{"name":"dependency-provenance","description":"Dependency risk and supply chain trust for one package in a single call: registry adoption stats, a package risk score, source repo health and star velocity, auto-routed to the right ecosystem. Composite: one call runs npm-package-stats or pypi-package-stats or crates-io-stats, package-risk-npm or pypi-package-risk, github-repo-health, and github-stars-history in parallel, ecosystem-routed from the package name or an explicit ecosystem input. Send a package name and an optional ecosystem or repo override; get back stats, a risk score, repo health and stars trend, merged into one trust view. Use it as a package trust API, an sbom enrichment tool, or a supply-chain risk check before you install a dependency.","price":"$0.06","method":"POST","input_schema":{"properties":{"package":{"type":"string","description":"Package name to look up, e.g. 'hono', 'requests', or 'serde'. Max 214 chars."},"ecosystem":{"type":"string","enum":["npm","pypi","crates"],"description":"Registry ecosystem. If omitted, scoped names ('@scope/name') are inferred as npm and all other names default to npm."},"repo":{"type":"string","description":"Optional 'owner/name' GitHub repo override, used instead of the repo resolved from registry metadata."}},"required":["package"]},"input_example":{"package":"hono","ecosystem":"npm"},"output_example":{"package":"hono","ecosystem":"npm","ecosystem_source":"input","stats":{"package":"hono","name":"hono","latest_version":"4.6.0","downloads":{"last_month":8000000}},"risk":{"package_name":"hono","score":5,"risk_level":"low"},"repo":{"resolved":"honojs/hono","source":"registry_metadata","health":{"repo":"honojs/hono","score":90,"grade":"A"},"stars_trend":{"repo":"honojs/hono","current_stars":20000,"history":[]}},"cves":null,"cves_note":"cve-lookup requires an exact CVE ID and only supports ID-based NVD lookups, not a package-name search, so no CVE lookup was attempted.","composed_of":["npm-package-stats","package-risk-npm","github-repo-health","github-stars-history"],"components":[{"name":"npm-package-stats","ok":true,"ms":300},{"name":"github-repo-health","ok":true,"ms":1200}],"degraded":false},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}