x402.botsmith.dev

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "additionalProperties": false,
  "properties": {
    "ecosystem": {
      "enum": [
        "npm",
        "pypi"
      ],
      "type": "string"
    },
    "installScripts": {
      "anyOf": [
        {
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        {
          "type": "null"
        }
      ],
      "description": "npm install-time hooks (preinstall/install/postinstall/prepare); null for pypi"
    },
    "latestVersion": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "name": {
      "type": "string"
    },
    "package": {
      "additionalProperties": false,
      "properties": {
        "deprecated": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "Deprecation/yank message when flagged"
        },
        "firstPublishedAt": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "When the package first appeared in the registry"
        },
        "lastPublishedAt": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ]
        },
        "maintainerCount": {
          "anyOf": [
            {
              "maximum": 9007199254740991,
              "minimum": -9007199254740991,
              "type": "integer"
            },
            {
              "type": "null"
            }
          ],
          "description": "npm only; null for pypi"
        },
        "versionCount": {
          "maximum": 9007199254740991,
          "minimum": -9007199254740991,
          "type": "integer"
        },
        "versionPublishedAt": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "required": [
        "firstPublishedAt",
        "versionPublishedAt",
        "lastPublishedAt",
        "versionCount",
        "deprecated",
        "maintainerCount"
      ],
      "type": "object"
    },
    "risk": {
      "additionalProperties": false,
      "properties": {
        "level": {
          "enum": [
            "low",
            "medium",
            "high"
          ],
          "type": "string"
        },
        "reasons": {
          "description": "Human-readable evidence behind the level",
          "items": {
            "type": "string"
          },
          "type": "array"
        }
      },
      "required": [
        "level",
        "reasons"
      ],
      "type": "object"
    },
    "typosquat": {
      "additionalProperties": false,
      "properties": {
        "similarTo": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "Popular package this name imitates, when suspicious"
        },
        "suspicious": {
          "type": "boolean"
        }
      },
      "required": [
        "suspicious",
        "similarTo"
      ],
      "type": "object"
    },
    "version": {
      "description": "The version this verdict applies to",
      "type": "string"
    },
    "vulnerabilities": {
      "description": "Known vulnerabilities affecting this exact version",
      "items": {
        "additionalProperties": false,
        "properties": {
          "aliases": {
            "description": "CVE/GHSA aliases",
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "id": {
            "description": "OSV advisory id",
            "type": "string"
          },
          "severity": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "description": "Severity label or CVSS vector when known"
          },
          "summary": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ]
          }
        },
        "required": [
          "id",
          "aliases",
          "summary",
          "severity"
        ],
        "type": "object"
      },
      "type": "array"
    },
    "weeklyDownloads": {
      "anyOf": [
        {
          "maximum": 9007199254740991,
          "minimum": -9007199254740991,
          "type": "integer"
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "required": [
    "ecosystem",
    "name",
    "version",
    "latestVersion",
    "vulnerabilities",
    "package",
    "installScripts",
    "weeklyDownloads",
    "typosquat",
    "risk"
  ],
  "type": "object"
}