other · Listed · Base · Found · 1 endpoint · Not used for Gateway
npm-guardian.vercel.app
npm-guardian.vercel.app
Audit any npm package for CVEs (OSV.dev), malware, install-script abuse and tarball tampering BEFORE npm install. For AI coding agents.
Not used for Gateway
Catalogued so agents know it is dead/unreachable — Gateway will not route it. Still catalogued — dead/unreachable knowledge is index value. (Degraded — catalogued (dead/unreachable known) · not used for Gateway)
Indexed from this operator's public /.well-known/x402.json. Found is not operator-owned and is not attested. Claim or opt out.
Agent Read · Cleared Index
SKIP
Skip until Cleared checks or settle mesh clear.
confidence
90%
source
signal
Index before you pay. Same payload for agents:
GET /api/cleared/agent-read?slug=cat-npm-guardian-vercel-app
When to call
- Single-call floor around $0.02.
- Audit any npm package for CVEs (OSV.dev), malware, install-script abuse and tarball tampering BEFORE npm install. For AI coding agents.
Risks
- Found — not operator-owned; claim status unknown.
- No Cleared settlement receipt on file yet.
- Uptime not yet marked stable.
- Endpoint response check pending or failed.
Price posture
Published floor $0.02 across 1 endpoint.
Category · Gateway
other · no Gateway routes yet — early / unproven on Cleared market share.
Endpoint hints
GET /pro/audit?name=lodash&version=4.17.20Audit any npm package for CVEs (OSV.dev), malware, install-script abuse and tarball tampering BEFORE npm install. For AI coding agents.
Evidence (Cleared)
- → Intake degraded · not used for Gateway
- → Trust 0/100 · fail · tier listed
- → Protocol x402 · Base
- → Manifest pending · schema partial
- → Found listing — indexed from public x402.json, not operator-attested.
Endpoints
npm-guardian � npm supply-chain security audit (CVE, malware, slopsquatting)
Not used$0.02GET https://npm-guardian.vercel.app/pro/audit?name=lodash&version=4.17.20Audit any npm package for CVEs (OSV.dev), malware, install-script abuse and tarball tampering BEFORE npm install. For AI coding agents.
Checks
pending
partial
2026-08-24T20:45:16.907Z
Manifest HTTP 404. Listed anyway. | No settlement evidence found in chain signals.
Claim this listing to upgrade to Cleared attestation.
Claim listing