Package Exists (free, keyless)
attester_package_existsCheck whether a package name exists on PyPI or npm, and flag typosquatting alternatives within edit distance 2, preventing installation of nonexistent or mistyped packages.
Instructions
WHAT: checks whether a package name really exists in PyPI or npm. On a miss, typosquat_adjacent flags real names within edit distance 2. WHEN: before installing or importing a package a model suggested; published studies measure 5-20% hallucination rates for suggested package names. WHEN NOT: for private packages outside the public registries. COST: free (25 calls/day per client IP shared across the four attester_* demo tools, reset 00:00 UTC; over quota the response points at the paid route). Paid route /v1/package/exists is $0.002 per call. OUTPUT: {exists, latest_version, typosquat_adjacent, adjacent_to, proof: {artifact_sha256, source_url}, attestation, attestation_hash, signature, served_in_ms}.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Package name (e.g. "requests", "lodash"). | |
| ecosystem | Yes | "pypi" or "npm". |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||