{
  "capture": {
    "url": "https://tkoqkknsezxavtxfywkm.supabase.co/functions/v1/npm-dependency-risk-x402-v1?package=lodash&version=4.17.20",
    "method": "GET",
    "checkedAt": "2026-10-02T12:21:46.974073+00:00",
    "httpStatus": 402,
    "paymentRequired": {
      "x402Version": 2,
      "error": "Payment required",
      "resource": {
        "url": "https://tkoqkknsezxavtxfywkm.supabase.co/functions/v1/npm-dependency-risk-x402-v1",
        "description": "One-call npm package health plus exact-version OSV vulnerability/fixed-version brief and minimum OSV-clear upgrade version",
        "mimeType": "application/json",
        "serviceName": "Ops Control HQ npm Dependency Risk Brief",
        "tags": [
          "npm",
          "dependency-risk",
          "vulnerabilities",
          "osv",
          "fixed-versions",
          "minimum-safe-version",
          "developer-tools"
        ]
      },
      "accepts": [
        {
          "scheme": "exact",
          "network": "eip155:8453",
          "amount": "20000",
          "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
          "payTo": "0xf200174de10c26ce7670aaf41d69a8979fe5629d",
          "maxTimeoutSeconds": 300,
          "extra": {
            "name": "USD Coin",
            "version": "2"
          }
        }
      ],
      "extensions": {
        "bazaar": {
          "info": {
            "input": {
              "type": "http",
              "queryParams": {
                "package": "lodash",
                "version": "4.17.20"
              },
              "method": "GET"
            },
            "output": {
              "type": "json",
              "example": {
                "package": "lodash",
                "installedVersion": "4.17.20",
                "latestVersion": "4.18.1",
                "minimumSafeVersion": "4.18.0",
                "weeklyDownloads": 0,
                "weeklyDownloadsPeriod": {
                  "start": "YYYY-MM-DD",
                  "end": "YYYY-MM-DD"
                },
                "deprecated": false,
                "vulnerabilityCount": 5,
                "vulnerabilities": [
                  {
                    "id": "GHSA-...",
                    "aliases": [
                      "CVE-..."
                    ],
                    "fixedVersion": "4.17.21",
                    "fixedVersions": [
                      "4.17.21"
                    ]
                  }
                ],
                "signals": [
                  "known_vulnerabilities",
                  "newer_version_available",
                  "safe_upgrade_available"
                ],
                "source": [
                  "npm registry",
                  "npm downloads API",
                  "OSV.dev"
                ],
                "methodology": "Combines current npm metadata with exact-version OSV vulnerability lookup. minimumSafeVersion is the lowest published stable npm version at or above the installed version with zero OSV matches at check time; it is not a security guarantee.",
                "checkedAt": "ISO-8601"
              }
            }
          },
          "schema": {
            "$schema": "https://json-schema.org/draft/2020-12/schema",
            "type": "object",
            "properties": {
              "input": {
                "type": "object",
                "properties": {
                  "type": {
                    "type": "string",
                    "const": "http"
                  },
                  "method": {
                    "type": "string",
                    "enum": [
                      "GET"
                    ]
                  },
                  "queryParams": {
                    "type": "object",
                    "properties": {
                      "package": {
                        "type": "string",
                        "description": "npm package name"
                      },
                      "version": {
                        "type": "string",
                        "description": "exact installed version"
                      }
                    },
                    "required": [
                      "package",
                      "version"
                    ]
                  }
                },
                "required": [
                  "type",
                  "method"
                ],
                "additionalProperties": false
              },
              "output": {
                "type": "object",
                "properties": {
                  "type": {
                    "type": "string"
                  },
                  "example": {
                    "type": "object"
                  }
                },
                "required": [
                  "type"
                ]
              }
            },
            "required": [
              "input"
            ]
          }
        }
      }
    },
    "paymentRequiredHeader": "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",
    "body": "{\"x402Version\":2,\"error\":\"Payment required\",\"resource\":{\"url\":\"https://tkoqkknsezxavtxfywkm.supabase.co/functions/v1/npm-dependency-risk-x402-v1\",\"description\":\"One-call npm package health plus exact-version OSV vulnerability/fixed-version brief and minimum OSV-clear upgrade version\",\"mimeType\":\"application/json\",\"serviceName\":\"Ops Control HQ npm Dependency Risk Brief\",\"tags\":[\"npm\",\"dependency-risk\",\"vulnerabilities\",\"osv\",\"fixed-versions\",\"minimum-safe-version\",\"developer-tools\"]},\"accepts\":[{\"scheme\":\"exact\",\"network\":\"eip155:8453\",\"amount\":\"20000\",\"asset\":\"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\",\"payTo\":\"0xf200174de10c26ce7670aaf41d69a8979fe5629d\",\"maxTimeoutSeconds\":300,\"extra\":{\"name\":\"USD Coin\",\"version\":\"2\"}}],\"extensions\":{\"bazaar\":{\"info\":{\"input\":{\"type\":\"http\",\"queryParams\":{\"package\":\"lodash\",\"version\":\"4.17.20\"},\"method\":\"GET\"},\"output\":{\"type\":\"json\",\"example\":{\"package\":\"lodash\",\"installedVersion\":\"4.17.20\",\"latestVersion\":\"4.18.1\",\"minimumSafeVersion\":\"4.18.0\",\"weeklyDownloads\":0,\"weeklyDownloadsPeriod\":{\"start\":\"YYYY-MM-DD\",\"end\":\"YYYY-MM-DD\"},\"deprecated\":false,\"vulnerabilityCount\":5,\"vulnerabilities\":[{\"id\":\"GHSA-...\",\"aliases\":[\"CVE-...\"],\"fixedVersion\":\"4.17.21\",\"fixedVersions\":[\"4.17.21\"]}],\"signals\":[\"known_vulnerabilities\",\"newer_version_available\",\"safe_upgrade_available\"],\"source\":[\"npm registry\",\"npm downloads API\",\"OSV.dev\"],\"methodology\":\"Combines current npm metadata with exact-version OSV vulnerability lookup. minimumSafeVersion is the lowest published stable npm version at or above the installed version with zero OSV matches at check time; it is not a security guarantee.\",\"checkedAt\":\"ISO-8601\"}}},\"schema\":{\"$schema\":\"https://json-schema.org/draft/2020-12/schema\",\"type\":\"object\",\"properties\":{\"input\":{\"type\":\"object\",\"properties\":{\"type\":{\"type\":\"string\",\"const\":\"http\"},\"method\":{\"type\":\"string\",\"enum\":[\"GET\"]},\"queryParams\":{\"type\":\"object\",\"properties\":{\"package\":{\"type\":\"string\",\"description\":\"npm package name\"},\"version\":{\"type\":\"string\",\"description\":\"exact installed version\"}},\"required\":[\"package\",\"version\"]}},\"required\":[\"type\",\"method\"],\"additionalProperties\":false},\"output\":{\"type\":\"object\",\"properties\":{\"type\":{\"type\":\"string\"},\"example\":{\"type\":\"object\"}},\"required\":[\"type\"]}},\"required\":[\"input\"]}}}}"
  },
  "inspection": {
    "status": "quote_checks_passed",
    "checks": [
      {
        "id": "version",
        "passed": true,
        "detail": "x402Version must be the number 2."
      },
      {
        "id": "resource",
        "passed": true,
        "detail": "Resource must have a public-facing HTTPS URL without embedded credentials. DNS and reachability are not checked here."
      },
      {
        "id": "resource-metadata",
        "passed": true,
        "detail": "Resource description and mimeType must be strings."
      },
      {
        "id": "offers",
        "passed": true,
        "detail": "Accepts must contain 1–50 options for this bounded inspector."
      },
      {
        "id": "supported-option",
        "passed": true,
        "detail": "An exact native-USDC option on Base must be offered. Other networks and schemes are outside this inspector’s scope."
      },
      {
        "id": "selected-terms",
        "passed": true,
        "detail": "At least one supported option must pass all supplied contract checks. Never select a failing option."
      }
    ],
    "options": [
      {
        "index": 0,
        "amountAtomic": "20000",
        "amountUSDC": "0.020000",
        "payTo": "0xf200174de10c26ce7670aaf41d69a8979fe5629d",
        "maxTimeoutSeconds": 300,
        "passed": true,
        "findings": []
      }
    ],
    "excludedOptions": 0,
    "limitation": "Quote structure and supplied terms only. No payment, signature, facilitator, settlement, delivery, endpoint safety or recipient ownership is verified."
  }
}