Dependencies

Get Dependency Version Code Roots

get

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

namestringRequired

versionstringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{name}/versions/{version}/code_roots

HTTPcURLJavaScriptPython

GET /api/dependencies/{name}/versions/{version}/code_roots HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "code_root_id": 1,
      "code_root": "text",
      "repository_id": "text",
      "repository_name": "text",
      "repository_org": "text",
      "dependencies_count": 1,
      "latest_activity": "2026-03-18T17:56:35.925Z",
      "technologies": [
        "text"
      ],
      "linked_services": [
        {
          "service_id": 1,
          "name": "text",
          "application_params": "text",
          "application": "text"
        }
      ],
      "source": "text",
      "language": "text",
      "language_version": "text"
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Global Dependencies

get

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Bodyany of[]

application/json

or

or

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies

HTTPcURLJavaScriptPython

GET /api/dependencies HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 58

[
  {
    "name": "text",
    "lt": 1,
    "lte": 1,
    "gt": 1,
    "gte": 1,
    "equals": 1
  }
]

{
  "items": [
    {
      "package_name": "text",
      "version_count": 1,
      "raw_license": "text",
      "normalized_license": {
        "operand": "text",
        "licenses": [
          "text"
        ]
      },
      "license_allowed": "Approved",
      "hygiene_score": 1,
      "total_modules": 1,
      "first_party": true,
      "third_party": true,
      "direct": true,
      "transitive": true,
      "open_source": true,
      "vendor": true,
      "unmaintained": true,
      "package_ecosystem": "default",
      "is_reachable": true
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Global Dependencies

post

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Bodyany of[]

application/json

or

or

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

post

/api/dependencies

HTTPcURLJavaScriptPython

POST /api/dependencies HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 58

[
  {
    "name": "text",
    "lt": 1,
    "lte": 1,
    "gt": 1,
    "gte": 1,
    "equals": 1
  }
]

{
  "items": [
    {
      "package_name": "text",
      "version_count": 1,
      "raw_license": "text",
      "normalized_license": {
        "operand": "text",
        "licenses": [
          "text"
        ]
      },
      "license_allowed": "Approved",
      "hygiene_score": 1,
      "total_modules": 1,
      "first_party": true,
      "third_party": true,
      "direct": true,
      "transitive": true,
      "open_source": true,
      "vendor": true,
      "unmaintained": true,
      "package_ecosystem": "default",
      "is_reachable": true
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Dependency Versions

get

This endpoint is now deprecated.

Please use /api/dependencies/{package_name}/usage for the "Versions" tab in the Global Dependencies Details view.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Bodyany of[]

application/json

or

or

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/versions

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/versions HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 58

[
  {
    "name": "text",
    "lt": 1,
    "lte": 1,
    "gt": 1,
    "gte": 1,
    "equals": 1
  }
]

{
  "items": [
    {
      "version": "text",
      "critical_findings": 1,
      "high_findings": 1,
      "medium_findings": 1,
      "low_findings": 1,
      "affected_modules": 1,
      "release_date": "2026-03-18T17:56:35.925Z",
      "first_seen": "2026-03-18T17:56:35.925Z"
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Dependency Versions

post

This endpoint is now deprecated.

Please use /api/dependencies/{package_name}/usage for the "Versions" tab in the Global Dependencies Details view.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Bodyany of[]

application/json

or

or

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

post

/api/dependencies/{package_name}/versions

HTTPcURLJavaScriptPython

POST /api/dependencies/{package_name}/versions HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 58

[
  {
    "name": "text",
    "lt": 1,
    "lte": 1,
    "gt": 1,
    "gte": 1,
    "equals": 1
  }
]

{
  "items": [
    {
      "version": "text",
      "critical_findings": 1,
      "high_findings": 1,
      "medium_findings": 1,
      "low_findings": 1,
      "affected_modules": 1,
      "release_date": "2026-03-18T17:56:35.925Z",
      "first_seen": "2026-03-18T17:56:35.925Z"
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Generate Sbom

post

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

200

Successful Response

application/json

Represents a CycloneDX SBOM (Software Bill of Materials) format.

See: https://cyclonedx.org/docs/1.6/json/

bomFormatstringRequired

serialNumberany ofOptional

stringOptional

or

nullOptional

specVersionstringOptionalDefault: 1.6

versionany ofOptional

integerOptional

or

nullOptional

404

Not found

post

/api/dependencies/global_sbom

HTTPcURLJavaScriptPython

POST /api/dependencies/global_sbom HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "bomFormat": "text",
  "components": [
    {
      "type": "application",
      "name": "text",
      "version": "text",
      "bom-ref": "text",
      "purl": "text",
      "group": "text",
      "properties": [
        {
          "name": "text",
          "value": "text"
        }
      ],
      "components": [
        {
          "type": "application",
          "name": "text",
          "version": "text",
          "bom-ref": "text",
          "purl": "text",
          "group": "text",
          "properties": [
            {
              "name": "text",
              "value": "text"
            }
          ],
          "components": [
            "[Circular Reference]"
          ]
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "text",
      "dependsOn": [
        "text"
      ]
    }
  ],
  "metadata": {
    "ANY_ADDITIONAL_PROPERTY": "anything"
  },
  "serialNumber": "text",
  "specVersion": "1.6",
  "version": 1
}

Get Dependency Terms

get

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

200

Successful Response

application/json

404

Not found

get

/api/dependencies/_terms

HTTPcURLJavaScriptPython

GET /api/dependencies/_terms HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "terms": [
    {
      "name": "text",
      "lazy_load": false,
      "depends_on": [
        "text"
      ],
      "type": "Int",
      "terms": [
        {
          "lowerBound": 1,
          "upperBound": 1,
          "count": 1
        }
      ]
    }
  ]
}

Get Dependency Package Modules

get

Get all modules that use a specific package.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Body

application/json

or

nullOptional

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/modules

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/modules HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 58

[
  {
    "name": "text",
    "lt": 1,
    "lte": 1,
    "gt": 1,
    "gte": 1,
    "equals": 1
  }
]

{
  "items": [
    {
      "code_root_id": 1,
      "code_root": "text",
      "repository": {
        "repository_id": "text",
        "name": "text",
        "organization": "text",
        "source": "text",
        "html_url": "text"
      },
      "remediations_count": 1,
      "latest_activity": "2026-03-18T17:56:35.925Z",
      "technologies": [
        "text"
      ],
      "linked_services": [
        {
          "service_id": 1,
          "name": "text",
          "application_params": "text",
          "application": "text"
        }
      ],
      "source": "text",
      "finding_counts": {
        "total": 1,
        "critical": 1,
        "high": 1,
        "medium": 1,
        "low": 1
      },
      "tech_leads": [
        {
          "id": 1,
          "name": "text",
          "email": "text",
          "alternate_emails": [
            "text"
          ],
          "is_hidden": true
        }
      ],
      "security_leads": [
        {
          "id": 1,
          "name": "text",
          "email": "text",
          "alternate_emails": [
            "text"
          ],
          "is_hidden": true
        }
      ],
      "language": "text",
      "language_version": "text",
      "dependency_version": "text",
      "dependency_introduced": "2026-03-18T17:56:35.925Z"
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Dependency Package Modules

post

Get all modules that use a specific package.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Body

application/json

or

nullOptional

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

post

/api/dependencies/{package_name}/modules

HTTPcURLJavaScriptPython

POST /api/dependencies/{package_name}/modules HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 58

[
  {
    "name": "text",
    "lt": 1,
    "lte": 1,
    "gt": 1,
    "gte": 1,
    "equals": 1
  }
]

{
  "items": [
    {
      "code_root_id": 1,
      "code_root": "text",
      "repository": {
        "repository_id": "text",
        "name": "text",
        "organization": "text",
        "source": "text",
        "html_url": "text"
      },
      "remediations_count": 1,
      "latest_activity": "2026-03-18T17:56:35.925Z",
      "technologies": [
        "text"
      ],
      "linked_services": [
        {
          "service_id": 1,
          "name": "text",
          "application_params": "text",
          "application": "text"
        }
      ],
      "source": "text",
      "finding_counts": {
        "total": 1,
        "critical": 1,
        "high": 1,
        "medium": 1,
        "low": 1
      },
      "tech_leads": [
        {
          "id": 1,
          "name": "text",
          "email": "text",
          "alternate_emails": [
            "text"
          ],
          "is_hidden": true
        }
      ],
      "security_leads": [
        {
          "id": 1,
          "name": "text",
          "email": "text",
          "alternate_emails": [
            "text"
          ],
          "is_hidden": true
        }
      ],
      "language": "text",
      "language_version": "text",
      "dependency_version": "text",
      "dependency_introduced": "2026-03-18T17:56:35.925Z"
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Dependency Package Modules Terms

get

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Responses

200

Successful Response

application/json

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/modules/_terms

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/modules/_terms HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "terms": [
    {
      "name": "text",
      "lazy_load": false,
      "depends_on": [
        "text"
      ],
      "type": "Int",
      "terms": [
        {
          "lowerBound": 1,
          "upperBound": 1,
          "count": 1
        }
      ]
    }
  ]
}

Get Dependency Package Deployments

get

Get all deployments/services that are running a specific package.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/deployments

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/deployments HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "service_id": 1,
      "service_name": "text",
      "resource": "text",
      "changeset": "text",
      "container_tag": "text",
      "environment": "text",
      "findings_count": 1,
      "vuln_count": 1,
      "secret_count": 1,
      "critical_findings_count": 1,
      "high_findings_count": 1,
      "medium_findings_count": 1,
      "low_findings_count": 1,
      "info_findings_count": 1,
      "accessibility": [
        "text"
      ]
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}

Get Dependency Summary

get

Get a summary card for a specific dependency package version, optionally scoped to a service.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

code_root_idintegerRequired

versionstringRequired

package_namestringRequired

Query parameters

service_idany ofOptional

integerOptional

or

nullOptional

Responses

200

Successful Response

application/json

Summary card for a specific version of a dependency at a code root.

Includes:

• Temporal data (release_date, first_seen)
• Findings broken down by PRIORITY (urgent/planned/deferred)

package_namestringRequired

repository_urlany ofOptional

stringOptional

or

nullOptional

module_countintegerRequired

licenseany ofRequired

or

nullOptional

package_ecosystemany ofRequired

string · enumOptional

An enumeration of supported package ecosystems.

An ecosystem is defined as a repository of packages such as PyPi or Maven Central. This is distinct from a package manager (e.g. yarn, conda), which is a tool that can interact with one or more ecosystems.

Possible values:

or

nullOptional

artifact_sourceany ofRequired

stringOptional

or

nullOptional

current_findings_countintegerOptionalDefault: 0

previous_month_findings_countintegerOptionalDefault: 0

findings_change_percentageany ofRequired

numberOptional

or

nullOptional

remediations_countintegerOptionalDefault: 0

services_countintegerOptionalDefault: 0

deployments_countintegerOptionalDefault: 0

found_in_codebooleanOptionalDefault: false

found_at_runtimebooleanOptionalDefault: false

release_dateany ofOptional

string · date-timeOptional

or

nullOptional

first_seenany ofOptional

string · date-timeOptional

or

nullOptional

urgent_findings_countintegerOptionalDefault: 0

planned_findings_countintegerOptionalDefault: 0

deferred_findings_countintegerOptionalDefault: 0

404

Not found

422

Validation Error

application/json

get

/api/dependencies/code_roots/{code_root_id}/{package_name}/versions/{version}/summary

HTTPcURLJavaScriptPython

GET /api/dependencies/code_roots/{code_root_id}/{package_name}/versions/{version}/summary HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "package_name": "text",
  "repository_url": "text",
  "module_count": 1,
  "license": {
    "operand": "text",
    "licenses": [
      "text"
    ]
  },
  "package_ecosystem": "default",
  "artifact_source": "text",
  "current_findings_count": 0,
  "previous_month_findings_count": 0,
  "findings_change_percentage": 1,
  "remediations_count": 0,
  "services_count": 0,
  "deployments_count": 0,
  "found_in_code": false,
  "found_at_runtime": false,
  "release_date": "2026-03-18T17:56:35.925Z",
  "first_seen": "2026-03-18T17:56:35.925Z",
  "urgent_findings_count": 0,
  "planned_findings_count": 0,
  "deferred_findings_count": 0
}

Get Package Summary

get

Get a summary card for all versions of a dependency package (not scoped to a specific version or service).

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Responses

200

Successful Response

application/json

Summary card for all versions of a dependency across the organization.

Includes:

• Version count
• Findings broken down by SEVERITY (critical/high/medium/low)

package_namestringRequired

repository_urlany ofOptional

stringOptional

or

nullOptional

module_countintegerRequired

licenseany ofRequired

or

nullOptional

package_ecosystemany ofRequired

string · enumOptional

An enumeration of supported package ecosystems.

An ecosystem is defined as a repository of packages such as PyPi or Maven Central. This is distinct from a package manager (e.g. yarn, conda), which is a tool that can interact with one or more ecosystems.

Possible values:

or

nullOptional

artifact_sourceany ofRequired

stringOptional

or

nullOptional

current_findings_countintegerOptionalDefault: 0

previous_month_findings_countintegerOptionalDefault: 0

findings_change_percentageany ofRequired

numberOptional

or

nullOptional

remediations_countintegerOptionalDefault: 0

services_countintegerOptionalDefault: 0

deployments_countintegerOptionalDefault: 0

found_in_codebooleanOptionalDefault: false

found_at_runtimebooleanOptionalDefault: false

version_countintegerOptionalDefault: 0

critical_findings_countintegerOptionalDefault: 0

high_findings_countintegerOptionalDefault: 0

medium_findings_countintegerOptionalDefault: 0

low_findings_countintegerOptionalDefault: 0

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/summary

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/summary HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "package_name": "text",
  "repository_url": "text",
  "module_count": 1,
  "license": {
    "operand": "text",
    "licenses": [
      "text"
    ]
  },
  "package_ecosystem": "default",
  "artifact_source": "text",
  "current_findings_count": 0,
  "previous_month_findings_count": 0,
  "findings_change_percentage": 1,
  "remediations_count": 0,
  "services_count": 0,
  "deployments_count": 0,
  "found_in_code": false,
  "found_at_runtime": false,
  "version_count": 0,
  "critical_findings_count": 0,
  "high_findings_count": 0,
  "medium_findings_count": 0,
  "low_findings_count": 0
}

Get Dependency Hygiene Summary

get

Get OSSF Scorecard hygiene scores for a dependency package. Returns None if no OSSF report is available.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

code_root_idintegerRequired

versionstringRequired

package_namestringRequired

Responses

200

Successful Response

application/json

or

nullOptional

404

Not found

422

Validation Error

application/json

get

/api/dependencies/code_roots/{code_root_id}/{package_name}/versions/{version}/hygiene_summary

HTTPcURLJavaScriptPython

GET /api/dependencies/code_roots/{code_root_id}/{package_name}/versions/{version}/hygiene_summary HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "overall": 1,
  "code": {
    "pinned_dependencies": 1,
    "code_review": 1,
    "branch_protection": 1,
    "binary_artifacts": 1
  },
  "build": {
    "packaging": 1,
    "token_permissions": 1,
    "signed_releases": 1,
    "dangerous_workflows": 1
  },
  "maintenance": {
    "maintained": 1,
    "cii_best_practices": 1,
    "license": 1,
    "security_policy": 1
  },
  "testing": {
    "fuzzing": 1,
    "sast": 1
  },
  "vulnerabilities": {
    "vulnerabilities": 1
  }
}

Get Global Dependency Hygiene Summary

get

Get OSSF Scorecard hygiene scores for a dependency package. Returns None if no OSSF report is available.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Responses

200

Successful Response

application/json

or

nullOptional

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/hygiene_summary

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/hygiene_summary HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "overall": 1,
  "code": {
    "pinned_dependencies": 1,
    "code_review": 1,
    "branch_protection": 1,
    "binary_artifacts": 1
  },
  "build": {
    "packaging": 1,
    "token_permissions": 1,
    "signed_releases": 1,
    "dangerous_workflows": 1
  },
  "maintenance": {
    "maintained": 1,
    "cii_best_practices": 1,
    "license": 1,
    "security_policy": 1
  },
  "testing": {
    "fuzzing": 1,
    "sast": 1
  },
  "vulnerabilities": {
    "vulnerabilities": 1
  }
}

Get Dependency Activity Timeline

get

Get a timeline of version changes for a dependency in a code root.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

code_root_idintegerRequired

package_namestringRequired

versionstringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Responses

200

Successful Response

application/json

A timeline of activity items for a dependency package.

totalintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/code_roots/{code_root_id}/{package_name}/versions/{version}/activity_timeline

HTTPcURLJavaScriptPython

GET /api/dependencies/code_roots/{code_root_id}/{package_name}/versions/{version}/activity_timeline HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "version": "text",
      "author_email": "text",
      "author_name": "text",
      "commit_sha": "text",
      "commit_url": "text",
      "timestamp": "2026-03-18T17:56:35.925Z",
      "is_current": true,
      "code_root_id": 1,
      "repo_source": "text"
    }
  ],
  "total": 1
}

Get Global Dependency Activity Timeline

get

Get a global timeline of version activity for a dependency package.

Not scoped to a specific code root or version. Shows all versions of the package across code roots with commit and author information.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Responses

200

Successful Response

application/json

A timeline of activity items for a dependency package.

totalintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/activity_timeline

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/activity_timeline HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "version": "text",
      "author_email": "text",
      "author_name": "text",
      "commit_sha": "text",
      "commit_url": "text",
      "timestamp": "2026-03-18T17:56:35.925Z",
      "is_current": true,
      "code_root_id": 1,
      "repo_source": "text"
    }
  ],
  "total": 1
}

Get Version Modules

get

Given a specific Package Name, index and return a list of all modules that use it, along with the version they use.

A module is a package within a code root (application path).

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Responses

200

Successful Response

application/json

A list of modules using a package.

totalintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/modules_list

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/modules_list HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "code_root_id": 1,
      "repo_id": "text",
      "file": "text",
      "path": "text",
      "version": "text"
    }
  ],
  "total": 1
}

Get Dependency Version Usage Summary

get

Get usage summary of all versions of a dependency package across code roots. Shows how many code roots are using each version of the package, along with findings counts, release date, and when the version was first seen.

Authorizations

HTTPBearer

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

package_namestringRequired

Query parameters

pageintegerOptionalDefault: 0

limitinteger · min: 1OptionalDefault: 100

orderany ofOptional

stringOptional

or

nullOptional

ordersany ofOptional

string[]Optional

or

nullOptional

directionany ofOptional

stringOptional

or

nullOptional

searchany ofOptional

stringOptional

or

nullOptional

Responses

200

Successful Response

application/json

totalintegerRequired

pagesintegerRequired

page_sizeintegerRequired

page_numberintegerRequired

404

Not found

422

Validation Error

application/json

get

/api/dependencies/{package_name}/usage

HTTPcURLJavaScriptPython

GET /api/dependencies/{package_name}/usage HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "package_name": "text",
      "version": "text",
      "usage_count": 1,
      "critical_findings": 1,
      "high_findings": 1,
      "medium_findings": 1,
      "low_findings": 1,
      "first_seen": "2026-03-18T17:56:35.925Z",
      "release_date": "2026-03-18T17:56:35.925Z"
    }
  ],
  "total": 1,
  "pages": 1,
  "page_size": 1,
  "page_number": 1
}