Pypi Trust Pack

Vets a Python package before pip install in one call: supply-chain risk score plus package stats.

Overview

Vets a Python package before pip install in one call: supply-chain risk score plus package stats. Composite: one call runs pypi-package-risk + pypi-package-stats in parallel for any Python package. Returns the 0-10 risk score with risk_level bucket, contributing factors, typosquat candidates, and plain-English summary, plus the raw PyPI metrics: latest version, version count, age, days since last release, author/maintainer, classifiers, and pypistats day/week/month downloads. Includes composed_of + per-component telemetry; partial failure degrades instead of failing. Use it as a pip install pre-flight, typosquat check + downloads + release history bundle, or requirements.txt + pyproject.toml vetting bundle.

Endpoint

Method	Endpoint	Price	Description
POST	/v1/marketplace/api/pypi-trust-pack	$0.046	Invoke Pypi Trust Pack (General) and return the upstream response.

How to call it

Requests are paid per call over the x402 protocol. Call the endpoint, receive a 402 Payment Required quote, then repeat the request with the signed payment header. The SDKs do both steps for you.

# 1. Ask for a quote
curl -i -X POST https://api.jarvisclaw.ai/v1/marketplace/api/pypi-trust-pack \
  -H 'Content-Type: application/json' \
  -d '{}'

# 2. Pay it (the SDK signs and retries for you)
curl -X POST https://api.jarvisclaw.ai/v1/marketplace/api/pypi-trust-pack \
  -H 'Content-Type: application/json' \
  -H 'X-PAYMENT: <signed-payload>' \
  -d '{}'

Open in the marketplace