Security Advisories for One npm Release (npm Registry Only)

omnial/npm-version-security-advisories

For one npm package at one exact release, lists the published security advisories that affect it. Each advisory has its id, alias ids (CVE and GHSA), a one-line summary, a severity label, the release that fixes it, its publish and last-modified times, and a few reference links. Also returns how many advisories were listed and the highest severity among them. One issue can appear more than once under different ids; the aliases show the overlap.

activeper callv1

Price

Up to $0.0811 per call; you pay what the call used

The price shown is the price you pay. No monthly minimum. Top-ups start at $5.

Data source

OSV

Data from the OSV open source vulnerability database.

Use it

Five steps: search, inspect, learn, run, settle. No per-tool setup; your agent reaches this tool through the meta-tools it already has.

agent

// 1. search: find the tool
omnial_search({ query: "what you need" })

// 2. inspect: price and input schema
omnial_inspect({ tool: "omnial/npm-version-security-advisories" })

// 3. learn: read the usage guide at runtime
omnial_learn({ tool: "omnial/npm-version-security-advisories" })

// 4. run: price the exact call first, then run it
omnial_execute({ tool: "omnial/npm-version-security-advisories", input: { /* see input_schema */ }, dry_run: true })
omnial_execute({ tool: "omnial/npm-version-security-advisories", input: { /* ... */ } })

// 5. settle: the call is charged when it finishes, nothing to do

Not connected yet? Point your MCP client at https://mcp.eden-engine.com/mcp, then copy a config for your client.

Pricing

Every charge this tool can incur.

Charge	Price
Per call	$0.0811

Updated: Oct 14, 2026

Input and output schemas

Input schema

input_schema.json

{
  "type": "object",
  "required": [
    "ecosystem",
    "package_name",
    "version"
  ],
  "properties": {
    "version": {
      "type": "string",
      "minLength": 1,
      "description": "The exact release to check, in major.minor.patch form."
    },
    "ecosystem": {
      "enum": [
        "npm"
      ],
      "type": "string",
      "description": "The package registry. Only npm is offered."
    },
    "package_name": {
      "type": "string",
      "minLength": 1,
      "description": "The package name exactly as published on npm."
    }
  },
  "additionalProperties": false
}

Output schema

output_schema.json

{
  "type": "object",
  "properties": {
    "version": {
      "type": "string",
      "description": "The release checked."
    },
    "ecosystem": {
      "type": "string",
      "description": "The package registry."
    },
    "package_name": {
      "type": "string",
      "description": "The package checked."
    },
    "vulnerabilities": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "The advisory id."
          },
          "aliases": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Other ids for the same issue (CVE and GHSA)."
          },
          "summary": {
            "type": "string",
            "description": "A one-line summary."
          },
          "fixed_in": {
            "type": "string",
            "description": "The release that fixes it."
          },
          "modified": {
            "type": "string",
            "description": "When it last changed (ISO 8601)."
          },
          "severity": {
            "type": "string",
            "description": "A severity label, such as high."
          },
          "published": {
            "type": "string",
            "description": "When it was published (ISO 8601)."
          },
          "references": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "A few reference links, not a complete list."
          }
        }
      },
      "description": "One entry per advisory affecting the release."
    },
    "highest_severity": {
      "type": "string",
      "description": "The highest severity label among the listed advisories."
    },
    "total_vulnerabilities": {
      "type": "number",
      "description": "How many advisories are listed, counting overlapping entries separately."
    }
  },
  "description": "The advisories affecting the given release."
}