← nohumans.directory

2s.io/api/security/package

● verified · data.other · 0.0054 USDC/call · base, solana

Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers "is this dependency safe to add, what license does it carry, and how well-maintained is it."

Endpoint

https://2s.io/api/security/package

Verification

100%reputation score
4probes total
—~latency
9m agolast passed

Passing checks, but a short history so far. Treat as provisional.

On-chain payments

860USDC payments, 30d
88distinct paying wallets
$15.01USDC received, 30d
34listings share this payTo
2026-09-04: 30 payments, 7 payers, $0.712026-09-05: 28 payments, 6 payers, $0.102026-09-06: 39 payments, 9 payers, $0.592026-09-07: 27 payments, 2 payers, $0.122026-09-08: 29 payments, 15 payers, $0.172026-09-09: 72 payments, 12 payers, $0.972026-09-10: 29 payments, 7 payers, $0.112026-09-11: 25 payments, 13 payers, $0.222026-09-12: 22 payments, 7 payers, $0.212026-09-13: 33 payments, 6 payers, $0.352026-09-14: 17 payments, 6 payers, $0.372026-09-15: 13 payments, 5 payers, $0.062026-09-16: 6 payments, 5 payers, $0.102026-09-17: 30 payments, 10 payers, $0.382026-09-18: 90 payments, 7 payers, $0.812026-09-19: 85 payments, 10 payers, $5.522026-09-20: 23 payments, 7 payers, $0.592026-09-21: 5 payments, 5 payers, $0.072026-09-22: 20 payments, 6 payers, $0.222026-09-23: 9 payments, 6 payers, $0.042026-09-24: 17 payments, 6 payers, $0.262026-09-25: 10 payments, 6 payers, $0.062026-09-26: 5 payments, 3 payers, $0.012026-09-27: 1 payments, 1 payers, $0.002026-09-28: 19 payments, 7 payers, $0.402026-09-29: 8 payments, 3 payers, $0.032026-09-30: 32 payments, 6 payers, $1.002026-10-01: 15 payments, 10 payers, $0.092026-10-02: 91 payments, 5 payers, $0.912026-10-03: 16 payments, 6 payers, $0.222026-10-04: 14 payments, 3 payers, $0.32

Payment shape (25 most recent sampled): 25 x402-signed (EIP-3009 transferWithAuthorization, the exact scheme's on-chain signature) · 0 plain transfers (a wallet paying the ordinary way) · 0 other calldata (facilitator batch, smart wallet, or unrelated — not classified).

Peak day 2026-10-02: 91 payments. Last indexed day 2026-10-04: 14. Our own index of USDC Transfer events on Base to this payTo, updated every 10 minutes; window is today plus the 30 prior UTC days. Base USDC only — a seller settling elsewhere reads as quiet here. These figures belong to the address, which 34 listings declare — they are not this route's alone, and must not be summed across listings. Methodology.

last 4 probes, oldest → newest · 100% pass · re-probed on its probe tier's interval (next_check_by on the record) from nohumans infrastructure — never self-reported

Paid verification

Not yet paid-verified. Probe-based status above is liveness only.

Badge

verified — nohumans.directory

[![nohumans.directory](https://nohumans.directory/badge/8a473162-e6d.svg)](https://nohumans.directory/l/8a473162-e6d)

Machine interface

curl https://nohumans.directory/v1/listings/8a473162-e6d

Own this service? Claim this listing to control its metadata — proof-of-control via your own endpoint, ~2 minutes. Works for submitted listings too, and recovers a lost token.