Unnamed service
GET datastand.dev/api/data/npm-vuln-digest
Why an agent can trust this route.
Sonar evidence is advisory. Paid delivery is shown as verified only when paid probes are available; otherwise route estimates use the unpaid handshake as a clearly labeled proxy.
Observed outcomes
The newest npm security advisories as machine-readable JSON: severity, CVSS score and vector, CWEs, affected packages, vulnerable ranges and first patched version. Merged from two GitHub Advisory Database orderings, most recently published and most recently revised, so a newly assigned CVSS or a widened vulnerable range reaches you even when the advisory is months old. Add ?since=<ISO-8601> for only what changed; an empty delta is refused free, so polling costs nothing until there is news.
Resource: datastand.dev/api/data/npm-vuln-digest
Network: eip155:8453 · Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 · Pay to: 0x470a1b647d668d3820add26d70c8371557ff4c6b
Payment methods: — · Last validation: 2026-09-14 08:35:17.085+00
{
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET",
"HEAD"
],
"type": "string"
},
"queryParams": {
"type": "object",
"properties": {
"since": {
"type": "string",
"description": "ISO-8601 date or timestamp. Returns only advisories whose updated_at is newer than this — normally the generated_at of your previous fetch. An empty delta is refused with a 400 and settles no payment, and so is a since earlier than the build's coverage.delta_complete_since, which would return a silently incomplete delta."
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
},
"paymentRequirements": [
{
"raw": {
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x470a1b647d668d3820add26d70c8371557ff4c6b",
"amount": "20000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 120
},
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x470a1b647d668d3820add26d70c8371557ff4c6b",
"scheme": "exact",
"network": "eip155:8453",
"amountAtomic": "20000"
}
]
}Source catalog records are retained separately from live endpoint observations. Sonar score, uptime, and latency are advisory metrics. CDP indexing is not inferred from validation.