package_check

shallow

io.github.yandyman/agent-harbor-x402 · Verify this server

Given an open-source package (PyPI, npm, Go, Cargo, Maven, NuGet or RubyGems) and optionally a version, returns its known vulnerabilities from OSV.dev (IDs, CVE aliases, severity, fixed-in versions), license, latest version, publish date and deprecation status from deps.dev, plus a one-line recommendation. For coding agents to call before adding or upgrading a dependency. Not charged if the package or version does not exist. Costs $0.003 USDC per successful call (x402, eip155:8453); failures are not charged.

100.0/100

1 trials · measured today

package_check scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against io.github.yandyman/agent-harbor-x402, measured 20 Oct 2026 under methodology v0.2.0. Every measured component scored 100.

Component breakdown

ComponentWeightValue
Reliability35%not applicable
Schema integrity25%100.0
Failure behaviour15%not applicable
Latency15%not applicable
Concurrency10%not applicable

Tool details

Transport
remote
Credential class
self-provisionable
Input schema
not declared
Output schema
not declared
Side-effect classification
unclassified

Score history

DayScoreTierMethodology
2026-10-20100.0shallowv0.2.0

Probe evidence

ProbeOutcomes
schema_integritypass: 1

Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.

Embed this score

Available for every tool, scored or not — not a verification perk. Always links back to this page.

Vouch score: package_check
[![Vouch score](https://vouch.tools/api/tools/d40df398-8792-4b8b-a4e5-e033e3caf748/badge.svg)](https://vouch.tools/tools/d40df398-8792-4b8b-a4e5-e033e3caf748)
package_check — Vouch