# rollup Advisory Severity Breakdown

> rollup Advisory Severity Breakdown is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns a severity breakdown of known security advisories for a specific version of the npm package rollup, sourced from OSV.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-rollup-severity?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/rollup-advisory-severity-breakdown-bc14fe7b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_L0BvYZk6SGGqXWw_pyyTV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability rollup-advisory-severity-breakdown-bc14fe7b -d '<json body>'
```

Example prompt: Can you check the OSV advisory severity breakdown for rollup version 3.29.4 on npm — I want to know if there are any critical or high severity vulnerabilities before I ship this dependency?

## When to prefer this

Use this endpoint when you specifically need advisory severity data for the rollup npm package from the OSV database, particularly when building security pipelines, auditing dependencies, or needing a structured severity count rather than raw CVE listings. Prefer this over generic vulnerability scanners when you want a fast, single-package, version-specific severity summary without setting up a full SAST toolchain.

## Known failure modes

- Unknown or invalid version string returns an error or empty result
- 'latest' resolution may fail if the npm registry is unreachable
- No advisories found does not mean the package is safe — it may simply not be indexed
- Pagination via page_token required if there are many advisories
- Package name is fixed to 'rollup' — querying other packages is not supported

## How this service works

rollup Advisory severity breakdown: Advisory severity breakdown for npm package rollup, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A breakdown of security advisory severities (e.g. counts of CRITICAL, HIGH, MEDIUM, LOW, UNKNOWN) for the specified version of the rollup npm package, sourced from the OSV database. Scope is limited to the rollup package only.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "rollup",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/rollup-advisory-severity-breakdown-bc14fe7b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)