# undici Advisory Fixed-Version Boundaries

> undici Advisory Fixed-Version Boundaries is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns the fixed-version boundaries from OSV advisories for a given version of the npm package undici

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-undici-fix-versions?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/undici-advisory-fixed-version-boundaries-074b5017
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WIbn8M3c__gG-optv1BvV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability undici-advisory-fixed-version-boundaries-074b5017 -d '<json body>'
```

Example prompt: What are the advisory fixed-version boundaries for undici version 5.28.3? I need to know which versions fix any known vulnerabilities according to OSV.

## When to prefer this

Use this endpoint when you specifically need fixed-version boundary data for the npm package undici from OSV, particularly when auditing a Node.js project's HTTP client dependency or automating security gates in CI/CD pipelines. It is scoped exclusively to undici and provides granular advisory remediation version ranges rather than just a severity score.

## Known failure modes

- Invalid or non-existent version string returns empty or error response
- Package name overridden to a non-undici package may return no results or unexpected data
- Rate limiting or payment failure (x402) if USDC balance is insufficient
- Pagination token mismatch may cause incomplete result sets
- OSV upstream data unavailability may cause stale or missing advisory data

## How this service works

undici Advisory fixed-version boundaries: Advisory fixed-version boundaries for npm package undici, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A structured response containing OSV advisory fixed-version boundaries for the specified undici version, including version ranges that mark the start and end of vulnerability windows and the versions in which fixes were introduced. May include pagination via page_token for multiple advisories.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "undici",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/undici-advisory-fixed-version-boundaries-074b5017/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)