Tool detail
manifest-audit
Audits an npm/PyPI dependency manifest (package.json, requirements.txt, or explicit package lists) and returns per-dependency version, license, deprecation/yanked status, downloads and OSV vulnerabilities.
Categories: Security
Use when
- check a package.json or requirements.txt for vulnerabilities before installing
- audit an npm or PyPI dependency list for outdated or yanked packages
- review a lockfile change for license or deprecation risk
Not for
- not a live install or execution — static analysis only, up to 50 packages
Inputs
POST JSON body: manifest (raw text) or dependencies/devDependencies (objects) or npm/pypi (string arrays, e.g. '[email protected]'); all optional, no single required field.
Inputs undocumented: open object without declared properties
Endpoint
- Method
POST- URL
https://audit.152-53-82-29.sslip.io/v1/audit
Payment
- Protocol
- x402
- Listed price
- 0.01 USDC per request on Base
- Payment method
- exact
- Network
- eip155:8453
- Asset
- 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Listed terms are catalog metadata. The caller supplies inputs and calls the tool outside Onelayer. If payment is required, the caller uses a compatible wallet to pay.
Source
- Directory
- Coinbase x402 Bazaar
- Record
- POST https://audit.152-53-82-29.sslip.io/v1/audit
- Retrieved
- 2026-09-30T20:37:07.382Z
- Catalog file SHA-256
6837ccddf886f0007cf3727ea9d27faaa5047b51b4f425345c554ce1c271a524- Catalog built
- 2026-09-30T22:31:58.034Z