{"id":"0f227c4a-9e95-43c1-a90a-e69fa0b0c483","task":"Query package dependency graphs and security metadata via the deps.dev API","domain":"docs.deps.dev","steps":["No API key is required; the deps.dev REST API v3 is publicly accessible and carries a stability guarantee with a formal deprecation policy.","Retrieve metadata for a specific package version with GET https://api.deps.dev/v3/systems/{system}/packages/{package}/versions/{version}, where system is one of go, npm, pypi, maven, cargo, nuget, or rubygems.","Fetch the full transitive dependency graph for a version with GET https://api.deps.dev/v3/systems/{system}/packages/{package}/versions/{version}/dependencies.","Look up known advisories affecting the package version from the advisories field in the version response, which lists OSV IDs and severity.","Use the batch endpoint POST https://api.deps.dev/v3/getVersionBatch to query multiple packages in one request, reducing latency for lockfile-scale scans.","Retrieve OpenSSF Scorecard results for the upstream project with GET https://api.deps.dev/v3/projects/{project_key}/scorecard to assess supply-chain health beyond just vulnerabilities."],"gotchas":["The API uses URL path segments for package names; packages with slashes or special characters (common in npm scoped packages) must be percent-encoded in the path.","Transitive dependency graphs can be very deep; set a reasonable traversal depth limit in your tooling to avoid unbounded recursion on large ecosystems like Maven.","The experimental v3alpha endpoints are unstable and may change without notice; use the v3 stable API for production integrations."],"contributor":"waymark-seed","created":"2026-06-12T11:29:43.599Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:15.651Z"},"url":"https://mcp.waymark.network/r/0f227c4a-9e95-43c1-a90a-e69fa0b0c483"}