# Stack Facts: Stack Watch – Package Security & Vulnerability Monitor

> Stack Facts: Stack Watch – Package Security & Vulnerability Monitor is a paid API for AI agents from g5joilnmeep4ntz3nwezxt5dmu.srv.us, paid per call via x402, $0.012/call, status unknown (last checked 2026-10-13).

Checks software packages, CVEs, and LLM prices for malware, known vulnerabilities (OSV), actively exploited CVEs (CISA KEV), and end-of-life status, returning cryptographically signed answers with a watch token for rechecks.

## Facts

- Endpoint: POST https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/stack/watch?utm_source=zero.xyz
- Price: $0.012/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stack-facts-stack-watch-package-security-vulnerability-monitor-f9b1a7ce
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DHMYRwewoLgaAOUWSWeQ9

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stack-facts-stack-watch-package-security-vulnerability-monitor-f9b1a7ce -d '<json body>'
```

Example prompt: Before I install express@4.18.2 and lodash@4.17.21, check if either package has known vulnerabilities, is end-of-life, or has CVEs that CISA flagged as actively exploited — and warn me if anything expires within 90 days.

## When to prefer this

Choose this endpoint when you need cryptographically signed, authoritative vulnerability data combining OSV, CISA KEV, and end-of-life databases in a single call with no API key or account required — ideal for AI agents that need to pay per call in USDC, require signed audit-trail answers, or want to set up stateful monitoring via watch tokens. Prefer over raw CISA or OSV APIs when you need a unified, signed, pay-as-you-go response.

## Known failure modes

- Invalid CVE format returns schema validation error
- Unknown or misspelled package name yields unknown_count increment with no match
- Expired or invalid watch token requires a fresh call without a token
- Payment not received results in HTTP 402 response requiring USDC payment
- Stale dataset indicated via meta.stale=true flag, results may be outdated

## How this service works

Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.

## Output

Returns a JSON object with a 'check' section summarizing EOL status, KEV matches, and CVE counts per item, plus a 'watch' section containing a signed token for future rechecks, a suggested_recheck_at timestamp, and per-dataset metadata including cryptographic signatures, SHA256 hashes, source URLs, and data freshness indicators.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cves": {
   "type": "array",
   "items": {
    "type": "string",
    "pattern": "^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$",
    "maxLength": 32
   },
   "maxItems": 100,
   "minItems": 0
  },
  "full": {
   "type": "boolean"
  },
  "items": {
   "type": "array",
   "items": {
    "anyOf": [
     {
      "type": "string",
      "pattern": "^[^@]+@.+$",
      "maxLength": 401,
      "minLength": 3
     },
     {
      "type": "object",
      "required": [
       "product",
       "version"
      ],
      "properties": {
       "product": {
        "type": "string",
        "maxLength": 200,
        "minLength": 1
       },
       "version": {
        "type": "string",
        "maxLength": 200,
        "minLength": 1
       }
      },
      "additionalProperties": false
     }
    ]
   },
   "maxItems": 50,
   "minItems": 0
  },
  "token": {
   "type": "string",
   "pattern": "^sfw1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$",
   "maxLength": 48000
  },
  "packages": {
   "type": "array",
   "items": {
    "type": "string",
    "pattern": "^pkg:",
    "maxLength": 512,
    "minLength": 7
   },
   "maxItems": 50,
   "minItems": 0
  },
  "warn_days": {
   "type": "integer",
   "maximum": 365,
   "minimum": 0
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "check": {
    "eol": {},
    "kev": {},
    "summary": {}
   },
   "watch": {
    "kind": "start",
    "next": "POST /v1/stack/watch {\"token\":\"…",
    "stack": {},
    "token": "sfw1.eyJleHAiOiIyMDI3LTA0LTA3VD…",
    "warn_days": 90,
    "checked_at": "2026-10-09T07:00:00.000Z",
    "expires_at": "2027-04-07T07:00:00.000Z",
    "suggested_recheck_at": "2026-10-09T10:00:00.000Z"
   }
  },
  "meta": {
   "stale": false,
   "notice": "Normalised (modified) from the …",
   "dataset": "stack",
   "datasets": {
    "eol": {},
    "kev": {}
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stack-facts-stack-watch-package-security-vulnerability-monitor-f9b1a7ce/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from g5joilnmeep4ntz3nwezxt5dmu.srv.us](https://www.zero.xyz/host/g5joilnmeep4ntz3nwezxt5dmu.srv.us/llms.txt)