Skip to main content
GET
Get a fast dependency verdict for scoped npm GitHub Action scans
Returns a fast dependency verdict for a scoped npm package (for example @scope/name), used by GitHub Action scans to flag known-malicious dependencies. The scope and packageName are separate path segments, and the package version is a required query parameter. For unscoped packages, use Get package verdict.
This is a public, fast-mode endpoint and does not require authentication. It is scoped to feed-backed verdicts and normally returns immediately; use wait_seconds to wait briefly for an upstream verdict.

Query Parameters

version
string
required

Package version to check

wait_seconds
number
default:0

Seconds to wait for an upstream verdict. Fast mode normally returns immediately.

Required range: 0 <= x <= 60

Response

200 - application/json
status
enum<string>
required
Available options:
ready,
pending,
scanning
ecosystem
enum<string>
required
Available options:
npm,
pypi
package
string
required
version
string
required
level
enum<string>
required
Available options:
clean,
suspicious,
malicious,
unknown
confidence
string
required
summary
string
required
findings
object[]
required
source
string
osv_id
string