HALOWERKPaketwerk
dependency confusion
Takes the names your organisation publishes internally and checks each against the public registry of the same ecosystem. Three findings, kept apart because they call for different actions. Name is free: nobody has taken it, the door is open but unattended, and the answer is to reserve the name yourself. Name is taken and old: probably an unrelated project that happens to share the name, worth confirming but rarely urgent.
POST https://paket.halowerk.com/v1/dependency-confusionEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| system | string | Ja | |
| packages | array | Ja | Your internal package names, optionally with the internal version. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"system",
"packages"
],
"additionalProperties": false,
"properties": {
"system": {
"type": "string",
"enum": [
"npm",
"pypi",
"maven",
"go",
"cargo",
"nuget",
"rubygems"
]
},
"packages": {
"type": "array",
"minItems": 1,
"maxItems": 60,
"description": "Your internal package names, optionally with the internal version.",
"items": {
"type": "object",
"required": [
"name"
],
"additionalProperties": false,
"properties": {
"name": {
"type": "string",
"minLength": 1,
"maxLength": 300
},
"internal_version": {
"type": "string",
"maxLength": 60
}
}
}
}
}
}Veröffentlichtes Eingabebeispiel
{
"system": "npm",
"packages": [
{
"name": "express",
"internal_version": "1.0.0"
},
{
"name": "my-internal-lib-xyz"
}
]
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://paket.halowerk.com/v1/dependency-confusion/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Paketwerk0,003 USDC
artifact hash
POSThttps://paket.halowerk.com/v1/artifact-hashTakes a file digest and answers which released package version it is. Useful for an artefact found in a container layer, a build directory or an attachment with no metadata attached. Hex and base64 input are both accepted and normalised, th
- Paketwerk0,005 USDC
dependency bloat
POSThttps://paket.halowerk.com/v1/dependency-bloatScores how much a package costs to depend on, using the resolved graph rather than a guess. Four measurements: the number of transitive nodes, the maximum depth, how many packages appear at more than one version, and the fan-out of the root
- Paketwerk0,005 USDC
dependency graph
POSThttps://paket.halowerk.com/v1/dependency-graphReturns the resolved dependency graph of one package version across seven ecosystems: every node with its ecosystem, name, resolved version, whether it is bundled, and its depth from the root. Depth is computed as the shortest path from the