# SYNTHORA deps.dev Resolved Dependency Graph

> SYNTHORA deps.dev Resolved Dependency Graph is a paid API for AI agents from depsdev-dependency-graph.hergertsynthora.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Returns the fully resolved transitive dependency tree (direct and indirect dependencies with pinned versions and relation types) for a given package version using deps.dev data.

## Facts

- Endpoint: POST https://depsdev-dependency-graph.hergertsynthora.com/service
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthora-deps-dev-resolved-dependency-graph-4941311d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DG-1DXsiRfkYlLHN1Pxtf

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthora-deps-dev-resolved-dependency-graph-4941311d -d '<json body>'
```

Example prompt: Can you pull the full resolved dependency tree for express version 4.18.2 on npm — I want to see all the transitive packages it pulls in and the total dependency count?

## When to prefer this

Choose this endpoint when you need the complete transitive (not just direct) dependency graph for a specific package version across major ecosystems (npm, PyPI, Maven, Go, etc.), especially for supply-chain analysis, SBOM generation, or dependency confusion detection. Prefer it over parsing lock files when you need a clean, structured, keyless API response without authentication overhead.

## Known failure modes

- Unknown or misspelled package name returns empty or error result
- Unsupported package ecosystem (system) causes lookup failure
- Package version not indexed by deps.dev returns empty dependency list
- Network or upstream deps.dev API unavailability causes timeout or error
- Malformed input (missing required fields) returns validation error

## How this service works

Returns the fully resolved transitive dependency tree (direct + indirect nodes with pinned versions and relation type) for a package version, from keyless deps.dev. Powers autonomous agents doing supply-chain blast-radius analysis, dependency-confusion detection, and agent-to-agent SBOM generation. Ranking surface for dependency count and tree depth. First 3 calls FREE per wallet — send header X-WALLET: 0x<addr>. No charge on upstream failure.

## Output

A JSON object containing the package system, name, version, total dependency count, and an array of all resolved dependencies (direct and transitive) with pinned versions and relation types, plus provenance metadata pointing to the originating deps.dev API URL.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "system": {
   "type": "string",
   "description": "system"
  },
  "package": {
   "type": "string",
   "description": "package"
  },
  "version": {
   "type": "string",
   "description": "version"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "depsdev-dependency-graph",
  "result": {
   "system": "npm",
   "package": "express",
   "version": "4.18.2",
   "depCount": 0,
   "dependencies": []
  },
  "provenance": {
   "url": "https://api.deps.dev/v3/systems/npm/packages/express/versions/4.18.2:dependencies",
   "source": "deps.dev Resolved Dependency Graph"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthora-deps-dev-resolved-dependency-graph-4941311d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from depsdev-dependency-graph.hergertsynthora.com](https://www.zero.xyz/host/depsdev-dependency-graph.hergertsynthora.com/llms.txt)