> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hacktron.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get package verdict

> Get a fast dependency verdict for a package.

Returns a fast dependency verdict for a single package, used by GitHub Action scans to flag known-malicious dependencies. Provide the package `version` as a query parameter.

For scoped npm packages (for example `@scope/name`), use [Get scoped npm package verdict](/api-reference/hfw/get-scoped-npm-verdict) instead.

<Info>
  This is a public, fast-mode endpoint and does **not** require authentication.
  It is scoped to feed-backed verdicts and normally returns immediately; use
  `wait_seconds` to wait briefly for an upstream verdict.
</Info>


## OpenAPI

````yaml openapi.json GET /hfw/verdict/{ecosystem}/{packageName}
openapi: 3.0.0
info:
  title: Hacktron REST API
  description: Public REST API for programmatic access to Hacktron
  version: '1.0'
  contact: {}
servers:
  - url: https://api.hacktron.ai/v1
security:
  - api-key: []
tags: []
paths:
  /hfw/verdict/{ecosystem}/{packageName}:
    get:
      tags:
        - REST API - HFW
      summary: Get a fast dependency verdict for GitHub Action scans
      description: >-
        Public, fast-mode HFW verdict proxy. This endpoint is intentionally
        scoped to feed-backed verdicts and can be moved behind X-Api-Key later.
      operationId: RestHfwController_getPackageVerdict
      parameters:
        - name: version
          required: true
          in: query
          description: Package version to check
          schema:
            type: string
        - name: wait_seconds
          required: false
          in: query
          description: >-
            Seconds to wait for an upstream verdict. Fast mode normally returns
            immediately.
          schema:
            minimum: 0
            maximum: 60
            default: 0
            type: number
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RestHfwVerdictResponseDto'
      security: []
components:
  schemas:
    RestHfwVerdictResponseDto:
      type: object
      properties:
        status:
          type: string
          enum:
            - ready
            - pending
            - scanning
        ecosystem:
          type: string
          enum:
            - npm
            - pypi
        package:
          type: string
        version:
          type: string
        level:
          type: string
          enum:
            - clean
            - suspicious
            - malicious
            - unknown
        confidence:
          type: string
        summary:
          type: string
        findings:
          type: array
          items:
            type: object
        source:
          type: string
        osv_id:
          type: string
      required:
        - status
        - ecosystem
        - package
        - version
        - level
        - confidence
        - summary
        - findings
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: X-Api-Key

````