{"name":"package-risk-npm","description":"Scores supply-chain risk for an npm package before you install it. Pulls registry metadata + download stats for the package (and optional version) and checks maintainer count, weekly downloads, install / postinstall script hooks, dependency tree depth, deprecation flag, package age, last-publish recency, and edit-distance to popular package names (typosquat). Returns a 0-10 score, risk_level bucket, contributing factors, typosquat candidate list, and a Venice plain-English summary. Use it as an npm supply-chain scanner, typosquat detector, postinstall-script flagger, npm install pre-flight audit, package.json + pnpm-lock.yaml vetter, or Snyk-adjacent / Socket.dev-adjacent pre-install safety gate.","price":"$0.03","method":"POST","input_schema":{"properties":{"package_name":{"type":"string","description":"npm package name. Supports scoped names (e.g. '@types/node', '@vercel/next')."},"version":{"type":"string","description":"Optional specific version (e.g. '4.17.21'). Default: latest tagged version."}},"required":["package_name"]},"input_example":{"package_name":"lodash"},"output_example":{"package_name":"lodash","version":"4.17.21","score":5,"risk_level":"low","summary":"Mature, well-maintained utility library with massive download volume; no install-script hooks; no concerning typosquat candidates.","factors":[{"factor":"downloads_weekly","value":75000000,"weight":"low_risk"},{"factor":"age_days","value":4500,"weight":"low_risk"},{"factor":"has_install_scripts","value":false,"weight":"low_risk"}],"typosquat_candidates":[]},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}