Tool detail

npm-vuln-digest

Returns the newest npm security advisories as structured JSON: severity, CVSS score/vector, CWEs, affected packages, vulnerable ranges and patched versions.

Categories: Security

Use when

check the latest npm package security advisories
poll for new or revised npm CVEs since a given timestamp

Not for

not a single-package vulnerability lookup — returns the newest/most-revised advisories generally
an empty ?since= delta is refused free, not charged

Inputs

GET query param: since (ISO-8601 date/timestamp, optional) — returns only advisories updated after it

Admitted input schema

{
  "type": "object",
  "properties": {
    "since": {
      "type": "string",
      "minLength": 0,
      "maxLength": 4096,
      "description": "ISO-8601 date or timestamp. Returns only advisories whose updated_at is newer than this — normally the generated_at of your previous fetch. An empty delta is refused with a 400 and settles no payment, and so is a since earlier than the build's coverage.delta_complete_since, which would return a silently incomplete delta."
    }
  },
  "required": [],
  "additionalProperties": false
}

Endpoint

Method: GET
URL: https://datastand.dev/api/data/npm-vuln-digest

Payment

Protocol: x402
Listed price: 0.02 USDC per call on Base
Payment method: exact
Network: eip155:8453
Asset: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Listed terms are catalog metadata. The caller supplies inputs and calls the tool outside Onelayer. If payment is required, the caller uses a compatible wallet to pay.

Source

Directory: Coinbase x402 Bazaar
Record: GET https://datastand.dev/api/data/npm-vuln-digest
Retrieved: 2026-09-30T20:37:07.382Z
Catalog file SHA-256: 6837ccddf886f0007cf3727ea9d27faaa5047b51b4f425345c554ce1c271a524
Catalog built: 2026-09-30T22:31:58.034Z