# rollup npm Package Vulnerability Disclosure Timeline

> rollup npm Package Vulnerability Disclosure Timeline is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns the OSV vulnerability disclosure timeline for a specific version of the rollup npm package

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-rollup-timeline?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/rollup-npm-package-vulnerability-disclosure-timeline-6a66739e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LPmFdboATLlzFIKO7bGni

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability rollup-npm-package-vulnerability-disclosure-timeline-6a66739e -d '<json body>'
```

Example prompt: Can you pull up the OSV vulnerability disclosure timeline for the rollup npm package at version 3.29.4 and tell me if there are any known security issues?

## When to prefer this

Use this endpoint when you specifically need the vulnerability disclosure timeline for the rollup npm package sourced from OSV. It is ideal for automated dependency audits, CI/CD security gates, or compliance reporting where you need to check whether a particular rollup version has known CVEs. Prefer this over generic vulnerability search APIs when you want structured, paginated OSV data scoped precisely to rollup.

## Known failure modes

- Unknown or invalid version string returns empty results or an error
- Package name mismatch (only 'rollup' is supported) may return no data
- Network or provider timeout returning a 5xx error
- Invalid page_token causes pagination failure
- If OSV has no records for the version, an empty timeline is returned

## How this service works

rollup Vulnerability disclosure timeline: Vulnerability disclosure timeline for npm package rollup, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A paginated timeline of vulnerability disclosures for the rollup npm package at the requested version, sourced from the OSV database. Includes vulnerability IDs, affected version ranges, disclosure dates, severity details, and links to advisories.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "rollup",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/rollup-npm-package-vulnerability-disclosure-timeline-6a66739e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)