package?ecosystem=npm&name=lodash&version=4.17.20

Security and provenance for an open-source package, composed live from three authoritative sources in one call.

Security and provenance for an open-source package, composed live from three authoritative sources in one call. Pass ecosystem (npm, pypi, go, maven, cargo, nuget) + name (+ optional version; defaults to latest). Returns: known vulnerabilities from OSV (osv.dev — aggregates GitHub Security Advisories, PyPA, RustSec, Go vuln DB, etc.) each with its id, CVE aliases, summary, severity, and references; the resolved license and deprecation status (deps.dev); and the source repo's OpenSSF Scorecard health score (overall + per-check) plus stars/forks/open-issues. All live — newly-disclosed advisories appear within hours. Distinct from registry.npm-lookup / pypi-lookup (metadata only): this answers "is this dependency safe to add, what license does it carry, and how well-maintained is it."

UNRATEDListed

Overview

Grade?

UNRATED

0 of 30 paid calls toward a letter

Price

$0.0054 per call

Paid calls

none yet

delivery unknown until someone pays

More info

Seller?

0x2b6d4988…51fc32c5

URL

https://2s.io/api/security/package?ecosystem=npm&name=lodash&version=4.17.20

Seen

first 29 days ago · last 9 hr ago

54 free handshakes

Payment

Pays through

x402

Offered on?

Base USDC, Solana

Listed on?

Base, Solana

Score, from free handshakes onlyweights 2026.09.6

UN
RATED

0.730 liveness verified, no letter

To a letter · 30 paid calls

0 of 30

Held down by latency p95 · gap to 1.000 is 0.270: 0.070 uncertain ? + 0.200 short ? · 0.070 to B

How the composite of 0.730 is made up, part by part
Component	Weight	Measured	Lower bound ?		Adds	Short ?	Uncertain ?
latency p95costs the most it answered as fast as its class	0.20	0.00	0.000		0.000	−0.200	0
liveness it answered at all	0.60	1.00	0.884		0.530	0	−0.070
price stability the price stayed where it was listed	0.20	1.00	1.000		0.200	0	0
Composite	1.00		0.730	gap to 1.000 = 0.270 · 0.200 short · 0.070 uncertain	0.730	−0.200	−0.070

Not measured: correctness · nobody paid; honesty · nobody paid; schema conformance · no answer had a published shape to check

The multiplication, written out

  0.200 × 0.000   latency p95    
+ 0.600 × 0.884   liveness       
+ 0.200 × 1.000   price stability
= 0.730           → UNRATED: 53 of 30 paid calls      weights 2026.09.6 · 53 samples · seed cap_01M1RDABB2M8VA3C4581JNSBB1|2026-09-03T10:11:11.115Z|2026.09.6

Verify it yourselfnpx teppi-check https://2s.io/api/security/package?ecosystem=npm&name=lodash&version=4.17.20curl -s https://api.teppi.xyz/v1/trust/cap_01M1RDABB2M8VA3C4581JNSBB1