{ "openapi": "3.0.1", "info": { "title": "Dependency Vulnerability Check for Agents", "description": "Check npm, PyPI, Go, Maven, crates.io and other packages (or a package.json / package-lock / requirements.txt / go.mod) against the free OSV.dev database. One row per package and per vulnerability with CVE, CVSS, fixed versions. Built for AI agents. Private Fairquery Actor.", "version": "1.0", "x-build-id": "ctPoCDR8M6dSzGyGM" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/fairquery~osv-dependency-vulnerability-check/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-fairquery-osv-dependency-vulnerability-check", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/fairquery~osv-dependency-vulnerability-check/runs": { "post": { "operationId": "runs-sync-fairquery-osv-dependency-vulnerability-check", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/fairquery~osv-dependency-vulnerability-check/run-sync": { "post": { "operationId": "run-sync-fairquery-osv-dependency-vulnerability-check", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "packages": { "title": "Packages", "type": "array", "description": "List of {\"ecosystem\",\"name\",\"version\"}. Ecosystems use OSV names (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, …); common aliases like pip/golang/cargo are accepted. Maven names are group:artifact.", "default": [ { "ecosystem": "npm", "name": "lodash", "version": "4.17.20" }, { "ecosystem": "PyPI", "name": "django", "version": "3.2.0" } ] }, "manifestText": { "title": "Manifest / lockfile text", "type": "string", "description": "Optional raw content of package.json, package-lock.json (v1–v3), requirements.txt (exact == pins), or go.mod. Packages found are added to the list above.", "default": "" }, "manifestType": { "title": "Manifest type", "enum": [ "auto", "package.json", "package-lock.json", "requirements.txt", "go.mod" ], "type": "string", "description": "Format of manifestText; auto-detected by default.", "default": "auto" }, "minSeverity": { "title": "Minimum severity", "enum": [ "ALL", "LOW", "MEDIUM", "HIGH", "CRITICAL" ], "type": "string", "description": "Only emit vulnerabilities at or above this severity (CVSS v3 base score, else advisory label). Package rows are always emitted.", "default": "ALL" }, "includeUnknownSeverity": { "title": "Include unknown severity", "type": "boolean", "description": "When a minimum severity is set, still emit vulnerabilities whose severity cannot be determined.", "default": true }, "includeDevDependencies": { "title": "Include dev dependencies", "type": "boolean", "description": "Include devDependencies (package.json) / dev packages (package-lock.json).", "default": true }, "maxPackages": { "title": "Max packages", "minimum": 1, "maximum": 10000, "type": "integer", "description": "Safety cap on unique packages checked per run.", "default": 1000 }, "dedupeAliases": { "title": "Deduplicate aliases", "type": "boolean", "description": "Emit one row per real vulnerability: when OSV returns the same issue under several IDs (GHSA / PYSEC / GO / CVE), keep the GHSA record and skip the alias records.", "default": true } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }