2 Services from supplyguard.marvin-odigo.workers.dev

Returns a 0-100 install-risk score for an npm or PyPI package by fusing vulnerability data, exploit probability, OpenSSF Scorecard, download adoption, and typosquat detection — including hallucinated package name detection.

Returns pre-install risk scores (0–100) and verdicts for up to 20 npm or PyPI packages, fusing vulnerability, exploit, scorecard, and typosquat signals to block unsafe or hallucinated package installs.