Use when an npm or PyPI package is about to be installed, especially a name an LLM suggested. Returns ok_to_install, caution, dont_install or does_not_exist with reasons: malicious-package reports, known vulnerabilities for the version with the fixed version, deprecated or yanked, age, install scripts, downloads and typosquat look-alikes. From OSV.dev, deps.dev, npm and PyPI. ecosystem=pypi for Python. Errors: 400 bad_input, 502 registry unreachable. Failed calls are not charged.

Payment Options