{"tool":"deps-advisory","title":"DependencyPulse Advisory","what":"One advisory from OSV by its id or alias (GHSA-..., CVE-..., PYSEC-..., RUSTSEC-...): summary, details, severity (CVSS vectors), aliases, published and modified dates, withdrawn flag, every affected package with its ranges and fixed versions as published, and references.","endpoint":"https://yruz.one/api/deps/advisory","methods":["GET with query parameters","POST with a JSON body (same fields)"],"price":{"model":"fixed","usdc":"0.002"},"params":[{"name":"id","required":true,"description":"advisory id, e.g. GHSA-29mw-wpgm-hmr9 or CVE-2021-23337","example":"GHSA-35jh-r3h4-6jhm"}],"valid_request":{"get":"https://yruz.one/api/deps/advisory?id=GHSA-35jh-r3h4-6jhm","post":{"url":"https://yruz.one/api/deps/advisory","body":{"id":"GHSA-35jh-r3h4-6jhm"}}},"how_to_pay":["1. Send the request without payment: the answer is HTTP 402 with the exact price (x402 v2 in the PAYMENT-REQUIRED header, x402 v1 in the JSON body).","2. Sign one offer of \"accepts\" with an x402 client (USDC on Base eip155:8453 or on Solana mainnet; the facilitator pays the network fee).","3. Resend the identical request (same method, parameters and body) with PAYMENT-SIGNATURE (v2) or X-PAYMENT (v1).","4. The answer carries the receipt in PAYMENT-RESPONSE. Any changed parameter needs a new 402."],"response_shape":{"product":"string","result":{"product":"string","task":"string","task_version":"number","api_version":"string","data":{"id":"string","aliases":["string"],"summary":"string","severity":"string","cvss":[{"type":"string","score":"string"}],"fixed_versions":["string"],"published":"string","modified":"string","withdrawn":"null","url":"string","details":"string","affected":[{"ecosystem":"string","package":"string","ranges_as_published":["…"],"versions_listed":"number"}],"references":[{"type":"string","url":"string"}]},"provenance":[{"source":"string","name":"string","source_url":"string","record_urls":["string"],"retrieved_at":"string","retrieved_until":"string","served_from_cache":"boolean","licence":"string","attribution":"string"}],"data_as_of":"string","freshness_status":"string","coverage":"null","partial":"boolean","warnings":[],"usage":{"units":"number","unit":"string","records":"number","upstream_requests":"number","retries":"number","cache_hits":"number","runtime_ms":"number"}},"payment":{"payment_id":"string","transaction":"string"}},"refusals":{"400":"invalid input: the message names the field and the expected format; nothing is charged","402":"payment required, or the payment was refused (reason in \"error\"); nothing is charged","403/404":"not your item, or the asked item does not exist; nothing is charged","409/422":"not allowed right now (state or destination safety); nothing is charged","503":"a source or the payment rail is unavailable; nothing is charged, retry after Retry-After"},"mcp":{"server":"https://yruz.one/mcp/x402","payment":"params._meta[\"x402/payment\"] = PaymentPayload"},"related":{"tools":[{"tool":"deps-check","url":"https://yruz.one/api/deps/check","why":"advisories of one package version","usd":"0.005","how":"https://yruz.one/api/instructions?tool=deps-check"},{"tool":"deps-batch","url":"https://yruz.one/api/deps/batch","why":"many package versions at 0.002 each","usd":"0.01","how":"https://yruz.one/api/instructions?tool=deps-batch"},{"tool":"deps-audit","url":"https://yruz.one/api/deps/audit","why":"a whole lockfile","usd":"0.025","how":"https://yruz.one/api/instructions?tool=deps-audit"}],"more_x402_apis":{"402index":"https://402index.io","x402scan":"https://www.x402scan.com","agent402":"https://agent402.tools","x402_protocol":"https://www.x402.org"},"all_yruz_tools":"https://yruz.one/api/instructions"}}