Get a fast dependency verdict for GitHub Action scans
Dependency Firewall
Get package verdict
Get a fast dependency verdict for a package.
GET
Get a fast dependency verdict for GitHub Action scans
Returns a fast dependency verdict for a single package, used by GitHub Action scans to flag known-malicious dependencies. Provide the package
version as a query parameter.
For scoped npm packages (for example @scope/name), use Get scoped npm package verdict instead.
This is a public, fast-mode endpoint and does not require authentication.
It is scoped to feed-backed verdicts and normally returns immediately; use
wait_seconds to wait briefly for an upstream verdict.Query Parameters
Package version to check
Seconds to wait for an upstream verdict. Fast mode normally returns immediately.
Required range:
0 <= x <= 60Response
200 - application/json
Available options:
ready, pending, scanning Available options:
npm, pypi Available options:
clean, suspicious, malicious, unknown