Verify package
verify_packageVerify an npm package before install. Runs eight checks on advisories, install scripts, typosquatting, provenance, and maintainer reputation, returning safe, caution, block, or does_not_exist.
Instructions
Verify an npm package before installing it. Runs eight checks covering advisories, install scripts, typosquat and combosquat names, scope, repository provenance and maintainer reputation, and answers safe, caution, block or does_not_exist with every reason labelled as fact or heuristic against its source. One call is one verification: the first each day is free, and later ones cost $0.05 in USDC when a wallet is configured.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Package name, scoped or not: left-pad, @scope/thing. | |
| version | No | Exact version to verify. Omit to verify the package rather than one release. | |
| ecosystem | No | Package ecosystem. Only npm is supported. | npm |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| reasons | Yes | Every reason behind the verdict. | |
| sources | Yes | The datasets consulted, by name and URL. | |
| verdict | Yes | ||
| version | Yes | The version verified, or null if none was given. | |
| ecosystem | Yes | ||
| checked_at | Yes | When the verdict was computed, ISO 8601 UTC. |