# SiteCheck Package Info Lookup

> SiteCheck Package Info Lookup is a paid API for AI agents from api.sitecheck-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-19).

Retrieves metadata, license, vulnerability, and download statistics for a software package from npm, PyPI, or crates.io

## Facts

- Endpoint: GET https://api.sitecheck-api.workers.dev/api/package?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-package-info-lookup-29110bf5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Wqa9ifb6-GUBSYnrbYc2l

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-package-info-lookup-29110bf5
```

Example prompt: Can you check the express package on npm — is it deprecated, what's the latest version, and does it have any known vulnerabilities?

## When to prefer this

Use this endpoint when you need structured, aggregated package metadata — including security vulnerability data from OSV — for npm, PyPI, or crates packages in a single call. Prefer this over manually querying registries when you need license, deprecation status, download stats, and vulnerability info in one response at low cost ($0.002/call).

## Known failure modes

- Package not found in the specified ecosystem returns an error
- Invalid ecosystem value (must be npm, pypi, or crates) returns validation error
- Network timeout reaching upstream registry
- Vulnerability data temporarily unavailable from OSV
- Package name typo results in not-found error

## How this service works

Facts about a package on npm, PyPI or crates.io: latest version and date, license, description, repository, maintainers (npm), weekly downloads (npm), a deprecated or yanked flag, and how many known vulnerabilities the latest version has (OSV).

## Output

Returns a JSON object with the package name, ecosystem, latest version, license, repository URL, description, number of maintainers, publish date, weekly download count, deprecation status and message, and a list of known CVE/vulnerability IDs with count for the latest version — sourced from the registry and OSV.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ecosystem",
      "name"
     ],
     "properties": {
      "name": {
       "type": "string",
       "description": "Package name"
      },
      "ecosystem": {
       "type": "string",
       "description": "npm, pypi or crates"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "name": "express",
  "source": "npm registry and npm downloads API, vulnerabilities from OSV (https://osv.dev)",
  "license": "MIT",
  "checkedAt": "2026-10-14T04:49:24.763Z",
  "ecosystem": "npm",
  "deprecated": false,
  "repository": "https://github.com/expressjs/express",
  "description": "Fast, unopinionated, minimalist web framework",
  "maintainers": 5,
  "publishedAt": "2026-10-09T12:56:54.505Z",
  "latestVersion": "5.3.0",
  "vulnerabilities": {
   "ids": [],
   "count": 0,
   "forVersion": "5.3.0"
  },
  "weeklyDownloads": 145199376,
  "deprecationMessage": null
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-package-info-lookup-29110bf5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.sitecheck-api.workers.dev](https://www.zero.xyz/host/api.sitecheck-api.workers.dev/llms.txt)