{"openapi":"3.1.0","info":{"title":"deps.dev API","version":"1.0.0","description":"Software supply-chain and dependency intelligence as an API, powered by deps.dev — Google's Open Source Insights service. Across six package ecosystems (npm, PyPI, Maven, Cargo, Go and NuGet) it answers the questions a registry cannot: what does installing this package actually pull in, and how healthy is the project behind it. List a package's published versions and its default version; read a specific version's declared licenses, the keys of any known security advisories, useful links (source repository, homepage, issue tracker) and related projects; resolve a version's complete TRANSITIVE dependency graph — the total dependency count, the direct dependencies and every transitive node with its exact resolved version and whether it is a direct or indirect dependency; and look up a source project's OpenSSF Scorecard — the overall security score plus per-check results for Maintained, Code-Review, Branch-Protection, Dangerous-Workflow, Vulnerabilities and more — alongside its stars, forks, open issues, license and homepage. For Go modules and Maven artifacts the package name is the full module path or group:artifact (URL-encoded automatically). Ideal for dependency auditing, software-bill-of-materials (SBOM) enrichment, supply-chain risk assessment and license-compliance tooling. Data from deps.dev (Google, CC-BY).","contact":{"name":"PremiumApi","url":"https://www.oanor.com/by/premiumapi"}},"servers":[{"url":"https://api.oanor.com/depsdev-api","description":"oanor gateway"}],"tags":[{"name":"Packages"},{"name":"Supply chain"},{"name":"Meta"}],"components":{"securitySchemes":{"oanorKey":{"type":"apiKey","in":"header","name":"x-oanor-key","description":"Get your key at https://www.oanor.com/developer/keys"}}},"security":[{"oanorKey":[]}],"paths":{"/v1/package":{"get":{"operationId":"get_v1_package","tags":["Packages"],"summary":"A package's versions","description":"","parameters":[{"name":"system","in":"query","required":true,"description":"npm|pypi|maven|cargo|go|nuget","schema":{"type":"string"},"example":"npm"},{"name":"name","in":"query","required":true,"description":"Package name, e.g. express","schema":{"type":"string"},"example":"express"}],"security":[{"oanorKey":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"example":{"data":{"name":"express","system":"npm","versions":[{"version":"0.14.0","is_default":false,"published_at":"2010-12-29T19:38:25Z"},{"version":"0.14.1","is_default":false,"published_at":"2010-12-29T19:38:25Z"},{"version":"1.0.0","is_default":false,"published_at":"2010-12-29T19:38:25Z"},{"version":"1.0.0-beta","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"1.0.0-beta2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"1.0.0-rc","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"1.0.0-rc2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"1.0.0-rc3","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"1.0.0-rc4","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"1.0.1","is_default":false,"published_at":"2010-12-29T19:38:25Z"},{"version":"1.0.2","is_default":false,"published_at":"2011-01-11T02:09:30Z"},{"version":"1.0.3","is_default":false,"published_at":"2011-01-13T22:09:07Z"},{"version":"1.0.4","is_default":false,"published_at":"2011-02-05T19:13:15Z"},{"version":"1.0.5","is_default":false,"published_at":"2011-02-05T19:16:30Z"},{"version":"1.0.6","is_default":false,"published_at":"2011-02-07T21:45:32Z"},{"version":"1.0.7","is_default":false,"published_at":"2011-02-07T22:26:51Z"},{"version":"1.0.8","is_default":false,"published_at":"2011-03-02T02:58:14Z"},{"version":"2.0.0","is_default":false,"published_at":"2011-03-18T01:06:40Z"},{"version":"2.0.0-beta","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"2.0.0-beta2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"2.0.0-beta3","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"2.0.0-rc","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"2.0.0-rc2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"2.0.0-rc3","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"2.1.0","is_default":false,"published_at":"2011-03-24T20:47:46Z"},{"version":"2.1.1","is_default":false,"published_at":"2011-03-29T17:40:33Z"},{"version":"2.2.0","is_default":false,"published_at":"2011-03-30T18:40:56Z"},{"version":"2.2.1","is_default":false,"published_at":"2011-04-04T19:23:50Z"},{"version":"2.2.2","is_default":false,"published_at":"2011-04-12T09:44:57Z"},{"version":"2.3.0","is_default":false,"published_at":"2011-04-25T16:50:01Z"},{"version":"2.3.1","is_default":false,"published_at":"2011-04-26T22:26:27Z"},{"version":"2.3.10","is_default":false,"published_at":"2011-05-27T16:20:13Z"},{"version":"2.3.11","is_default":false,"published_at":"2011-06-04T17:51:29Z"},{"version":"2.3.12","is_default":false,"published_at":"2011-06-22T20:56:29Z"},{"version":"2.3.2","is_default":false,"published_at":"2011-04-27T16:13:33Z"},{"version":"2.3.3","is_default":false,"published_at":"2011-05-03T18:31:39Z"},{"version":"2.3.4","is_default":false,"published_at":"2011-05-08T17:54:04Z"},{"version":"2.3.5","is_default":false,"published_at":"2011-05-20T02:07:37Z"},{"version":"2.3.6","is_default":false,"published_at":"2011-05-20T16:42:09Z"},{"version":"2.3.7","is_default":false,"published_at":"2011-05-23T22:54:25Z"},{"version":"2.3.8","is_default":false,"published_at":"2011-05-25T04:53:16Z"},{"version":"2.3.9","is_default":false,"published_at":"2011-05-25T17:18:34Z"},{"version":"2.4.0","is_default":false,"published_at":"2011-06-28T16:41:30Z"},{"version":"2.4.1","is_default":false,"published_at":"2011-07-06T16:57:15Z"},{"version":"2.4.2","is_default":false,"published_at":"2011-07-07T03:15:52Z"},{"version":"2.4.3","is_default":false,"published_at":"2011-07-14T19:58:45Z"},{"version":"2.4.4","is_default":false,"published_at":"2011-08-05T11:30:40Z"},{"version":"2.4.5","is_default":false,"published_at":"2011-08-19T17:13:10Z"},{"version":"2.4.6","is_default":false,"published_at":"2011-08-22T17:20:21Z"},{"version":"2.4.7","is_default":false,"published_at":"2011-10-05T22:42:01Z"},{"version":"2.5.0","is_default":false,"published_at":"2011-10-24T23:01:02Z"},{"version":"2.5.1","is_default":false,"published_at":"2011-11-18T16:04:40Z"},{"version":"2.5.10","is_default":false,"published_at":"2012-06-15T22:51:26Z"},{"version":"2.5.11","is_default":false,"published_at":"2012-07-04T18:24:06Z"},{"version":"2.5.2","is_default":false,"published_at":"2011-12-10T19:09:42Z"},{"version":"2.5.3","is_default":false,"published_at":"2011-12-30T23:31:24Z"},{"version":"2.5.4","is_default":false,"published_at":"2012-01-02T16:36:02Z"},{"version":"2.5.5","is_default":false,"published_at":"2012-01-08T20:31:55Z"},{"version":"2.5.6","is_default":false,"published_at":"2012-01-13T23:40:26Z"},{"version":"2.5.7","is_default":false,"published_at":"2012-02-06T18:06:55Z"},{"version":"2.5.8","is_default":false,"published_at":"2012-02-08T20:08:32Z"},{"version":"2.5.9","is_default":false,"published_at":"2012-04-03T02:21:28Z"},{"version":"3.0.0","is_default":false,"published_at":"2012-10-23T22:30:10Z"},{"version":"3.0.0-alpha1","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-alpha2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-alpha3","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-alpha4","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-alpha5","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-beta1","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-beta2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-beta3","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-beta4","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-beta6","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-beta7","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-rc1","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-rc2","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-rc3","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-rc4","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.0-rc5","is_default":false,"published_at":"2013-08-28T17:04:36Z"},{"version":"3.0.1","is_default":false,"published_at":"2012-11-02T00:27:52Z"},{"version":"3.0.2","is_default":false,"published_at":"2012-11-08T17:15:53Z"},{"version":"3.0.3","is_default":false,"published_at":"2012-11-13T17:13:59Z"},{"version":"3.0.4","is_default":false,"published_at":"2012-12-06T01:10:32Z"},{"version":"3.0.5","is_default":false,"published_at":"2012-12-19T21:45:36Z"},{"version":"3.0.6","is_default":false,"published_at":"2013-01-05T02:51:07Z"},{"version":"3.1.0","is_default":false,"published_at":"2013-01-26T04:27:35Z"},{"version":"3.1.1","is_default":false,"published_at":"2013-04-01T18:26:15Z"},{"version":"3.1.2","is_default":false,"published_at":"2013-04-12T19:14:26Z"},{"version":"3.10.0","is_default":false,"published_at":"2014-06-03T04:42:47Z"},{"version":"3.10.1","is_default":false,"published_at":"2014-06-03T21:19:53Z"},{"version":"3.10.2","is_default":false,"published_at":"2014-06-04T01:36:31Z"},{"version":"3.10.3","is_default":false,"published_at":"2014-06-06T03:41:14Z"},{"version":"3.10.4","is_default":false,"published_at":"2014-06-09T22:56:08Z"},{"version":"3.10.5","is_default":false,"published_at":"2014-06-12T04:36:07Z"},{"version":"3.11.0","is_default":false,"published_at":"2014-06-20T03:43:59Z"},{"version":"3.12.0","is_default":false,"published_at":"2014-06-22T02:35:24Z"},{"version":"3.12.1","is_default":false,"published_at":"2014-06-27T00:19:58Z"},{"version":"3.13.0","is_default":false,"published_at":"2014-07-04T05:08:17Z"},{"version":"3.14.0","is_default":false,"published_at":"2014-07-11T17:31:04Z"},{"version":"3.15.0","is_default":false,"published_at":"2014-07-23T05:08:16Z"},{"version":"3.15.1","is_default":false,"published_at":"2014-07-26T21:50:06Z"},{"version":"3.15.2","is_default":false,"published_at":"2014-07-27T19:55:02Z"},{"version":"3.15.3","is_default":false,"published_at":"2014-08-04T22:25:19Z"},{"version":"3.16.0","is_default":false,"published_at":"2014-08-06T05:39:52Z"},{"version":"3.16.1","is_default":false,"published_at":"2014-08-06T22:06:59Z"},{"version":"3.16.10","is_default":false,"published_at":"2014-09-05T06:16:49Z"},{"version":"3.16.2","is_default":false,"published_at":"2014-08-07T15:58:53Z"},{"version":"3.16.3","is_default":false,"published_at":"2014-08-08T02:31:12Z"},{"version":"3.16.4","is_default":false,"published_at":"2014-08-11T02:22:05Z"},{"version":"3.16.5","is_default":false,"published_at":"2014-08-12T02:29:20Z"},{"version":"3.16.6","is_default":false,"published_at":"2014-08-15T03:52:36Z"},{"version":"3.16.7","is_default":false,"published_at":"2014-08-19T02:45:51Z"},{"version":"3.16.8","is_default":false,"published_at":"2014-08-28T01:17:12Z"},{"version":"3.16.9","is_default":false,"published_at":"2014-08-30T05:23:37Z"},{"version":"3.17.0","is_default":false,"published_at":"2014-09-09T03:22:41Z"},{"version":"3.17.1","is_default":false,"published_at":"2014-09-09T03:48:36Z"},{"version":"3.17.2","is_default":false,"published_at":"2014-09-16T07:18:56Z"},{"version":"3.17.3","is_default":false,"published_at":"2014-09-18T17:40:22Z"},{"version":"3.17.4","is_default":false,"published_at":"2014-09-20T06:02:17Z"},{"version":"3.17.5","is_default":false,"published_at":"2014-09-24T23:41:41Z"},{"version":"3.17.6","is_default":false,"published_at":"2014-10-03T04:05:10Z"},{"version":"3.17.7","is_default":false,"published_at":"2014-10-08T21:22:35Z"},{"version":"3.17.8","is_default":false,"published_at":"2014-10-16T04:36:53Z"},{"version":"3.18.0","is_default":false,"published_at":"2014-10-18T05:10:21Z"},{"version":"3.18.1","is_default":false,"published_at":"2014-10-23T05:30:25Z"},{"version":"3.18.2","is_default":false,"published_at":"2014-10-29T05:14:04Z"},{"version":"3.18.3","is_default":false,"published_at":"2014-11-09T23:38:00Z"},{"version":"3.18.4","is_default":false,"published_at":"2014-11-23T20:52:49Z"},{"version":"3.18.5","is_default":false,"published_at":"2014-12-12T04:24:32Z"},{"version":"3.18.6","is_default":false,"published_at":"2014-12-13T02:45:59Z"},{"version":"3.19.0","is_default":false,"published_at":"2015-01-09T06:36:21Z"},{"version":"3.19.1","is_default":false,"published_at":"2015-01-21T08:23:41Z"},{"version":"3.19.2","is_default":false,"published_at":"2015-02-01T20:24:05Z"},{"version":"3.2.0","is_default":false,"published_at":"2013-04-15T19:35:06Z"},{"version":"3.2.1","is_default":false,"published_at":"2013-04-30T02:17:29Z"},{"version":"3.2.2","is_default":false,"published_at":"2013-05-03T19:55:21Z"},{"version":"3.2.3","is_default":false,"published_at":"2013-05-07T14:55:36Z"},{"version":"3.2.4","is_default":false,"published_at":"2013-05-09T16:18:31Z"},{"version":"3.2.5","is_default":false,"published_at":"2013-05-22T04:02:26Z"},{"version":"3.2.6","is_default":false,"published_at":"2013-06-03T00:15:56Z"},{"version":"3.20.0","is_default":false,"published_at":"2015-02-19T02:53:28Z"},{"version":"3.20.1","is_default":false,"published_at":"2015-03-01T04:23:20Z"},{"version":"3.20.2","is_default":false,"published_at":"2015-03-17T05:06:28Z"},{"version":"3.20.3","is_default":false,"published_at":"2015-05-18T04:06:45Z"},{"version":"3.21.0","is_default":false,"published_at":"2015-06-19T01:42:28Z"},{"version":"3.21.1","is_default":false,"published_at":"2015-07-06T04:55:30Z"},{"version":"3.21.2","is_default":false,"published_at":"2015-07-31T20:17:34Z"},{"version":"3.3.0","is_default":false,"published_at":"2013-06-26T17:07:53Z"},{"version":"3.3.1","is_default":false,"published_at":"2013-06-27T15:32:58Z"},{"version":"3.3.2","is_default":false,"published_at":"2013-07-03T18:25:57Z"},{"version":"3.3.3","is_default":false,"published_at":"2013-07-04T20:40:14Z"},{"version":"3.3.4","is_default":false,"published_at":"2013-07-08T21:42:52Z"},{"version":"3.3.5","is_default":false,"published_at":"2013-08-10T21:51:21Z"},{"version":"3.3.6","is_default":false,"published_at":"2013-08-27T20:49:22Z"},{"version":"3.3.7","is_default":false,"published_at":"2013-08-28T17:04:42Z"},{"version":"3.3.8","is_default":false,"published_at":"2013-09-02T15:01:16Z"},{"version":"3.4.0","is_default":false,"published_at":"2013-09-07T19:25:10Z"},{"version":"3.4.1","is_default":false,"published_at":"2013-10-16T01:34:32Z"},{"version":"3.4.2","is_default":false,"published_at":"2013-10-19T02:04:44Z"},{"version":"3.4.3","is_default":false,"published_at":"2013-10-23T18:19:57Z"},{"version":"3.4.4","is_default":false,"published_at":"2013-10-29T17:34:18Z"},{"version":"3.4.5","is_default":false,"published_at":"2013-11-27T23:54:53Z"},{"version":"3.4.6","is_default":false,"published_at":"2013-12-01T20:21:22Z"},{"version":"3.4.7","is_default":false,"published_at":"2013-12-11T07:57:53Z"},{"version":"3.4.8","is_default":false,"published_at":"2014-01-14T04:51:15Z"},{"version":"3.5.0","is_default":false,"published_at":"2014-03-06T22:58:36Z"},{"version":"3.5.1","is_default":false,"published_at":"2014-03-25T20:59:05Z"},{"version":"3.5.2","is_default":false,"published_at":"2014-04-24T20:40:38Z"},{"version":"3.5.3","is_default":false,"published_at":"2014-05-08T17:53:16Z"},{"version":"3.6.0","is_default":false,"published_at":"2014-05-09T21:07:22Z"},{"version":"3.7.0","is_default":false,"published_at":"2014-05-18T14:42:22Z"},{"version":"3.8.0","is_default":false,"published_at":"2014-05-21T06:08:40Z"},{"version":"3.8.1","is_default":false,"published_at":"2014-05-28T03:43:39Z"},{"version":"3.9.0","is_default":false,"published_at":"2014-05-31T01:38:23Z"},{"version":"4.0.0","is_default":false,"published_at":"2014-04-09T20:39:26Z"},{"version":"4.0.0-rc1","is_default":false,"published_at":"2014-03-02T16:19:53Z"},{"version":"4.0.0-rc2","is_default":false,"published_at":"2014-03-05T06:34:13Z"},{"version":"4.0.0-rc3","is_default":false,"published_at":"2014-03-12T01:39:53Z"},{"version":"4.0.0-rc4","is_default":false,"published_at":"2014-03-25T02:54:51Z"},{"version":"4.1.0","is_default":false,"published_at":"2014-04-24T22:17:52Z"},{"version":"4.1.1","is_default":false,"published_at":"2014-04-27T23:50:27Z"},{"version":"4.1.2","is_default":false,"published_at":"2014-05-08T18:44:48Z"},{"version":"4.10.0","is_default":false,"published_at":"2014-10-24T02:36:30Z"},{"version":"4.10.1","is_default":false,"published_at":"2014-10-29T05:21:08Z"},{"version":"4.10.2","is_default":false,"published_at":"2014-11-10T00:10:27Z"},{"version":"4.10.3","is_default":false,"published_at":"2014-11-24T03:12:32Z"},{"version":"4.10.4","is_default":false,"published_at":"2014-11-25T05:19:30Z"},{"version":"4.10.5","is_default":false,"published_at":"2014-12-11T05:08:02Z"},{"version":"4.10.6","is_default":false,"published_at":"2014-12-13T04:17:13Z"},{"version":"4.10.7","is_default":false,"published_at":"2015-01-05T00:40:37Z"},{"version":"4.10.8","is_default":false,"published_at":"2015-01-13T17:48:23Z"},{"version":"4.11.0","is_default":false,"published_at":"2015-01-14T04:21:56Z"},{"version":"4.11.1","is_default":false,"published_at":"2015-01-21T08:34:52Z"},{"version":"4.11.2","is_default":false,"published_at":"2015-02-01T20:45:09Z"},{"version":"4.12.0","is_default":false,"published_at":"2015-02-23T06:58:39Z"},{"version":"4.12.1","is_default":false,"published_at":"2015-03-02T01:13:30Z"},{"version":"4.12.2","is_default":false,"published_at":"2015-03-03T05:46:29Z"},{"version":"4.12.3","is_default":false,"published_at":"2015-03-17T22:04:53Z"},{"version":"4.12.4","is_default":false,"published_at":"2015-05-18T04:41:14Z"},{"version":"4.13.0","is_default":false,"published_at":"2015-06-21T06:50:18Z"}],"version_count":288,"default_version":"5.2.1"},"meta":{"timestamp":"2026-06-01T08:13:17.824Z","request_id":"77d2c627-cc31-4cb1-a218-b20d10181c5a"},"status":"ok","message":"Package retrieved","success":true}}}},"401":{"description":"Missing or invalid x-oanor-key header"},"402":{"description":"Active subscription required"},"429":{"description":"Rate-limit or monthly quota reached"},"502":{"description":"Upstream did not respond"}}}},"/v1/version":{"get":{"operationId":"get_v1_version","tags":["Packages"],"summary":"A version's licenses & advisories","description":"","parameters":[{"name":"system","in":"query","required":true,"description":"Ecosystem","schema":{"type":"string"},"example":"npm"},{"name":"name","in":"query","required":true,"description":"Package name","schema":{"type":"string"},"example":"express"},{"name":"version","in":"query","required":true,"description":"Version, e.g. 4.18.2","schema":{"type":"string"},"example":"4.18.2"}],"security":[{"oanorKey":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"example":{"data":{"version":{"name":"express","links":[{"url":"http://expressjs.com/","label":"HOMEPAGE"},{"url":"https://github.com/expressjs/express/issues","label":"ISSUE_TRACKER"},{"url":"https://registry.npmjs.org/express/4.18.2","label":"ORIGIN"},{"url":"git+https://github.com/expressjs/express.git","label":"SOURCE_REPO"}],"system":"npm","version":"4.18.2","licenses":["MIT"],"advisories":["GHSA-qw6h-vgh9-j6wx","GHSA-rv95-896h-c2vc"],"is_default":false,"published_at":"2022-10-08T20:14:32Z","advisory_count":2,"related_projects":[{"id":"github.com/expressjs/express","relation":"ISSUE_TRACKER"},{"id":"github.com/expressjs/express","relation":"SOURCE_REPO"}]}},"meta":{"timestamp":"2026-06-01T08:13:17.935Z","request_id":"2d59e6a6-879c-4c14-877c-924a5a2ac75b"},"status":"ok","message":"Version retrieved","success":true}}}},"401":{"description":"Missing or invalid x-oanor-key header"},"402":{"description":"Active subscription required"},"429":{"description":"Rate-limit or monthly quota reached"},"502":{"description":"Upstream did not respond"}}}},"/v1/dependencies":{"get":{"operationId":"get_v1_dependencies","tags":["Supply chain"],"summary":"Resolved transitive dependency graph","description":"","parameters":[{"name":"system","in":"query","required":true,"description":"Ecosystem","schema":{"type":"string"},"example":"npm"},{"name":"name","in":"query","required":true,"description":"Package name","schema":{"type":"string"},"example":"express"},{"name":"version","in":"query","required":true,"description":"Version","schema":{"type":"string"},"example":"4.18.2"},{"name":"limit","in":"query","required":false,"description":"Max nodes (1-1000)","schema":{"type":"string"}}],"security":[{"oanorKey":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"example":{"data":{"name":"express","direct":["accepts@1.3.8","array-flatten@1.1.1","body-parser@1.20.1","content-disposition@0.5.4","content-type@1.0.5","cookie@0.5.0","cookie-signature@1.0.6","debug@2.6.9","depd@2.0.0","encodeurl@1.0.2","escape-html@1.0.3","etag@1.8.1","finalhandler@1.2.0","fresh@0.5.2","http-errors@2.0.0","merge-descriptors@1.0.1","methods@1.1.2","on-finished@2.4.1","parseurl@1.3.3","path-to-regexp@0.1.7","proxy-addr@2.0.7","qs@6.11.0","range-parser@1.2.1","safe-buffer@5.2.1","send@0.18.0","serve-static@1.15.0","setprototypeof@1.2.0","statuses@2.0.1","type-is@1.6.18","utils-merge@1.0.1","vary@1.1.2"],"system":"npm","version":"4.18.2","dependencies":[{"name":"accepts","errors":[],"version":"1.3.8","relation":"direct"},{"name":"array-flatten","errors":[],"version":"1.1.1","relation":"direct"},{"name":"async-function","errors":[],"version":"1.0.0","relation":"indirect"},{"name":"async-generator-function","errors":[],"version":"1.0.0","relation":"indirect"},{"name":"body-parser","errors":[],"version":"1.20.1","relation":"direct"},{"name":"bytes","errors":[],"version":"3.1.2","relation":"indirect"},{"name":"call-bind-apply-helpers","errors":[],"version":"1.0.2","relation":"indirect"},{"name":"call-bound","errors":[],"version":"1.0.4","relation":"indirect"},{"name":"content-disposition","errors":[],"version":"0.5.4","relation":"direct"},{"name":"content-type","errors":[],"version":"1.0.5","relation":"direct"},{"name":"cookie","errors":[],"version":"0.5.0","relation":"direct"},{"name":"cookie-signature","errors":[],"version":"1.0.6","relation":"direct"},{"name":"debug","errors":[],"version":"2.6.9","relation":"direct"},{"name":"depd","errors":[],"version":"2.0.0","relation":"direct"},{"name":"destroy","errors":[],"version":"1.2.0","relation":"indirect"},{"name":"dunder-proto","errors":[],"version":"1.0.1","relation":"indirect"},{"name":"ee-first","errors":[],"version":"1.1.1","relation":"indirect"},{"name":"encodeurl","errors":[],"version":"1.0.2","relation":"direct"},{"name":"es-define-property","errors":[],"version":"1.0.1","relation":"indirect"},{"name":"es-errors","errors":[],"version":"1.3.0","relation":"indirect"},{"name":"es-object-atoms","errors":[],"version":"1.1.2","relation":"indirect"},{"name":"escape-html","errors":[],"version":"1.0.3","relation":"direct"},{"name":"etag","errors":[],"version":"1.8.1","relation":"direct"},{"name":"finalhandler","errors":[],"version":"1.2.0","relation":"direct"},{"name":"forwarded","errors":[],"version":"0.2.0","relation":"indirect"},{"name":"fresh","errors":[],"version":"0.5.2","relation":"direct"},{"name":"function-bind","errors":[],"version":"1.1.2","relation":"indirect"},{"name":"generator-function","errors":[],"version":"2.0.1","relation":"indirect"},{"name":"get-intrinsic","errors":[],"version":"1.3.1","relation":"indirect"},{"name":"get-proto","errors":[],"version":"1.0.1","relation":"indirect"},{"name":"gopd","errors":[],"version":"1.2.0","relation":"indirect"},{"name":"has-symbols","errors":[],"version":"1.1.0","relation":"indirect"},{"name":"hasown","errors":[],"version":"2.0.4","relation":"indirect"},{"name":"http-errors","errors":[],"version":"2.0.0","relation":"direct"},{"name":"iconv-lite","errors":[],"version":"0.4.24","relation":"indirect"},{"name":"inherits","errors":[],"version":"2.0.4","relation":"indirect"},{"name":"ipaddr.js","errors":[],"version":"1.9.1","relation":"indirect"},{"name":"math-intrinsics","errors":[],"version":"1.1.0","relation":"indirect"},{"name":"media-typer","errors":[],"version":"0.3.0","relation":"indirect"},{"name":"merge-descriptors","errors":[],"version":"1.0.1","relation":"direct"},{"name":"methods","errors":[],"version":"1.1.2","relation":"direct"},{"name":"mime","errors":[],"version":"1.6.0","relation":"indirect"},{"name":"mime-db","errors":[],"version":"1.52.0","relation":"indirect"},{"name":"mime-types","errors":[],"version":"2.1.35","relation":"indirect"},{"name":"ms","errors":[],"version":"2.0.0","relation":"indirect"},{"name":"ms","errors":[],"version":"2.1.3","relation":"indirect"},{"name":"negotiator","errors":[],"version":"0.6.3","relation":"indirect"},{"name":"object-inspect","errors":[],"version":"1.13.4","relation":"indirect"},{"name":"on-finished","errors":[],"version":"2.4.1","relation":"direct"},{"name":"parseurl","errors":[],"version":"1.3.3","relation":"direct"},{"name":"path-to-regexp","errors":[],"version":"0.1.7","relation":"direct"},{"name":"proxy-addr","errors":[],"version":"2.0.7","relation":"direct"},{"name":"qs","errors":[],"version":"6.11.0","relation":"direct"},{"name":"range-parser","errors":[],"version":"1.2.1","relation":"direct"},{"name":"raw-body","errors":[],"version":"2.5.1","relation":"indirect"},{"name":"safe-buffer","errors":[],"version":"5.2.1","relation":"direct"},{"name":"safer-buffer","errors":[],"version":"2.1.2","relation":"indirect"},{"name":"send","errors":[],"version":"0.18.0","relation":"direct"},{"name":"serve-static","errors":[],"version":"1.15.0","relation":"direct"},{"name":"setprototypeof","errors":[],"version":"1.2.0","relation":"direct"},{"name":"side-channel","errors":[],"version":"1.1.0","relation":"indirect"},{"name":"side-channel-list","errors":[],"version":"1.0.1","relation":"indirect"},{"name":"side-channel-map","errors":[],"version":"1.0.1","relation":"indirect"},{"name":"side-channel-weakmap","errors":[],"version":"1.0.2","relation":"indirect"},{"name":"statuses","errors":[],"version":"2.0.1","relation":"direct"},{"name":"toidentifier","errors":[],"version":"1.0.1","relation":"indirect"},{"name":"type-is","errors":[],"version":"1.6.18","relation":"direct"},{"name":"unpipe","errors":[],"version":"1.0.0","relation":"indirect"},{"name":"utils-merge","errors":[],"version":"1.0.1","relation":"direct"},{"name":"vary","errors":[],"version":"1.1.2","relation":"direct"}],"direct_count":31,"indirect_count":39,"total_dependencies":70},"meta":{"timestamp":"2026-06-01T08:13:18.034Z","request_id":"9218e2d8-bbdc-469f-aeb2-f07c068e19ba"},"status":"ok","message":"Dependencies retrieved","success":true}}}},"401":{"description":"Missing or invalid x-oanor-key header"},"402":{"description":"Active subscription required"},"429":{"description":"Rate-limit or monthly quota reached"},"502":{"description":"Upstream did not respond"}}}},"/v1/project":{"get":{"operationId":"get_v1_project","tags":["Supply chain"],"summary":"OpenSSF Scorecard & repo health","description":"","parameters":[{"name":"id","in":"query","required":true,"description":"Source repo, e.g. github.com/expressjs/express","schema":{"type":"string"},"example":"github.com/expressjs/express"}],"security":[{"oanorKey":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"example":{"data":{"project":{"id":"github.com/expressjs/express","forks":23442,"stars":69057,"license":"MIT","homepage":"https://expressjs.com","scorecard":{"date":"2026-05-18T00:00:00Z","repo":"github.com/expressjs/express","score":8.5,"checks":[{"name":"Maintained","score":10,"reason":"18 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10"},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected"},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected"},{"name":"Code-Review","score":10,"reason":"all changesets reviewed"},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo"},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege"},{"name":"Pinned-Dependencies","score":6,"reason":"dependency not pinned by hash detected -- score normalized to 6"},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected"},{"name":"License","score":10,"reason":"license file detected"},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed"},{"name":"Security-Policy","score":10,"reason":"security policy file detected"},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/score"},{"name":"Signed-Releases","score":-1,"reason":"no releases found"},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits"}]},"description":"Fast, unopinionated, minimalist web framework for node.","open_issues":209}},"meta":{"timestamp":"2026-06-01T08:13:18.113Z","request_id":"b203bcff-9f3b-4990-a485-903e0a7e79f7"},"status":"ok","message":"Project retrieved","success":true}}}},"401":{"description":"Missing or invalid x-oanor-key header"},"402":{"description":"Active subscription required"},"429":{"description":"Rate-limit or monthly quota reached"},"502":{"description":"Upstream did not respond"}}}},"/v1/meta":{"get":{"operationId":"get_v1_meta","tags":["Meta"],"summary":"Usage notes","description":"","parameters":[],"security":[{"oanorKey":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"example":{"data":{"note":"Software supply-chain & dependency intelligence across six ecosystems (system = npm, pypi, maven, cargo, go, nuget). /v1/package?system=npm&name=express = a package's published versions and default version; /v1/version?system=npm&name=express&version=4.18.2 = a version's declared licenses, the keys of any known security advisories, useful links (source repo, homepage, issues) and related projects; /v1/dependencies?system=npm&name=express&version=4.18.2 = the fully RESOLVED transitive dependency graph for that exact version — total dependency count, the direct dependencies and every transitive node (name@version, direct/indirect) — the answer to 'what does installing this actually pull in?'; /v1/project?id=github.com/expressjs/express = a source project's OpenSSF Scorecard (overall score plus per-check scores for things like Maintained, Code-Review, Dangerous-Workflow, Vulnerabilities) together with stars, forks, open issues, license and homepage. For Go packages and Maven artifacts the name is the full module path / group:artifact (URL-encoded automatically). Ideal for dependency auditing, supply-chain risk assessment, SBOM enrichment and license compliance. Data from deps.dev (Google). For a single ecosystem's package metadata see the npm/PyPI/Cargo APIs; for the raw vulnerability database the OSV API.","source":"deps.dev — Google Open Source Insights API (api.deps.dev)","endpoints":["/v1/package","/v1/version","/v1/dependencies","/v1/project","/v1/meta"]},"meta":{"timestamp":"2026-06-01T08:13:18.167Z","request_id":"dcf52b10-f295-4c20-beec-a1e5a2cbc724"},"status":"ok","message":"Meta retrieved","success":true}}}},"401":{"description":"Missing or invalid x-oanor-key header"},"402":{"description":"Active subscription required"},"429":{"description":"Rate-limit or monthly quota reached"},"502":{"description":"Upstream did not respond"}}}}},"x-oanor-pricing":[{"slug":"free","name":"Free","price_cents_month":0,"monthly_call_quota":620,"rps_limit":2,"hard_limit":true},{"slug":"starter","name":"Starter","price_cents_month":650,"monthly_call_quota":23000,"rps_limit":6,"hard_limit":true},{"slug":"pro","name":"Pro","price_cents_month":2000,"monthly_call_quota":99000,"rps_limit":15,"hard_limit":true},{"slug":"mega","name":"Mega","price_cents_month":5600,"monthly_call_quota":430000,"rps_limit":40,"hard_limit":true}],"x-oanor-marketplace-url":"https://www.oanor.com/api/depsdev-api"}