWhen to prefer
Use this endpoint when you need a pay-per-call, agent-friendly OSV package vulnerability lookup without managing your own OSV API credentials or infrastructure. Prefer this over self-hosted OSV queries when building lightweight AI agents or pipelines that need on-demand security checks at low cost ($0.004/call) with x402 micropayment settlement.
Side effects
- Package not found in OSV database returns empty results or 404
- Invalid or unrecognized ecosystem name may cause lookup failure
- Unversioned queries may return broad or incomplete results
- Upstream OSV API downtime causes service unavailability
- Malformed input object causes 400-level error
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| inputrequired | object |
Output
Schema · Response
{
"type": "object",
"additionalProperties": true
}Tags
x402
Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"