pkgpulse

Endpoints (5 live)

• POST /api/deps-audit — Audit an entire dependency map in one call: POST a package.json (or {dependencies} map, or array of names) and every package is checked for registry existence (hallucination guard), deprecation, install scripts, and staleness — summary counts, worst offenders, per-package flags. Up to 40 packages. JSON. (0.02 USDC on Base)
• GET /api/pick — Rank up to 5 alternative npm packages and get a recommendation with the gap quantified: full disclosed-rubric health report per package, close calls flagged as close calls. The 'axios vs got vs undici' decision in one call. Params: ?names=a,b,c. JSON. (0.01 USDC on Base)
• GET /api/typosquat-check — Typosquat / imitation check for an npm package name: edit distance + separator/affix/scope imitation patterns against curated popular packages, risk-graded with the package's own registry facts (age, adoption, install scripts). Catches hallucinated install commands and squat bait BEFORE npm install executes anything. Params: ?name=<package>. JSON. (0.003 USDC on Base)
• GET /api/pick — Rank up to 5 alternative npm packages and get a recommendation with the gap quantified: full disclosed-rubric health report per package, close calls flagged as close calls. The 'axios vs got vs undici' decision in one call. Params: ?names=a,b,c. JSON. (0.01 USDC on Base)
• GET /api/package-health — npm package health score (0-100) with a fully disclosed rubric: maintenance recency, adoption + download trend, license/repository/maintainer integrity, install-script and deprecation flags, GitHub context. Signals it could not fetch are listed, never hidden. The one call an agent makes before adding a dependency. Params: ?name=<package>. JSON. (0.005 USDC on Base)