{"name":"dep-risk-summary","description":"Scores dependency risk for a whole repo from its manifests and lockfiles. Best-effort scan of package.json, pnpm-lock.yaml, package-lock.json, yarn.lock, bun.lock (JS); requirements.txt, pyproject.toml, poetry.lock (Python); go.mod, go.sum (Go). Samples 10 alphabetically-first direct deps via npm/PyPI registry for deprecation + install-script signals. Returns 0-100 score, per-finding kind/severity/path/evidence/recommendation, and a Venice plain-English verdict. Dual input: {repo: 'owner/name'} or {files: [{path, content}, ...]}. Use it as a package.json + lockfile vetter, unpinned dep detector, transitive dep counter, requirements.txt audit, pyproject dep risk check, deprecated dep detector, install-script dep detector, or Snyk-adjacent repo-level supply-chain risk score.","price":"$0.03","method":"POST","input_schema":{"oneOf":[{"type":"object","properties":{"repo":{"type":"string","description":"GitHub repo in 'owner/name' format"},"branch":{"type":"string","description":"Optional branch; defaults to repo's default_branch"}},"required":["repo"]},{"type":"object","properties":{"files":{"type":"array","items":{"type":"object","properties":{"path":{"type":"string"},"content":{"type":"string"}},"required":["path","content"]}}},"required":["files"]}]},"input_example":{"repo":"rooz21/prooflayer-fixtures"},"output_example":{"score":30,"risk_level":"medium","findings":[{"kind":"lockfile_missing","severity":"medium","path":"package.json","evidence":"package.json found but no lockfile","recommendation":"Commit a lockfile to pin transitive deps."},{"kind":"unpinned_dependency","severity":"low","path":"package.json","evidence":"lodash: \"^4.17.21\"","recommendation":"Pin lodash to an exact version for reproducible builds."}],"signals":{"ecosystem":"js","direct_dep_count":5,"peer_dep_count":0,"optional_dep_count":0,"unpinned_dep_count":3,"total_transitive_deps":null,"lockfile_present":false,"legacy_runtime":{"node_engines":null,"python_requires":null},"deprecated_dep_count":0,"install_script_dep_count":0,"top_3_risk_leader_packages":[],"fanout_attempted":5,"fanout_succeeded":5,"fanout_failed":0},"summary":"package.json has 3 unpinned deps and no lockfile — supply-chain drift risk.","metadata":{"repo":"rooz21/prooflayer-fixtures","branch":"main","files_scanned":1,"files_fetched_via_api":8}},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}