# Stack Facts Preflight Package Security Check

> Stack Facts Preflight Package Security Check is a paid API for AI agents from g5joilnmeep4ntz3nwezxt5dmu.srv.us, paid per call via x402, $0.008/call, status unknown (last checked 2026-10-13).

Checks an open-source package for malware, known vulnerabilities (OSV), actively exploited CVEs (CISA KEV), and end-of-life status before installation, returning a signed verdict per call paid in USDC.

## Facts

- Endpoint: POST https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/preflight?utm_source=zero.xyz
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stack-facts-preflight-package-security-check-3d435aa9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_fw4-rnGudECq3o0yPDbJA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stack-facts-preflight-package-security-check-3d435aa9 -d '<json body>'
```

Example prompt: Before I add lodash 4.17.20 from the npm ecosystem to my project, can you run a preflight security check on it — I want to know about any known vulnerabilities, whether it's being actively exploited, and if it's end-of-life?

## When to prefer this

Choose this endpoint when you need a pre-installation security check that combines multiple authoritative data sources (OSV, CISA KEV, endoflife.date) in a single signed, pay-per-call API call with no account setup. Prefer it over free vulnerability databases when you need signed, auditable responses, CISA KEV correlation, and EOL status all in one call. Ideal for AI agent pipelines that need autonomous, accountless security checks on open source dependencies before installation or deployment.

## Known failure modes

- Invalid or missing purl format (must start with 'pkg:') returns a 400 error
- Unknown ecosystem or package name returns an empty reasons list with a 'safe' verdict but may indicate a lookup miss
- Stale dataset flag (stale:true) in metadata indicates data may not reflect the latest vulnerabilities
- Payment not included or insufficient USDC results in HTTP 402 response before data is returned
- Package version not found in ecosystem returns no vulnerability matches

## How this service works

Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.

## Output

Returns a JSON object with a top-level verdict ('safe', 'warn', or 'block'), a list of reasons (each with CVE/GHSA ID, severity, summary, fix versions, and whether it appears in CISA KEV), the package PURL, and dataset metadata including snapshot IDs, sha256 hashes, cryptographic signatures, data source URLs, and freshness timestamps for OSV, KEV, and EOL datasets.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "name": {
   "type": "string",
   "maxLength": 200
  },
  "package": {
   "type": "string",
   "pattern": "^pkg:",
   "maxLength": 512,
   "minLength": 7
  },
  "version": {
   "type": "string",
   "maxLength": 200
  },
  "ecosystem": {
   "type": "string",
   "maxLength": 200
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "notice": null,
   "yanked": false,
   "package": {
    "name": "lodash",
    "purl": "pkg:npm/lodash@4.17.20",
    "version": "4.17.20",
    "ecosystem": "npm"
   },
   "reasons": [
    {
     "id": "GHSA-35jh-r3h4-6jhm",
     "code": "vuln",
     "fixed": [
      "4.17.21"
     ],
     "aliases": [
      "CVE-2021-23337"
     ],
     "summary": "Command Injection in lodash",
     "verdict": "warn",
     "severity": "HIGH"
    }
   ],
   "verdict": "warn",
   "deprecated": false,
   "kev_catalog_version": "2026.10.10"
  },
  "meta": {
   "stale": false,
   "notice": "Normalised (modified) from the …",
   "dataset": "preflight",
   "datasets": {
    "eol": {},
    "kev": {},
    "osv": {},
    "registry": {}
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stack-facts-preflight-package-security-check-3d435aa9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from g5joilnmeep4ntz3nwezxt5dmu.srv.us](https://www.zero.xyz/host/g5joilnmeep4ntz3nwezxt5dmu.srv.us/llms.txt)