dependency_preflight
Check an npm or PyPI package version against OSV known advisories, fetch the latest published release, compare current vs latest advisories, return provenance and actionable cautious upgrade guidance. No package download or code execution; limited beta usage.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"ecosystem": "<ecosystem>",
"package_name": "<package_name>",
"version": "<version>"
},
"name": "dependency_preflight"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| version | Yes | Current exact installed version; not a range. | |
| ecosystem | Yes | Exact OSV ecosystem: npm or PyPI. | |
| package_name | Yes | Canonical registry package name, e.g. lodash, @scope/name, requests. |