> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hacktron.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get scoped npm package verdict

> Get a fast dependency verdict for a scoped npm package.

Returns a fast dependency verdict for a scoped npm package (for example `@scope/name`), used by GitHub Action scans to flag known-malicious dependencies. The `scope` and `packageName` are separate path segments, and the package `version` is a required query parameter.

For unscoped packages, use [Get package verdict](/api-reference/hfw/get-package-verdict).

<Info>
  This is a public, fast-mode endpoint and does **not** require authentication.
  It is scoped to feed-backed verdicts and normally returns immediately; use
  `wait_seconds` to wait briefly for an upstream verdict.
</Info>


## OpenAPI

````yaml openapi.json GET /hfw/verdict/{ecosystem}/{scope}/{packageName}
openapi: 3.0.0
info:
  title: Hacktron REST API
  description: Public REST API for programmatic access to Hacktron
  version: '1.0'
  contact: {}
servers:
  - url: https://api.hacktron.ai/v1
security:
  - api-key: []
tags: []
paths:
  /hfw/verdict/{ecosystem}/{scope}/{packageName}:
    get:
      tags:
        - REST API - HFW
      summary: Get a fast dependency verdict for scoped npm GitHub Action scans
      operationId: RestHfwController_getScopedNpmPackageVerdict
      parameters:
        - name: version
          required: true
          in: query
          description: Package version to check
          schema:
            type: string
        - name: wait_seconds
          required: false
          in: query
          description: >-
            Seconds to wait for an upstream verdict. Fast mode normally returns
            immediately.
          schema:
            minimum: 0
            maximum: 60
            default: 0
            type: number
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RestHfwVerdictResponseDto'
      security: []
components:
  schemas:
    RestHfwVerdictResponseDto:
      type: object
      properties:
        status:
          type: string
          enum:
            - ready
            - pending
            - scanning
        ecosystem:
          type: string
          enum:
            - npm
            - pypi
        package:
          type: string
        version:
          type: string
        level:
          type: string
          enum:
            - clean
            - suspicious
            - malicious
            - unknown
        confidence:
          type: string
        summary:
          type: string
        findings:
          type: array
          items:
            type: object
        source:
          type: string
        osv_id:
          type: string
      required:
        - status
        - ecosystem
        - package
        - version
        - level
        - confidence
        - summary
        - findings
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: X-Api-Key

````