Usage notes

Code snippets

curl "https://api.oanor.com/depsdev-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/depsdev-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/depsdev-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/depsdev-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "note": "Software supply-chain & dependency intelligence across six ecosystems (system = npm, pypi, maven, cargo, go, nuget). /v1/package?system=npm&name=express = a package's published versions and default version; /v1/version?system=npm&name=express&version=4.18.2 = a version's declared licenses, the keys of any known security advisories, useful links (source repo, homepage, issues) and related projects; /v1/dependencies?system=npm&name=express&version=4.18.2 = the fully RESOLVED transitive dependency graph for that exact version — total dependency count, the direct dependencies and every transitive node (name@version, direct/indirect) — the answer to 'what does installing this actually pull in?'; /v1/project?id=github.com/expressjs/express = a source project's OpenSSF Scorecard (overall score plus per-check scores for things like Maintained, Code-Review, Dangerous-Workflow, Vulnerabilities) together with stars, forks, open issues, license and homepage. For Go packages and Maven artifacts the name is the full module path / group:artifact (URL-encoded automatically). Ideal for dependency auditing, supply-chain risk assessment, SBOM enrichment and license compliance. Data from deps.dev (Google). For a single ecosystem's package metadata see the npm/PyPI/Cargo APIs; for the raw vulnerability database the OSV API.",
        "source": "deps.dev — Google Open Source Insights API (api.deps.dev)",
        "endpoints": [
            "/v1/package",
            "/v1/version",
            "/v1/dependencies",
            "/v1/project",
            "/v1/meta"
        ]
    },
    "meta": {
        "timestamp": "2026-06-01T08:13:18.167Z",
        "request_id": "dcf52b10-f295-4c20-beec-a1e5a2cbc724"
    },
    "status": "ok",
    "message": "Meta retrieved",
    "success": true
}