Skip to main content
GET
Get a fast dependency verdict for GitHub Action scans
Returns a fast dependency verdict for a single package, used by GitHub Action scans to flag known-malicious dependencies. Provide the package version as a query parameter. For scoped npm packages (for example @scope/name), use Get scoped npm package verdict instead.
This is a public, fast-mode endpoint and does not require authentication. It is scoped to feed-backed verdicts and normally returns immediately; use wait_seconds to wait briefly for an upstream verdict.

Query Parameters

version
string
required

Package version to check

wait_seconds
number
default:0

Seconds to wait for an upstream verdict. Fast mode normally returns immediately.

Required range: 0 <= x <= 60

Response

200 - application/json
status
enum<string>
required
Available options:
ready,
pending,
scanning
ecosystem
enum<string>
required
Available options:
npm,
pypi
package
string
required
version
string
required
level
enum<string>
required
Available options:
clean,
suspicious,
malicious,
unknown
confidence
string
required
summary
string
required
findings
object[]
required
source
string
osv_id
string