# ToolMint DevSec Pack

> One call per dependency: package trust + vulnerabilities at that version (OSV, CISA KEV, FIRST EPSS, fix version) + license obligations. For coding and DevSec agents deciding whether to add or upgrade a package.

- Status: Coming soon
- Price: $0.008 / call (x402 exact, USDC on Base eip155:8453, payTo 0xfbF7413bcB3a604936775C96FDbe0b0C9c9E37F5)
- Planned URL: https://toolmint-devsec-pack.toolmint.workers.dev
- OpenAPI: https://toolmint.toolmint.workers.dev/tools/devsec-pack-json/openapi.json

## Routes

- `GET /pack` $0.008: DevSec pack for one dependency: trust (registry, typosquat), vulns at that version (OSV + CISA KEV + FIRST EPSS, fix version) and license obligations (SPDX). Not charged on 4xx/5xx.
- `GET /pack/{eco}/{name}` $0.008: DevSec pack for one dependency: trust (registry, typosquat), vulns at that version (OSV + CISA KEV + FIRST EPSS, fix version) and license obligations (SPDX). Not charged on 4xx/5xx. (by path; ?version=)