Get a fast dependency verdict for scoped npm GitHub Action scans
Dependency Firewall
Get scoped npm package verdict
Get a fast dependency verdict for a scoped npm package.
GET
Get a fast dependency verdict for scoped npm GitHub Action scans
Returns a fast dependency verdict for a scoped npm package (for example
@scope/name), used by GitHub Action scans to flag known-malicious dependencies. The scope and packageName are separate path segments, and the package version is a required query parameter.
For unscoped packages, use Get package verdict.
This is a public, fast-mode endpoint and does not require authentication.
It is scoped to feed-backed verdicts and normally returns immediately; use
wait_seconds to wait briefly for an upstream verdict.Query Parameters
Package version to check
Seconds to wait for an upstream verdict. Fast mode normally returns immediately.
Required range:
0 <= x <= 60Response
200 - application/json
Available options:
ready, pending, scanning Available options:
npm, pypi Available options:
clean, suspicious, malicious, unknown