Packages
packagesSearch and inspect software packages in npm, PyPI, Go, Maven, Cargo, NuGet, and RubyGems. Retrieve version history, licenses, security advisories, dependency graphs, and OpenSSF Scorecards.
Instructions
Search and inspect software packages across language ecosystems via deps.dev.
Use this for package lookups: get version history, licenses, security advisories, dependency graphs, OpenSSF Scorecards, and SLSA provenance data. Covers 7 ecosystems: npm, PyPI, Go, Maven, Cargo, NuGet, and RubyGems.
Actions: package, version, dependencies, project, advisory.
Query formats:
package/version/dependencies: ecosystem/name[@version] (e.g. "pypi/requests", "npm/express@4.18.2")
project: github.com/owner/repo (e.g. "github.com/psf/requests")
advisory: advisory ID (e.g. "GHSA-9hjg-9r4m-mvj7")
Ecosystem aliases: pypi, npm, cargo/crates, go/golang, maven, nuget, rubygems/gems.
For repository details (README, issues, code), use web_fetch_incisive or github.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Query format depends on action. For package/version/dependencies: ecosystem/name[@version] where ecosystem is one of: pypi, npm, cargo, go, maven, nuget, rubygems. For project: github.com/owner/repo. For advisory: advisory ID (e.g. GHSA-9hjg-9r4m-mvj7). | |
| action | Yes | The operation to perform. package: get package info and recent versions (query: ecosystem/name, e.g. pypi/requests). version: get specific version details with license and advisories (query: ecosystem/name@version, e.g. pypi/requests@2.32.3). dependencies: get dependency graph with resolved versions (query: ecosystem/name@version). project: get repo health and OpenSSF Scorecard (query: github.com/owner/repo, e.g. github.com/psf/requests). advisory: get security advisory details (query: advisory ID, e.g. GHSA-9hjg-9r4m-mvj7). |