Directory / lazaretto.dev
lazaretto.dev/v1/scan working
https://lazaretto.dev/v1/scan
Before you pay
- Advice
ok- Protocol
- x402 · http · POST
- Asks for
- 0.03 USDC on base
- Catalogue says
- 0.03 USDC
- Pays to
0x428df107e32E08288fcAC6567f4F40bc4eAB4Da0- Last check
- 5 min ago · 366 ms · HTTP 402
- Detail
- 402 with valid terms
Reliability
- Uptime 24 h
- 100.0%
- Uptime 7 days
- 100.0% (13 checks)
- Uptime 30 days
- 100.0% (signed daily)
- Paid calls 30 d
- 3 from 3 payers (x402 Bazaar)
- Listed by
- x402-bazaar
- First seen
- 2026-11-05 22:08 UTC
Description (from the catalogue, unverified)
Supply chain security scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill or MCP server. Use it when an agent is about to install, clone or connect to something. Matches the target against OSV and OpenSSF advisories to catch known malware, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 and a signed attestation. An errored scan is free.
Signed history
| When | Statement | Log index |
|---|---|---|
| 2026-11-06 00:14 UTC | e2a2703b…55f162 daily summary | 59309 |
Verify any statement offline: how.
For agents and owners
JSON: https://alalanet.com/v1/services/xetycuug3a4c7gmy
Badge:
<a href="https://alalanet.com/s/xetycuug3a4c7gmy"><img src="https://alalanet.com/badge/xetycuug3a4c7gmy" alt="alalanet status"></a>Own this service? Get verified. Do not want it checked? See the prober page.