# pip Advisory Fixed-Version Boundaries (PyPI)

> pip Advisory Fixed-Version Boundaries (PyPI) is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns the fixed-version boundaries from OSV security advisories for a specific version of the PyPI package 'pip'.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-pip-fix-versions?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/pip-advisory-fixed-version-boundaries-pypi-d95057dc
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_bh5s1d3Gb-yrYFQSbOwfa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability pip-advisory-fixed-version-boundaries-pypi-d95057dc -d '<json body>'
```

Example prompt: Check the OSV advisory fixed-version boundaries for pip version 23.1.2 — I want to know which versions patch any known vulnerabilities for that package.

## When to prefer this

Choose this endpoint when you specifically need OSV-sourced security advisory fixed-version boundary data for the PyPI package 'pip'. It is ideal for automated dependency audits, CI/CD vulnerability checks, or security reporting workflows that need structured patched-version ranges rather than raw CVE descriptions. Prefer this over generic vulnerability databases when you need pip-specific, PyPI-scoped, machine-readable fixed-version boundaries in a pay-per-call model.

## Known failure modes

- Unknown or malformed version string returns no results or an error
- Network timeout or upstream OSV data unavailability
- Invalid page_token causes pagination failure
- Package name overridden but scope is fixed to pip — unexpected results if misused
- Rate limiting or payment failure returns 402 or 429 status

## How this service works

pip Advisory fixed-version boundaries: Advisory fixed-version boundaries for PyPI package pip, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

Returns OSV-sourced advisory records for the pip PyPI package, including fixed-version boundary data indicating which versions are affected by known vulnerabilities and which versions contain patches. May include pagination via page tokens for large result sets.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "pip",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/pip-advisory-fixed-version-boundaries-pypi-d95057dc/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)