find_package
Read-onlyIdempotent
Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems and Packagist. Only packages with something known are listed: with complete true, no match means nothing is known against that name. Pass a result's ecosystem and name to check_package for the details.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| term | Yes | At least two characters of a package name: the full name, or the part people type (log4j-core for org.apache.logging.log4j:log4j-core, core for @angular/core). |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| items | Yes | ||
| complete | Yes |