# webpack OSV Vulnerability Disclosure Timeline

> webpack OSV Vulnerability Disclosure Timeline is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns the vulnerability disclosure timeline for a specific version of the webpack npm package, sourced from the OSV (Open Source Vulnerabilities) database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-webpack-timeline?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/webpack-osv-vulnerability-disclosure-timeline-a575bcbd
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_P2soXXDbKmdv9ny6tu7cy

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability webpack-osv-vulnerability-disclosure-timeline-a575bcbd -d '<json body>'
```

Example prompt: Can you pull up the vulnerability disclosure timeline for webpack version 5.88.0 from the OSV database so I can see if there are any known security issues?

## When to prefer this

Use this endpoint when you need structured, paginated vulnerability disclosure data specifically for the webpack npm package from the authoritative OSV database. It is preferable to generic npm audit tools when you want timeline-oriented disclosure history tied to an exact version, or when integrating OSV data into automated security workflows at $0.01 per call without managing OSV API credentials.

## Known failure modes

- Unknown or malformed version string returns empty results or an error
- Package field must be 'webpack' — other npm packages are not supported by this endpoint
- page_token invalid or expired causes pagination failure
- Network or upstream OSV API unavailability returns a service error
- Very new versions may not yet be indexed in OSV, returning empty results

## How this service works

webpack Vulnerability disclosure timeline: Vulnerability disclosure timeline for npm package webpack, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A paginated list of vulnerability disclosure events for the specified webpack version, including OSV identifiers, affected version ranges, disclosure timestamps, severity ratings, and links to advisories. The response reflects only the named webpack package, not transitive dependencies.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "webpack",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/webpack-osv-vulnerability-disclosure-timeline-a575bcbd/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)
