Osv Scan
osv_scan_batchRead-onlyIdempotent
Dependency vulnerability scan (SCA) via OSV.dev querybatch: send up to 500 packages, or paste a lockfile (package-lock.json, yarn.lock, composer.lock, requirements.txt, Pipfile.lock, poetry.lock, uv.lock, Cargo.lock, go.mod, go.sum, Gemfile.lock; auto-detected). Returns a severity summary plus, per vulnerable package, advisories with CVE aliases, CVSS, fixed versions and a heuristic safe upgrade. 256 KB body limit. Price: $0.02 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/osv-scan
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| details | No | Fetch full advisory details (default true; up to 60 per call, cached) | |
| lockfile | No | Alternative: the full text of a lockfile/manifest | |
| packages | No | Array of {ecosystem, name, version} or {purl} objects (max 500) | |
| lockfileType | No | Optional override: package-lock.json, yarn.lock, composer.lock, requirements.txt, Pipfile.lock, poetry.lock, uv.lock, Cargo.lock, go.mod, go.sum, Gemfile.lock | |
| onlyVulnerable | No | Return only vulnerable packages (default false) |