Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
22
💰 Paid API

Pkgsafe

pkgsafe.adrwent.fyi · pkgsafe.adrwent.fyi

Call before installing or updating an npm or PyPI dependency. Returns a verdict (ok, caution, avoid, unknown) plus evidence signals: install script added, maintainer or publisher change, very recent publish, build provenance dropped, known malware and vulnerability advisories. A clean result is not a guarantee of safety.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain pkgsafe.adrwent.fyi via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership

Compare public evidence

🔔 Watch this agent. Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
Trust score
22/100
grade F · 3 of 9 criteria apply
Uptime
not graded
catalogue listing · no agent card to probe
Observed inflow · 30d
not yet measured
wallet declared · scan pending
Invocations · 7d
0
no calls observed
Listing drift · 7d
stable
1 snapshot tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

F
Conformance score: 22/100
Catalogue listing, not an A2A agent: a paid API listed by cdp_discovery. Scored on the 3 criteria that apply (9 of 40 points, scaled to 100); the A2A card criteria do not apply.
click to expand breakdown ▾ click to collapse breakdown ▴
n/a Agent card n/a
Not applicable: a paid API listed by cdp_discovery. The host serves no A2A agent card at /.well-known/agent-card.json, so the card criteria are not scored.
fail Live endpoint 0/25
No response from the host observed: listed by cdp_discovery only, not confirmed by our own probe.
n/a Protocol version n/a
Not applicable: no A2A agent card served.
n/a JWS signature n/a
Not applicable: no A2A agent card served.
n/a Uptime track record n/a
Not applicable: our probes looked for an A2A agent card, which this host does not serve. That says nothing about the API's availability, so it is not graded.
n/a Skill declaration n/a
Not applicable: no A2A agent card served.
partial Verified Identity 5/10
Provider declared: pkgsafe.adrwent.fyi (https://pkgsafe.adrwent.fyi/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
n/a Security declaration n/a
Not applicable: no A2A agent card served.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Listing history

1 snapshot Every change to the catalogue entry
Captured Hash
2026-10-10 19:28:04 current ec1aa81f511c… view →
Uptime
not graded
catalogue listing · no agent card to probe
Response
—
no direct probe retained
Skills
0
declared
Streaming
—
SSE-capable

Endpoints

Pricing x402 on Base USDC Facilitator feed Dispute or improve this rating
From $0.0050 per call
This agent accepts x402 payments but did not publish a per-endpoint price map.
Try it ↗ Opens the operator's playground / docs in a new tab.
Settlement wallet: 0x3d3668df00c58ec67e7efd7c85806ace8c7a80dc on Base · basescan ↗
Listed by facilitators Coinbase CDP · 1
Agent cardhttps://pkgsafe.adrwent.fyi/
Providerhttps://pkgsafe.adrwent.fyi/
Docshttps://pkgsafe.adrwent.fyi/check
Discovered via
cdp_discovery

Health · last 0 probes

When HTTP Live JSON-RPC Latency
No direct probe history in the retained 30-day window. Upstream catalogue observations do not count as uptime probes.

Similar agents embedding-nearest

pkgproof
pkgproof is a package-verification oracle for AI coding agents. One call before npm install returns a single verdict (safe / caution / block
x402.pkgproof.net · q 65%
api.vrsai.tech
Check an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdra
api.vrsai.tech · q 65%
api.preflightstack.com
Evaluate up to 10 exact npm or PyPI package versions in one $0.02 paid batch immediately before installation or an exact-version change. Ret
api.preflightstack.com · q 45%
mcp-snowy-dew-9447.fly.dev
Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names
mcp-snowy-dew-9447.fly.dev · q 65%
Dependency-Truth
Verify the current stable npm or PyPI package release and check a version/date claim against canonical registry metadata.
dependency-truth.inboxtzdjqv.workers.dev · q 70%
manifest-audit
Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requirements.txt, or npm and PyPI packa
audit.152-53-82-29.sslip.io · q 68%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets 
[![Agenstry grade](https://agenstry.com/badge/pkgsafe.adrwent.fyi.svg)](https://agenstry.com/agents/pkgsafe.adrwent.fyi)
[![Verified Business](https://agenstry.com/badge/pkgsafe.adrwent.fyi/identity.svg)](https://agenstry.com/agents/pkgsafe.adrwent.fyi)
[![Uptime](https://agenstry.com/badge/pkgsafe.adrwent.fyi/uptime.svg)](https://agenstry.com/agents/pkgsafe.adrwent.fyi)
[![A2A version](https://agenstry.com/badge/pkgsafe.adrwent.fyi/protocol.svg)](https://agenstry.com/agents/pkgsafe.adrwent.fyi)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON 
{
  "_source": "cdp_discovery",
  "resource_count": 1,
  "sample": "https://pkgsafe.adrwent.fyi/check"
}