# Vite NPM Package Known Vulnerability List

> Vite NPM Package Known Vulnerability List is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-30).

Returns known security vulnerabilities and advisories for a specific version of the npm package 'vite', sourced from the OSV (Open Source Vulnerabilities) database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-vite-advisories?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/vite-npm-package-known-vulnerability-list-90028963
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_kp6pV13vN-uRIXZ0HY5Ly

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability vite-npm-package-known-vulnerability-list-90028963 -d '<json body>'
```

Example prompt: Can you check the OSV vulnerability database for any known security advisories affecting vite version 5.2.8?

## When to prefer this

Use this endpoint when you specifically need vulnerability data scoped to the vite npm package only, particularly when integrating OSV advisory data into automated CI/CD pipelines, dependency audits, or security dashboards. Prefer this over general-purpose vulnerability scanners when you want per-version OSV-sourced data for vite without broader ecosystem noise.

## Known failure modes

- Unknown or invalid version string returns empty advisory list or error
- Pagination required for packages with many advisories — missing page_token may yield incomplete results
- Network or upstream OSV data source unavailability may cause timeouts
- Very new or pre-release versions may not yet have OSV records indexed

## How this service works

vite Known vulnerability list: Known vulnerability list for npm package vite, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A list of known vulnerability and advisory records from the OSV database for the specified vite package version, including advisory IDs, CVE references, affected version ranges, severity information, and descriptions of each vulnerability.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "vite",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/vite-npm-package-known-vulnerability-list-90028963/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)